https://patchthecev.com/CVEs with upgrade or downgrade fix stepshttps://patchthecev.com/cve/CVE-2026-115975.htmlhttps://patchthecev.com/cve/CVE-2026-115975.htmlSat, 24 Oct 2026 07:39:34 +0000HIGH 7.1: Broken access control in JiraController in Cervantes version v1.3-beta could allow an attacker to create, edit, or delete Jira tickets for vulnerabilities in other projectshttps://patchthecev.com/cve/CVE-2026-115803.htmlhttps://patchthecev.com/cve/CVE-2026-115803.htmlSat, 24 Oct 2026 07:16:46 +0000MEDIUM 4.3: A flaw has been found in Scada-LTS 2.8.0. Affected by this vulnerability is the function HttpServletRequest.getParameter of the file AmChartValuesAPI.java of the component AmCharts Data API. Executing a manipulation of the argument ids can lead to authorization bypass. The attack can be executed remhttps://patchthecev.com/cve/CVE-2026-115802.htmlhttps://patchthecev.com/cve/CVE-2026-115802.htmlSat, 24 Oct 2026 07:16:46 +0000MEDIUM 4.3: A weakness has been identified in InternScience InternAgent 1.5.0. This affects the function train of the file tasks/AutoChem/code/experiment.py of the component LoRA Loading. This manipulation of the argument base_model_name_or_path causes inclusion of functionality from untrusted control sphere. Thttps://patchthecev.com/cve/CVE-2026-108013.htmlhttps://patchthecev.com/cve/CVE-2026-108013.htmlSat, 24 Oct 2026 07:16:44 +0000MEDIUM 6.8: BigFix Platform uses Mozilla CA certificate bundle (PEM). Versions of the bundle dated before 2026/10/20 still trust certificates whose private keys have been compromised. When BigFix Platform validates servers using such a bundle, an on-path attacker can impersonate remote servers and tamper with fhttps://patchthecev.com/cve/CVE-2026-97353.htmlhttps://patchthecev.com/cve/CVE-2026-97353.htmlSat, 24 Oct 2026 06:16:37 +0000HIGH n/a: The News Kit Addons For Elementor WordPress plugin through 1.4.7 does not perform capability or ownership checks before updating post metadata in one of its authenticated AJAX actions, allowing users with subscriber-level access and above to write arbitrary post meta, under attacker-chosen keys, to https://patchthecev.com/cve/CVE-2026-97352.htmlhttps://patchthecev.com/cve/CVE-2026-97352.htmlSat, 24 Oct 2026 06:16:37 +0000HIGH n/a: The News Kit Addons For Elementor WordPress plugin before 1.4.9 does not perform a capability check on one of its AJAX actions, allowing authenticated users with subscriber-level access and above to install and activate a specific News Kit Addons For Elementor WordPress plugin before 1.4.9 from the https://patchthecev.com/cve/CVE-2026-87835.htmlhttps://patchthecev.com/cve/CVE-2026-87835.htmlSat, 24 Oct 2026 06:16:37 +0000HIGH n/a: The Front End Users WordPress plugin through 3.2.35 does not restrict which account attributes a visitor may set when registering through its front-end forms, allowing unauthenticated users to assign themselves an arbitrary membership level and to mark their own account as approved, confirmed and pahttps://patchthecev.com/cve/CVE-2026-114429.htmlhttps://patchthecev.com/cve/CVE-2026-114429.htmlSat, 24 Oct 2026 06:16:37 +0000HIGH n/a: The WPVR WordPress plugin before 9.0.3 does not properly sanitise and escape some of its tour hotspot content before storing it and outputting it on the front end, which could allow users with the Contributor role and above to perform Stored Cross-Site Scripting attacks that execute in the browser https://patchthecev.com/cve/CVE-2026-113674.htmlhttps://patchthecev.com/cve/CVE-2026-113674.htmlSat, 24 Oct 2026 06:16:37 +0000HIGH n/a: The GeoDirectory WordPress plugin before 2.8.194 does not correctly verify ownership of listings submitted by logged-out users before allowing them to be edited, allowing unauthenticated attackers to modify, unpublish, attach images to, or reassign any guest-submitted listing when guest posting is https://patchthecev.com/cve/CVE-2026-113673.htmlhttps://patchthecev.com/cve/CVE-2026-113673.htmlSat, 24 Oct 2026 06:16:36 +0000HIGH n/a: The GeoDirectory WordPress plugin before 2.8.194 does not properly escape administrator-defined text before writing it into a generated PHP file in its own folder, allowing high privilege users such as a subsite administrator on a multisite network, who cannot otherwise run code, to achieve Remote https://patchthecev.com/cve/CVE-2026-113493.htmlhttps://patchthecev.com/cve/CVE-2026-113493.htmlSat, 24 Oct 2026 06:16:36 +0000HIGH n/a: The GeoDirectory WordPress plugin before 2.8.194 does not sanitise and escape some of its map shortcode attributes before outputting them within a style attribute, allowing users with the Contributor role and above to perform Stored Cross-Site Scripting attacks that execute in the context of any ushttps://patchthecev.com/cve/CVE-2026-113492.htmlhttps://patchthecev.com/cve/CVE-2026-113492.htmlSat, 24 Oct 2026 06:16:36 +0000HIGH n/a: The GeoDirectory WordPress plugin before 2.8.194 does not perform status, ownership or password checks when loading listings for one of its unauthenticated AJAX handlers, allowing unauthenticated users to disclose the content of non-public (draft, pending and private) listings by supplying their IDhttps://patchthecev.com/cve/CVE-2026-113491.htmlhttps://patchthecev.com/cve/CVE-2026-113491.htmlSat, 24 Oct 2026 06:16:36 +0000HIGH n/a: The GeoDirectory WordPress plugin before 2.8.194 does not validate a user-supplied image URL before using it as a local file path when saving a front-end listing, allowing users with Subscriber-level access and above to read files from outside the web root and to delete files on the server, limitedhttps://patchthecev.com/cve/CVE-2026-113490.htmlhttps://patchthecev.com/cve/CVE-2026-113490.htmlSat, 24 Oct 2026 06:16:36 +0000HIGH n/a: The GeoDirectory WordPress plugin before 2.8.194 does not perform any status or ownership check when rendering a listing's map-popup through one of its single-item REST routes, allowing unauthenticated users to read the title, permalink and card fields of non-public (draft, pending, private and trahttps://patchthecev.com/cve/CVE-2026-113489.htmlhttps://patchthecev.com/cve/CVE-2026-113489.htmlSat, 24 Oct 2026 06:16:36 +0000HIGH n/a: The GeoDirectory WordPress plugin before 2.8.194 does not verify that a referenced attachment belongs to the listing being saved, allowing users with Subscriber-level access and above to modify the title, caption, moderation status and featured flag of images belonging to other users' listings, andhttps://patchthecev.com/cve/CVE-2026-112207.htmlhttps://patchthecev.com/cve/CVE-2026-112207.htmlSat, 24 Oct 2026 06:16:36 +0000HIGH n/a: The Download Monitor WordPress plugin before 5.3.4 does not properly validate that a clicked link belongs to the site before fetching it client-side and rendering part of the response in the page, which allows unauthenticated attackers to execute arbitrary JavaScript in the browser of any user who ihttps://patchthecev.com/cve/CVE-2026-110956.htmlhttps://patchthecev.com/cve/CVE-2026-110956.htmlSat, 24 Oct 2026 06:16:36 +0000HIGH n/a: The asVereinbase WordPress plugin before 1.1.8 does not require a valid password or a genuine second factor before authenticating a user, treating an empty stored value as a match, so an unauthenticated attacker can log in as any user, including an administrator.https://patchthecev.com/cve/CVE-2026-107907.htmlhttps://patchthecev.com/cve/CVE-2026-107907.htmlSat, 24 Oct 2026 06:16:35 +0000HIGH n/a: The MAS Videos WordPress plugin through 1.3.4 does not perform any capability or ownership check when handling its front-end video and playlist deletion requests, and the nonce it verifies is tied only to a static action rather than to the targeted object, allowing any authenticated user with a minihttps://patchthecev.com/cve/CVE-2026-107887.htmlhttps://patchthecev.com/cve/CVE-2026-107887.htmlSat, 24 Oct 2026 06:16:35 +0000HIGH n/a: The Advanced Twenty Seventeen WordPress plugin through 1.3.1 does not perform any capability or nonce check on the action that creates and activates its bundled child , allowing any authenticated user such as a subscriber to switch the site's active site-wide, and allowing the same action to be trihttps://patchthecev.com/cve/CVE-2026-105199.htmlhttps://patchthecev.com/cve/CVE-2026-105199.htmlSat, 24 Oct 2026 06:16:34 +0000HIGH n/a: The Pixel Tag Manager for WooCommerce WordPress plugin before 2.2.3 does not perform a capability check in one of its AJAX actions, and exposes the nonce protecting it to any user able to access the admin dashboard, allowing users with a role as low as Contributor to overwrite the Pixel Tag Managerhttps://patchthecev.com/cve/CVE-2026-115807.htmlhttps://patchthecev.com/cve/CVE-2026-115807.htmlSat, 24 Oct 2026 05:17:06 +0000HIGH 7.1: The User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor plugin for WordPress is vulnerable to Limited Privilege Escalation in all versions up to, and including, 4.0.3. This is due to the Gutenberg Register block passing the attacker-controlled Assigned Role atthttps://patchthecev.com/cve/CVE-2026-115806.htmlhttps://patchthecev.com/cve/CVE-2026-115806.htmlSat, 24 Oct 2026 05:17:04 +0000CRITICAL 9.8: The Prime Mover – Backup and Migration plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 2.2.1 via deserialization of untrusted input in the migration search-and-replace routine (recursiveUnserializeReplace()). An unauthenticated attacker can store a crhttps://patchthecev.com/cve/CVE-2026-96185.htmlhttps://patchthecev.com/cve/CVE-2026-96185.htmlSat, 24 Oct 2026 04:18:28 +0000HIGH 7.5: Stack-based buffer overflow in Microsoft Exchange Online allows an authorized attacker to execute code over a network.https://patchthecev.com/cve/CVE-2026-95714.htmlhttps://patchthecev.com/cve/CVE-2026-95714.htmlSat, 24 Oct 2026 04:18:28 +0000MEDIUM 6.8: A buffer overflow vulnerability exists in the API of AOS-10 that could allow an authenticated adjacent attacker with high privileges to achieve remote code execution. Successful exploitation could allow an attacker to execute arbitrary code as a privileged user on the underlying operating system.https://patchthecev.com/cve/CVE-2026-95711.htmlhttps://patchthecev.com/cve/CVE-2026-95711.htmlSat, 24 Oct 2026 04:18:28 +0000HIGH 7.1: An authentication bypass vulnerability in the web-based management interface of AOS-10 could allow an unauthenticated adjacent attacker to circumvent existing authentication controls and run arbitrary commands on the underlying host if certain preconditions outside of the attacker's control are met.https://patchthecev.com/cve/CVE-2026-95709.htmlhttps://patchthecev.com/cve/CVE-2026-95709.htmlSat, 24 Oct 2026 04:18:28 +0000HIGH 7.2: Command injection vulnerabilities exist in the affected interface of AOS-10 that could allow an authenticated remote attacker with high privileges to perform command injection. Successful exploitation could allow an attacker to execute arbitrary commands as a privileged user on the underlying operathttps://patchthecev.com/cve/CVE-2026-95708.htmlhttps://patchthecev.com/cve/CVE-2026-95708.htmlSat, 24 Oct 2026 04:18:28 +0000HIGH 7.2: Command injection vulnerabilities exist in the affected interface of AOS-10 that could allow an authenticated remote attacker with high privileges to perform command injection. Successful exploitation could allow an attacker to execute arbitrary commands as a privileged user on the underlying operathttps://patchthecev.com/cve/CVE-2026-95707.htmlhttps://patchthecev.com/cve/CVE-2026-95707.htmlSat, 24 Oct 2026 04:18:28 +0000HIGH 7.2: A buffer overflow vulnerability in the PAPI protocol of AOS-8 could allow an authenticated remote attacker with high privileges to achieve remote code execution. Successful exploitation could allow an attacker to execute arbitrary code as a privileged user on the underlying operating system.https://patchthecev.com/cve/CVE-2026-95706.htmlhttps://patchthecev.com/cve/CVE-2026-95706.htmlSat, 24 Oct 2026 04:18:28 +0000HIGH 7.2: Command injection vulnerabilities in the affected interface of AOS-8 could allow an authenticated remote attacker with high privileges to perform command injection. Successful exploitation could allow an attacker to execute commands with the privileges of the impacted mechanism on the underlying opehttps://patchthecev.com/cve/CVE-2026-95705.htmlhttps://patchthecev.com/cve/CVE-2026-95705.htmlSat, 24 Oct 2026 04:18:27 +0000HIGH 7.2: Command injection vulnerabilities in the affected interface of AOS-8 could allow an authenticated remote attacker with high privileges to perform command injection. Successful exploitation could allow an attacker to execute commands with the privileges of the impacted mechanism on the underlying opehttps://patchthecev.com/cve/CVE-2026-95704.htmlhttps://patchthecev.com/cve/CVE-2026-95704.htmlSat, 24 Oct 2026 04:18:27 +0000HIGH 7.2: A vulnerability in the web-based management interface of wireless network management systems could allow an authenticated remote attacker to execute remote code. Successful exploitation could enable an attacker to execute arbitrary commands on the underlying operating system, potentially compromisinhttps://patchthecev.com/cve/CVE-2026-94422.htmlhttps://patchthecev.com/cve/CVE-2026-94422.htmlSat, 24 Oct 2026 04:18:27 +0000HIGH 8.8: An incorrect implementation of message filtering in xdg-dbus-proxy versions before 0.1.9 allows an attacker to bypass the intended message filtering on the D-Bus session bus by setting a reply serial number on non-reply messages. A malicious or compromised Flatpak app could use this to achieve arbithttps://patchthecev.com/cve/CVE-2026-93640.htmlhttps://patchthecev.com/cve/CVE-2026-93640.htmlSat, 24 Oct 2026 04:18:27 +0000HIGH 7.8: A local privilege escalation vulnerability in the optional dnscache package of Zimbra Collaboration Suite (ZCS) allows the Unix zimbra account to access files with root privileges. The passwordless sudo policy permits arbitrary arguments to zmunbound, whose wrapper forwards them to Unbound without rhttps://patchthecev.com/cve/CVE-2026-93489.htmlhttps://patchthecev.com/cve/CVE-2026-93489.htmlSat, 24 Oct 2026 04:18:27 +0000HIGH 8.7: Improper Authentication in ASUS router modules allows an unauthenticated nearby user to send an HTTP request and forge an access ticket, subsequently enabling the user to perform administrator operations. Refer to the ' Security Update for ASUS Router Firmware ' section on the ASUS Security Advisoryhttps://patchthecev.com/cve/CVE-2026-91504.htmlhttps://patchthecev.com/cve/CVE-2026-91504.htmlSat, 24 Oct 2026 04:18:27 +0000HIGH 7.5: Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Portal Suite). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Orachttps://patchthecev.com/cve/CVE-2026-91503.htmlhttps://patchthecev.com/cve/CVE-2026-91503.htmlSat, 24 Oct 2026 04:18:27 +0000HIGH 8.1: Vulnerability in the VPD component of Oracle Database Server. Supported versions that are affected are 19.3-19.32, 21.3-21.23 and 23.4.0-23.26.3. Easily exploitable vulnerability allows low privileged attacker having Create Table privilege with network access via Oracle Net to compromise VPD. Suchttps://patchthecev.com/cve/CVE-2026-91502.htmlhttps://patchthecev.com/cve/CVE-2026-91502.htmlSat, 24 Oct 2026 04:18:26 +0000HIGH 7.3: Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via TLS to compromise https://patchthecev.com/cve/CVE-2026-91501.htmlhttps://patchthecev.com/cve/CVE-2026-91501.htmlSat, 24 Oct 2026 04:18:26 +0000MEDIUM 5.5: Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: Installer). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Identity Managehttps://patchthecev.com/cve/CVE-2026-91499.htmlhttps://patchthecev.com/cve/CVE-2026-91499.htmlSat, 24 Oct 2026 04:18:26 +0000HIGH 8.8: Vulnerability in the RDBMS component of Oracle Database Server. Supported versions that are affected are 23.4.0-23.26.3. Easily exploitable vulnerability allows low privileged attacker having DBMS_VECTOR privilege with network access via Oracle Net to compromise RDBMS. Successful attacks of this vhttps://patchthecev.com/cve/CVE-2026-91496.htmlhttps://patchthecev.com/cve/CVE-2026-91496.htmlSat, 24 Oct 2026 04:18:26 +0000HIGH 7.5: Vulnerability in the Workflow product of Oracle E-Business Suite (component: Workflow Notification Mailer). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Workflow. Successful atthttps://patchthecev.com/cve/CVE-2026-91494.htmlhttps://patchthecev.com/cve/CVE-2026-91494.htmlSat, 24 Oct 2026 04:18:26 +0000HIGH 7.4: Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: LDAP Gateway). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via TCP to compromise Orahttps://patchthecev.com/cve/CVE-2026-91493.htmlhttps://patchthecev.com/cve/CVE-2026-91493.htmlSat, 24 Oct 2026 04:18:25 +0000HIGH 7.5: Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: LDAP Gateway). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via LDAP to compromise Orachttps://patchthecev.com/cve/CVE-2026-91492.htmlhttps://patchthecev.com/cve/CVE-2026-91492.htmlSat, 24 Oct 2026 04:18:25 +0000HIGH 8.7: Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: SAP ERP+). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oraclehttps://patchthecev.com/cve/CVE-2026-91489.htmlhttps://patchthecev.com/cve/CVE-2026-91489.htmlSat, 24 Oct 2026 04:18:25 +0000HIGH 7.1: Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: LDAP Gateway). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Idhttps://patchthecev.com/cve/CVE-2026-91488.htmlhttps://patchthecev.com/cve/CVE-2026-91488.htmlSat, 24 Oct 2026 04:18:25 +0000HIGH 7.1: Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Generic REST). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Idhttps://patchthecev.com/cve/CVE-2026-91487.htmlhttps://patchthecev.com/cve/CVE-2026-91487.htmlSat, 24 Oct 2026 04:18:25 +0000MEDIUM 4.8: Vulnerability in Oracle Java SE (component: Compiler). Supported versions that are affected are Oracle Java SE: 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and 21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerabihttps://patchthecev.com/cve/CVE-2026-91486.htmlhttps://patchthecev.com/cve/CVE-2026-91486.htmlSat, 24 Oct 2026 04:18:24 +0000MEDIUM 4.4: Vulnerability in the PeopleSoft Enterprise FIN General Ledger Brazil product of Oracle PeopleSoft (component: General Ledger). The supported version that is affected is 9.1. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where PeopleSoft Enterprisehttps://patchthecev.com/cve/CVE-2026-91485.htmlhttps://patchthecev.com/cve/CVE-2026-91485.htmlSat, 24 Oct 2026 04:18:24 +0000LOW 3.8: Vulnerability in the PeopleSoft Enterprise FIN Cash Management product of Oracle PeopleSoft (component: Cash Management). The supported version that is affected is 9.2. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where PeopleSoft Enterprise Fhttps://patchthecev.com/cve/CVE-2026-91484.htmlhttps://patchthecev.com/cve/CVE-2026-91484.htmlSat, 24 Oct 2026 04:18:24 +0000HIGH 7.5: Vulnerability in Oracle Java SE (component: Java plugin). Supported versions that are affected are Oracle Java SE: 8u503 and 8u503-perf. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Java SE executes to compromise Oracle Java SE. Whttps://patchthecev.com/cve/CVE-2026-91483.htmlhttps://patchthecev.com/cve/CVE-2026-91483.htmlSat, 24 Oct 2026 04:18:24 +0000HIGH 7.8: Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Core). The supported version that is affected is 8.5.8. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Outside In Technology