https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2026-96185.htmlhttps://patchthecve.com/cve/CVE-2026-96185.htmlSat, 24 Oct 2026 04:18:28 +0000HIGH 7.5: Stack-based buffer overflow in Microsoft Exchange Online allows an authorized attacker to execute code over a network.https://patchthecve.com/cve/CVE-2026-108456.htmlhttps://patchthecve.com/cve/CVE-2026-108456.htmlSat, 24 Oct 2026 04:18:16 +0000HIGH 7.7: Server-side request forgery (ssrf) in Azure AI Foundry allows an authorized attacker to elevate privileges over a network.https://patchthecve.com/cve/CVE-2026-105014.htmlhttps://patchthecve.com/cve/CVE-2026-105014.htmlSat, 24 Oct 2026 04:18:16 +0000CRITICAL 9.1: Improper neutralization of special elements used in a command ('command injection') in Azure Pipelines allows an unauthorized attacker to execute code over a network.https://patchthecve.com/cve/CVE-2026-105933.htmlhttps://patchthecve.com/cve/CVE-2026-105933.htmlFri, 23 Oct 2026 23:17:36 +0000LOW 2.3: Apache Pulsar allows an administrator to require end-to-end message encryption for all topics in a namespace by setting the encryption_required namespace policy. When this policy is set, the broker rejects messages that are published without encryption. When the broker loads a persistent topic, it https://patchthecve.com/cve/CVE-2026-105932.htmlhttps://patchthecve.com/cve/CVE-2026-105932.htmlFri, 23 Oct 2026 23:17:36 +0000LOW 2.3: The Apache Pulsar broker admin REST API provides endpoints to read, set and remove the topic-level entry filter policy of a topic. For persistent topics these endpoints check that the caller is authorized for the entry filters topic policy operation. The corresponding endpoints for non-persistent tohttps://patchthecve.com/cve/CVE-2023-4050.htmlhttps://patchthecve.com/cve/CVE-2023-4050.htmlFri, 23 Oct 2026 23:10:00 +0000HIGH 7.5: In some cases, an untrusted input stream was copied to a stack buffer without checking its size. This resulted in a potentially exploitable crash which could have led to a sandbox escape. This vulnerability affects Firefox < 116, Firefox ESR < 102.14, and Firefox ESR < 115.1.https://patchthecve.com/cve/CVE-2026-33267.htmlhttps://patchthecve.com/cve/CVE-2026-33267.htmlFri, 23 Oct 2026 23:10:00 +0000CRITICAL 10.0: Improper Input Validation vulnerability in Apache Traffic Server. This issue affects Apache Traffic Server: from 9.2.0 through 9.2.14, from 10.1.0 through 10.1.3. Users are recommended to upgrade to version 9.2.15 or 10.1.4, which fixes the issue.https://patchthecve.com/cve/CVE-2026-59243.htmlhttps://patchthecve.com/cve/CVE-2026-59243.htmlFri, 23 Oct 2026 23:10:00 +0000CRITICAL 9.8: The FAB auth manager's Azure AD OAuth login defaulted `verify_signature=False` when decoding the ID token, so an attacker able to present a forged or unsigned (`alg:none`) ID token to the OAuth callback could bypass authentication and log in as an arbitrary user, including one holding the Admin rolehttps://patchthecve.com/cve/CVE-2026-74886.htmlhttps://patchthecve.com/cve/CVE-2026-74886.htmlFri, 23 Oct 2026 23:10:00 +0000CRITICAL 9.8: openssl_encrypt versions before 1.4.0 contain a plugin sandbox bypass vulnerability where the PluginImportGuard blocks a different set of modules than the AST analyzer's DANGEROUS_MODULES set. Attackers can bypass AST analysis through string obfuscation or encoding to import unblocked dangerous moduhttps://patchthecve.com/cve/CVE-2026-74880.htmlhttps://patchthecve.com/cve/CVE-2026-74880.htmlFri, 23 Oct 2026 23:10:00 +0000CRITICAL 9.8: openssl_encrypt versions before 1.4.0 accept refresh tokens as URL query parameters in keyserver and telemetry server routes. Attackers can extract tokens from server logs, proxy logs, browser history, and HTTP Referer headers to gain unauthorized access.https://patchthecve.com/cve/CVE-2023-27536.htmlhttps://patchthecve.com/cve/CVE-2023-27536.htmlFri, 23 Oct 2026 23:10:00 +0000MEDIUM 5.9: An authentication bypass vulnerability exists libcurl <8.0.0 in the connection reuse feature which can reuse previously established connections with incorrect user permissions due to a failure to check for changes in the CURLOPT_GSSAPI_DELEGATION option. This vulnerability affects krb5/kerberos/negohttps://patchthecve.com/cve/CVE-2023-28321.htmlhttps://patchthecve.com/cve/CVE-2023-28321.htmlFri, 23 Oct 2026 23:10:00 +0000MEDIUM 5.9: An improper certificate validation vulnerability exists in curl <v8.1.0 in the way it supports matching of wildcard patterns when listed as "Subject Alternative Name" in TLS server certificates. curl can be built to use its own name matching function for TLS rather than one provided by a TLS libraryhttps://patchthecve.com/cve/CVE-2026-41920.htmlhttps://patchthecve.com/cve/CVE-2026-41920.htmlFri, 23 Oct 2026 23:10:00 +0000CRITICAL 9.3: Improper Access Control vulnerability in Apache Traffic Server. This issue affects Apache Traffic Server: from 9.0.0 through 9.1.14, from 10.0.0 through 10.1.3. Users are recommended to upgrade to version 9.1.15 or 10.1.4, which fixes the issue.https://patchthecve.com/cve/CVE-2023-23916.htmlhttps://patchthecve.com/cve/CVE-2023-23916.htmlFri, 23 Oct 2026 23:10:00 +0000MEDIUM 6.5: An allocation of resources without limits or throttling vulnerability exists in curl <v7.88.0 based on the "chained" HTTP compression algorithms, meaning that a server response can be compressed multiple times and potentially with differentalgorithms. The number of acceptable "links" in this "decomphttps://patchthecve.com/cve/CVE-2026-58153.htmlhttps://patchthecve.com/cve/CVE-2026-58153.htmlFri, 23 Oct 2026 23:10:00 +0000HIGH 8.3: Apache Traffic Server forwards HTTP/2 origin trailers to HTTP/1 clients without proper chunked framing when converting HTTP/2 to HTTP/1. This issue affects Apache Traffic Server: from 10.0.0 through 10.1.3. Users are recommended to upgrade to version 9.2.15 or 10.1.4, which fix the issue.https://patchthecve.com/cve/CVE-2026-22068.htmlhttps://patchthecve.com/cve/CVE-2026-22068.htmlFri, 23 Oct 2026 23:10:00 +0000HIGH 8.2: Regular Expression without Anchors vulnerability in Apache Traffic Server. This issue affects Apache Traffic Server: from 10.0.X through 10.1.3, from 9.0.X through 9.2.14. Users are recommended to upgrade to version 9.2.15 or 10.1.4, which fixes the issue.https://patchthecve.com/cve/CVE-2026-54725.htmlhttps://patchthecve.com/cve/CVE-2026-54725.htmlFri, 23 Oct 2026 23:10:00 +0000CRITICAL 9.6: vault-secrets-webhook is a Kubernetes mutating webhook that makes direct secret injection into Pods possible. Prior to 1.23.1, parseVaultConfig() in pkg/webhook/config.go accepts the vault.security.banzaicloud.io/vault-addr annotation, MutateConfigMap and MutateSecret call newVaultClient in pkg/webhhttps://patchthecve.com/cve/CVE-2026-23904.htmlhttps://patchthecve.com/cve/CVE-2026-23904.htmlFri, 23 Oct 2026 23:10:00 +0000HIGH 7.3: Kyuubi Engine UI proxy accepts a host and port from the request path and proxies HTTP requests to that destination. A remote requester with network access to the proxy can cause the Kyuubi server to send HTTP requests to arbitrary reachable hosts, resulting in SSRF or open-proxy behavior. This isshttps://patchthecve.com/cve/CVE-2026-58177.htmlhttps://patchthecve.com/cve/CVE-2026-58177.htmlFri, 23 Oct 2026 23:10:00 +0000HIGH 8.1: The Apache Traffic Server Cripts framework has out-of-bounds writes, path traversal, and use-after-free errors. This issue affects Apache Traffic Server: from 10.0.0 through 10.1.3. Users are recommended to upgrade to version 10.1.4, which fix the issue.https://patchthecve.com/cve/CVE-2026-66907.htmlhttps://patchthecve.com/cve/CVE-2026-66907.htmlFri, 23 Oct 2026 23:10:00 +0000HIGH 7.5: Relative path traversal vulnerability in Apache Camel Google Storage component. This issue affects Apache Camel: from 4.0.0 before 4.14.9, from 4.15.0 before 4.18.4, from 4.19.0 before 4.22.0. The camel-google-storage consumer downloads Google Cloud Storage objects to the local filesystem whenhttps://patchthecve.com/cve/CVE-2026-48242.htmlhttps://patchthecve.com/cve/CVE-2026-48242.htmlFri, 23 Oct 2026 23:10:00 +0000HIGH 8.1: Open ISES Tickets before 3.44.2 contains hardcoded MySQL database connection credentials (host, username, password, database name) in import_mdb.php. The credentials are embedded in source code committed to the public repository, allowing any reader of the source to obtain valid configuration valueshttps://patchthecve.com/cve/CVE-2026-66908.htmlhttps://patchthecve.com/cve/CVE-2026-66908.htmlFri, 23 Oct 2026 23:10:00 +0000HIGH 7.5: Improper Authentication vulnerability in Apache Camel Platform HTTP Main component. This issue affects Apache Camel: from 4.8.0 before 4.22.0. The camel-main embedded HTTP server can protect its endpoints with JWT authentication, configured through authenticationEnabled together with the JWT khttps://patchthecve.com/cve/CVE-2026-24033.htmlhttps://patchthecve.com/cve/CVE-2026-24033.htmlFri, 23 Oct 2026 23:10:00 +0000HIGH 7.2: Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') vulnerability in Apache Traffic Server. This issue affects Apache Traffic Server: from 10.0.0 through 10.1.3, from 9.0.0 through 9.2.14. Users are recommended to upgrade to version 9.2.15 or 10.1.4, which fixes the ishttps://patchthecve.com/cve/CVE-2026-50622.htmlhttps://patchthecve.com/cve/CVE-2026-50622.htmlFri, 23 Oct 2026 23:10:00 +0000HIGH 8.8: Description: Missing Authorization in Apache Atlas. A missing authorization vulnerability in Apache Atlas's admin endpoints allows any authenticated user, regardless of their assigned role, to perform administrative operations. Affect Version: This issue affects Apache Atlas: from 0.8 through 2.https://patchthecve.com/cve/CVE-2026-62391.htmlhttps://patchthecve.com/cve/CVE-2026-62391.htmlFri, 23 Oct 2026 23:10:00 +0000HIGH 8.1: The security fix for CVE-2025-66518 is incomplete. Any client who can access to Apache Kyuubi Server via Kyuubi frontend protocols can bypass server-side config kyuubi.session.local.dir.allowlist via unprefixed Spark config aliases. This issue affects Apache Kyuubi: from 1.6.0 before 1.12.0. Usershttps://patchthecve.com/cve/CVE-2026-66321.htmlhttps://patchthecve.com/cve/CVE-2026-66321.htmlFri, 23 Oct 2026 23:10:00 +0000HIGH 7.4: Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.https://patchthecve.com/cve/CVE-2026-74892.htmlhttps://patchthecve.com/cve/CVE-2026-74892.htmlFri, 23 Oct 2026 23:10:00 +0000HIGH 7.5: openssl_encrypt versions before 1.4.0 contain a hardcoded default secret key in the standalone telemetry server configuration that is used for API key hashing. Attackers who know this default value can predict or forge API key hashes to compromise telemetry API authentication.https://patchthecve.com/cve/CVE-2026-65802.htmlhttps://patchthecve.com/cve/CVE-2026-65802.htmlFri, 23 Oct 2026 23:10:00 +0000HIGH 7.4: External control of file name or path in Microsoft Edge for Android allows an unauthorized attacker to disclose information over a network.https://patchthecve.com/cve/CVE-2026-66312.htmlhttps://patchthecve.com/cve/CVE-2026-66312.htmlFri, 23 Oct 2026 23:10:00 +0000MEDIUM 6.5: Buffer over-read in Microsoft Edge (Chromium-based) allows an authorized attacker to execute code over a network.https://patchthecve.com/cve/CVE-2023-4049.htmlhttps://patchthecve.com/cve/CVE-2023-4049.htmlFri, 23 Oct 2026 23:10:00 +0000MEDIUM 5.9: Race conditions in reference counting code were found through code inspection. These could have resulted in potentially exploitable use-after-free vulnerabilities. This vulnerability affects Firefox < 116, Firefox ESR < 102.14, and Firefox ESR < 115.1.https://patchthecve.com/cve/CVE-2026-66315.htmlhttps://patchthecve.com/cve/CVE-2026-66315.htmlFri, 23 Oct 2026 23:10:00 +0000HIGH 7.5: Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.https://patchthecve.com/cve/CVE-2026-44615.htmlhttps://patchthecve.com/cve/CVE-2026-44615.htmlFri, 23 Oct 2026 23:10:00 +0000MEDIUM 6.5: Path traversal vulnerability in Apache Zeppelin. When FileSystemNotebookRepo is configured, an authenticated attacker with permission to rename a note, or access to folder operations, could supply traversal segments in note or folder paths.                   Zeppelin composed these values into fileshttps://patchthecve.com/cve/CVE-2026-66326.htmlhttps://patchthecve.com/cve/CVE-2026-66326.htmlFri, 23 Oct 2026 23:10:00 +0000MEDIUM 6.5: Missing authorization in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.https://patchthecve.com/cve/CVE-2023-37207.htmlhttps://patchthecve.com/cve/CVE-2023-37207.htmlFri, 23 Oct 2026 23:10:00 +0000MEDIUM 6.5: A website could have obscured the fullscreen notification by using a URL with a scheme handled by an external program, such as a mailto URL. This could have led to user confusion and possible spoofing attacks. This vulnerability affects Firefox < 115, Firefox ESR < 102.13, and Thunderbird < 102.13.https://patchthecve.com/cve/CVE-2026-18481.htmlhttps://patchthecve.com/cve/CVE-2026-18481.htmlFri, 23 Oct 2026 23:10:00 +0000HIGH 7.3: Stored cross-site scripting in the participant URL handling in AWS Ops Wheel before PR #168 might allow an authenticated remote user to steal session tokens and escalate to full administrative control of the deployed instance via a crafted participant_url value containing a dangerous URI scheme.https://patchthecve.com/cve/CVE-2026-66318.htmlhttps://patchthecve.com/cve/CVE-2026-66318.htmlFri, 23 Oct 2026 23:10:00 +0000HIGH 8.1: Origin validation error in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose information over a network.https://patchthecve.com/cve/CVE-2026-66310.htmlhttps://patchthecve.com/cve/CVE-2026-66310.htmlFri, 23 Oct 2026 23:10:00 +0000HIGH 7.7: External control of file name or path in Microsoft Edge for Android allows an unauthorized attacker to disclose information locally.https://patchthecve.com/cve/CVE-2026-66314.htmlhttps://patchthecve.com/cve/CVE-2026-66314.htmlFri, 23 Oct 2026 23:10:00 +0000MEDIUM 6.5: Time-of-check time-of-use (toctou) race condition in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose information over a network.https://patchthecve.com/cve/CVE-2026-35167.htmlhttps://patchthecve.com/cve/CVE-2026-35167.htmlFri, 23 Oct 2026 23:10:00 +0000HIGH 7.1: Kedro is a toolbox for production-ready data science. Prior to 1.3.0, the _get_versioned_path() method in kedro/io/core.py constructs filesystem paths by directly interpolating user-supplied version strings without sanitization. Because version strings are used as path components, traversal sequencehttps://patchthecve.com/cve/CVE-2026-64607.htmlhttps://patchthecve.com/cve/CVE-2026-64607.htmlFri, 23 Oct 2026 23:10:00 +0000MEDIUM 5.3: HttpClient based on the classic i/o model fails to correctly release the underlying connection back to the connection manager if it encounters an invalid or unsupported `Content-Encoding` header value in the response message. Please note this defect does not affect HttpClient based on the async i/o https://patchthecve.com/cve/CVE-2023-30549.htmlhttps://patchthecve.com/cve/CVE-2023-30549.htmlFri, 23 Oct 2026 23:10:00 +0000HIGH 7.1: Apptainer is an open source container platform for Linux. There is an ext4 use-after-free flaw that is exploitable through versions of Apptainer < 1.1.0 and installations that include apptainer-suid < 1.1.8 on older operating systems where that CVE has not been patched. That includes Red Hat Enterprhttps://patchthecve.com/cve/CVE-2026-10079.htmlhttps://patchthecve.com/cve/CVE-2026-10079.htmlFri, 23 Oct 2026 23:10:00 +0000HIGH 8.5: A flaw was found in Red Hat Advanced Cluster Security for Kubernetes (RHACS). When processing Kubernetes Deployments, ACS replaces deployment identity metadata based on the openshift.io/encoded-deployment-config label. A user with permission to create Deployments can set this label to "null", causinhttps://patchthecve.com/cve/CVE-2026-17877.htmlhttps://patchthecve.com/cve/CVE-2026-17877.htmlFri, 23 Oct 2026 23:10:00 +0000HIGH 8.4: Inappropriate implementation in Chromoting in Google Chrome on Linux prior to 151.0.7922.72 allowed a local attacker to perform OS-level privilege escalation via malicious network traffic. (Chromium security severity: Medium)https://patchthecve.com/cve/CVE-2026-65804.htmlhttps://patchthecve.com/cve/CVE-2026-65804.htmlFri, 23 Oct 2026 23:10:00 +0000MEDIUM 6.1: Improper control of generation of code ('code injection') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.https://patchthecve.com/cve/CVE-2026-66311.htmlhttps://patchthecve.com/cve/CVE-2026-66311.htmlFri, 23 Oct 2026 23:10:00 +0000MEDIUM 6.2: Missing authorization in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform tampering locally.https://patchthecve.com/cve/CVE-2026-68813.htmlhttps://patchthecve.com/cve/CVE-2026-68813.htmlFri, 23 Oct 2026 23:10:00 +0000MEDIUM 5.5: Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.https://patchthecve.com/cve/CVE-2026-66325.htmlhttps://patchthecve.com/cve/CVE-2026-66325.htmlFri, 23 Oct 2026 23:10:00 +0000MEDIUM 6.1: Server-side request forgery (ssrf) in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.https://patchthecve.com/cve/CVE-2024-47091.htmlhttps://patchthecve.com/cve/CVE-2024-47091.htmlFri, 23 Oct 2026 23:10:00 +0000HIGH 7.8: Privilege escalation in the mk_mysql agent plugin on Windows in Checkmk <2.4.0p29, <2.3.0p47, and 2.2.0 (EOL) allows a local unprivileged user able to create a Windows service whose name matches 'MySQL' or 'MariaDB' (or with write access to a binary referenced by such a service) to execute arbitraryhttps://patchthecve.com/cve/CVE-2026-66322.htmlhttps://patchthecve.com/cve/CVE-2026-66322.htmlFri, 23 Oct 2026 23:10:00 +0000HIGH 7.1: Origin validation error in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.https://patchthecve.com/cve/CVE-2026-70310.htmlhttps://patchthecve.com/cve/CVE-2026-70310.htmlFri, 23 Oct 2026 23:10:00 +0000MEDIUM 5.5: Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.