News · NVD CVE API 2.0
-
NVD CVE API 2.0
CVE-2026-83693 · CVSS 9.8
Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network.
Fix: Microsoft: KB5126651 (Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809, …); KB5126655 (Windows Server 2022, Windows Server 2022 (Server Core installation)); KB5126657 (Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2); … Fix panel
detailsCVE-2026-83693 -
NVD CVE API 2.0
CVE-2026-83578 · CVSS 9.8
Integer underflow (wrap or wraparound) in Windows PowerShell allows an unauthorized attacker to execute code over a network.
Fix: Microsoft: KB5126651 (Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809, …); KB5126655 (Windows Server 2022, Windows Server 2022 (Server Core installation)); KB5126657 (Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2); … Fix panel
detailsCVE-2026-83578 -
NVD CVE API 2.0
CVE-2026-83519 · CVSS 9.8
Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network.
Fix: Microsoft: KB5126651 (Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809, …); KB5126655 (Windows Server 2022, Windows Server 2022 (Server Core installation)); KB5126657 (Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2); … Fix panel
detailsCVE-2026-83519 -
NVD CVE API 2.0
CVE-2026-83517 · CVSS 9.8
Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.
Fix: Microsoft: KB5127648 (Windows 11 Version 26H2); KB5126651 (Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809, …); KB5126655 (Windows Server 2022, Windows Server 2022 (Server Core installation)); … Fix panel
detailsCVE-2026-83517 -
NVD CVE API 2.0
CVE-2026-75120 · CVSS 9.3
The OpenText™ (EnCase SAFE Agents) component utilized by OpenText™ Endpoint Investigator, OpenText™ Endpoint Forensics & Response, OpenText™ Information Assurance, and OpenText™ Endpoint Security contains a security vulnerability on the Agents that could allow unauthorized or unauthenticated activity that establishes an unauthorized connection to a vulnerable Agent by bypassing intended security controls during session establishment
Fix: Nothing published yet: no patch, advisory or mitigation reference, no vendor advisory on the Wire, no KEV action. Fix panel
detailsCVE-2026-75120 -
NVD CVE API 2.0
CVE-2026-70300 · microsoft, 365_apps, office_2021 · CVSS 9.8
Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
Fix: Microsoft: Release Notes (Microsoft 365 Apps for Enterprise for 32-bit Systems, Microsoft 365 Apps for Enterprise for 64-bit Systems); Release Notes (Microsoft Office LTSC 2021 for 64-bit editions, Microsoft Office LTSC 2021 for 32-bit editions); Release Notes (Microsoft Office LTSC 2024 for 32-bit editions, Microsoft Office LTSC 2024 for 64-bit editions) · 1 patch or advisory reference on NVD · vendor advisory: Microsoft Security Update Guide Fix panel
detailsCVE-2026-70300 -
NVD CVE API 2.0
CVE-2026-70291 · CVSS 9.8
Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
Fix: Microsoft: Release Notes (Microsoft Office LTSC for Mac 2021, Microsoft Office LTSC for Mac 2024, …); Release Notes (Microsoft Office LTSC 2021 for 64-bit editions, Microsoft Office LTSC 2021 for 32-bit editions); Release Notes (Microsoft Office LTSC 2024 for 64-bit editions, Microsoft Office LTSC 2024 for 32-bit editions); … · 1 patch or advisory reference on NVD · vendor advisory: Microsoft Security Update Guide Fix panel
detailsCVE-2026-70291 -
NVD CVE API 2.0
CVE-2026-70279 · CVSS 9.3
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network.
Fix: Microsoft: KB5128896 (Microsoft Exchange Server 2019 Cumulative Update 15); KB5128897 (Microsoft Exchange Server 2019 Cumulative Update 14); KB5128898 (Microsoft Exchange Server 2016 Cumulative Update 23); … Fix panel
detailsCVE-2026-70279 -
NVD CVE API 2.0
CVE-2026-70242 · CVSS 9.8
Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
Fix: Microsoft: Release Notes (Microsoft Office LTSC 2021 for 64-bit editions, Microsoft Office LTSC 2021 for 32-bit editions); Release Notes (Microsoft Office LTSC 2024 for 64-bit editions, Microsoft Office LTSC 2024 for 32-bit editions); Release Notes (Microsoft 365 Apps for Enterprise for 64-bit Systems, Microsoft 365 Apps for Enterprise for 32-bit Systems) · 1 patch or advisory reference on NVD · vendor advisory: Microsoft Security Update Guide Fix panel
detailsCVE-2026-70242 -
NVD CVE API 2.0
CVE-2026-70188 · CVSS 9.1
Inconsistent interpretation of http requests ('http request/response smuggling') in ASP.NET Core allows an unauthorized attacker to bypass a security feature over a network.
Fix: Microsoft: Release Notes (Microsoft Visual Studio 2026 version 18.10); Release Notes (Microsoft Visual Studio 2022 version 17.14); Release Notes (ASP.NET Core 11.0); … Fix panel
detailsCVE-2026-70188 -
NVD CVE API 2.0
CVE-2026-70157 · CVSS 9.8
Heap-based buffer overflow in Windows System Information Console allows an unauthorized attacker to execute code over a network.
Fix: Microsoft: KB5127648 (Windows 11 Version 26H2); KB5126651 (Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809, …); KB5126655 (Windows Server 2022, Windows Server 2022 (Server Core installation)); … · 1 patch or advisory reference on NVD Fix panel
detailsCVE-2026-70157 -
NVD CVE API 2.0
CVE-2026-70153 · CVSS 9.8
Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to execute code over a network.
Fix: Microsoft: KB5126835 (Windows Server 2012, Windows Server 2012 (Server Core installation)); KB5126836 (Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation)); KB5126868 (Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607, …); … · 1 patch or advisory reference on NVD · vendor advisory: Microsoft Security Update Guide Fix panel
detailsCVE-2026-70153 -
NVD CVE API 2.0
CVE-2026-70147 · CVSS 9.8
Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to execute code over a network.
Fix: Microsoft: KB5127648 (Windows 11 Version 24H2); KB5127648 (Windows 11 Version 25H2); KB5127648 (Windows 11 Version 26H2); … · 1 patch or advisory reference on NVD · vendor advisory: Microsoft Security Update Guide Fix panel
detailsCVE-2026-70147 -
NVD CVE API 2.0
CVE-2026-70096 · CVSS 9.8
Heap-based buffer overflow in Windows Rich Text Edit Control allows an unauthorized attacker to execute code over a network.
Fix: Microsoft: KB5127648 (Windows 11 Version 26H2); Release Notes (Microsoft 365 Apps for Enterprise for 32-bit Systems, Microsoft 365 Apps for Enterprise for 64-bit Systems); Release Notes (Microsoft Office LTSC 2021 for 32-bit editions, Microsoft Office LTSC 2021 for 64-bit editions); … Fix panel
detailsCVE-2026-70096 -
NVD CVE API 2.0
CVE-2026-70024 · CVSS 9.8
Stack-based buffer overflow in Windows Internet Information Services allows an unauthorized attacker to execute code over a network.
Fix: Microsoft: KB5126646 (Windows Server 2025, Windows Server 2025 (Server Core installation)); KB5127646 (Windows 11 Version 26H1, Windows 11 version 26H1); KB5126657 (Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2); … · 1 patch or advisory reference on NVD Fix panel
detailsCVE-2026-70024 -
NVD CVE API 2.0
CVE-2026-69886 · CVSS 9.8
Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.
Fix: Microsoft: KB5126651 (Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809, …); KB5126655 (Windows Server 2022, Windows Server 2022 (Server Core installation)); KB5126657 (Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2); … · 1 patch or advisory reference on NVD Fix panel
detailsCVE-2026-69886 -
NVD CVE API 2.0
CVE-2026-69883 · CVSS 9.8
Use after free in Windows iSCSI allows an unauthorized attacker to execute code over a network.
Fix: Microsoft: KB5126651 (Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809, …); KB5126655 (Windows Server 2022, Windows Server 2022 (Server Core installation)); KB5126657 (Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2); … · 1 patch or advisory reference on NVD Fix panel
detailsCVE-2026-69883 -
NVD CVE API 2.0
CVE-2026-69705 · CVSS 9.8
Out-of-bounds write in Windows iSCSI allows an unauthorized attacker to execute code over a network.
Fix: Microsoft: KB5126651 (Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809, …); KB5126655 (Windows Server 2022, Windows Server 2022 (Server Core installation)); KB5126657 (Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2); … Fix panel
detailsCVE-2026-69705 -
NVD CVE API 2.0
CVE-2026-69639 · CVSS 9.8
Heap-based buffer overflow in Windows Libarchive allows an unauthorized attacker to execute code over a network.
Fix: Microsoft: KB5126651 (Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809, …); KB5126655 (Windows Server 2022, Windows Server 2022 (Server Core installation)); KB5126657 (Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2); … · 1 patch or advisory reference on NVD Fix panel
detailsCVE-2026-69639 -
NVD CVE API 2.0
CVE-2026-69634 · CVSS 9.8
Heap-based buffer overflow in Windows iSCSI allows an unauthorized attacker to execute code over a network.
Fix: Microsoft: KB5127648 (Windows 11 Version 26H2); KB5126651 (Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809, …); KB5126655 (Windows Server 2022, Windows Server 2022 (Server Core installation)); … · 1 patch or advisory reference on NVD Fix panel
detailsCVE-2026-69634 -
NVD CVE API 2.0
CVE-2026-110130 · CVSS 10.0
Dockhand before 1.0.45 contains an authentication bypass in which the global auth hook skips authentication for any path ending in a static-asset extension such as .js, including /api/* routes, and the user-mutation handlers fail open for unauthenticated callers. Unauthenticated remote attackers can send a PUT request to /api/users/<id>.js to reset the admin's or any user's password and take over the account.
Fix: Nothing published yet: no patch, advisory or mitigation reference, no vendor advisory on the Wire, no KEV action. Fix panel
detailsCVE-2026-110130 -
NVD CVE API 2.0
CVE-2026-110112 · CVSS 9.2
Dockhand before 1.0.50 contains a privilege escalation vulnerability that allows users from another tenant to gain admin access because OIDC iss, aud, nonce and exp claims are not validated. Attackers with admin rights in another tenant of a shared provider like Microsoft Entra ID can recreate the mapped admin group and log in as Dockhand administrators.
Fix: Nothing published yet: no patch, advisory or mitigation reference, no vendor advisory on the Wire, no KEV action. Fix panel
detailsCVE-2026-110112 -
NVD CVE API 2.0
CVE-2026-105016 · CVSS 9.8
Heap-based buffer overflow in Microsoft QUIC allows an unauthorized attacker to execute code over a network.
Fix: Microsoft: KB5126655 (Windows Server 2022, Windows Server 2022 (Server Core installation)); KB5126653 (Windows 11 Version 23H2); KB5127648 (Windows 11 Version 24H2); … · vendor advisory: Microsoft Security Update Guide Fix panel
detailsCVE-2026-105016 -
NVD CVE API 2.0
CVE-2026-105010 · CVSS 9.8
Use after free in Microsoft Windows Search Component allows an unauthorized attacker to elevate privileges over a network.
Fix: Microsoft: KB5126836 (Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation)); KB5126868 (Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607, …); KB5126651 (Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809, …); … · 1 patch or advisory reference on NVD Fix panel
detailsCVE-2026-105010 -
NVD CVE API 2.0
CVE-2026-105008 · CVSS 9.0
No cwe for this issue in Windows Schannel allows an unauthorized attacker to perform spoofing over a network.
Fix: Microsoft: KB5126835 (Windows Server 2012, Windows Server 2012 (Server Core installation)); KB5126836 (Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation)); KB5126868 (Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607, …); … · 1 patch or advisory reference on NVD Fix panel
detailsCVE-2026-105008 -
NVD CVE API 2.0
CVE-2026-103849 · CVSS 10.0
Adobe Commerce is affected by an Improper Neutralization of Special Elements Used in a Template Engine vulnerability that could result in arbitrary code execution in the context of the current user, potentially gaining elevated access or control over the victim's account or session. Exploitation of this issue does not require user interaction. Scope is changed.
Fix: 1 public exploit Fix panel
detailsCVE-2026-103849 -
NVD CVE API 2.0
CVE-2026-102210 · CVSS 9.8
Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code over a network.
Fix: Microsoft: KB5126651 (Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809, …); KB5126657 (Windows 10 Version 21H2 for 32-bit Systems, Windows 10 Version 21H2); KB5126657 (Windows 10 Version 22H2 for 32-bit Systems, Windows 10 Version 22H2); … · 1 patch or advisory reference on NVD Fix panel
detailsCVE-2026-102210 -
NVD CVE API 2.0
CVE-2026-100222 · CVSS 9.8
Heap-based buffer overflow in Network Policy Server (NPS) allows an unauthorized attacker to execute code over a network.
Fix: Microsoft: KB5126835 (Windows Server 2012, Windows Server 2012 (Server Core installation)); KB5126836 (Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation)); KB5126868 (Windows 10 Version 1607, Windows Server 2016, …); … · 1 patch or advisory reference on NVD Fix panel
detailsCVE-2026-100222 -
NVD CVE API 2.0
CVE-2026-100219 · CVSS 9.8
Use after free in Microsoft QUIC allows an unauthorized attacker to execute code over a network.
Fix: Microsoft: KB5126655 (Windows Server 2022, Windows Server 2022 (Server Core installation)); KB5126653 (Windows 11 Version 23H2); KB5127648 (Windows 11 Version 24H2); … · 1 patch or advisory reference on NVD · vendor advisory: Microsoft Security Update Guide Fix panel
detailsCVE-2026-100219 -
NVD CVE API 2.0
CVE-2026-100202 · CVSS 9.8
Use after free in Windows Message Queuing Queue Manager allows an unauthorized attacker to execute code over a network.
Fix: Microsoft: KB5126835 (Windows Server 2012, Windows Server 2012 (Server Core installation)); KB5126836 (Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation)); KB5126868 (Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607, …); … · 1 patch or advisory reference on NVD · vendor advisory: Microsoft Security Update Guide Fix panel
detailsCVE-2026-100202 -
NVD CVE API 2.0
CVE-2026-100133 · CVSS 9.3
Adobe Commerce is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the page containing the vulnerable field, potentially gaining elevated access or control over the victim's account or session. Scope is changed.
Fix: Nothing published yet: no patch, advisory or mitigation reference, no vendor advisory on the Wire, no KEV action. Fix panel
detailsCVE-2026-100133 -
NVD CVE API 2.0
CVE-2026-92892 · CVSS 9.0
Potential arbitrary code execution, under specific configurations.
Fix: Nothing published yet: no patch, advisory or mitigation reference, no vendor advisory on the Wire, no KEV action. Fix panel
detailsCVE-2026-92892 -
NVD CVE API 2.0
CVE-2026-52394 · CVSS 9.1
DeepSeek V4 is vulnerable to Incorrect Access Control via a crafted input.
Fix: Nothing published yet: no patch, advisory or mitigation reference, no vendor advisory on the Wire, no KEV action. Fix panel
detailsCVE-2026-52394 -
NVD CVE API 2.0
CVE-2026-37107 · CVSS 9.8
An issue in HTMLy v.3.1.1 allows a remote attacker to escalate privileges via the get_feed function in the admin.php component
Fix: 1 public exploit Fix panel
detailsCVE-2026-37107 -
NVD CVE API 2.0
CVE-2026-106173 · CVSS 9.8
A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiSIEM 7.5.0 may allow attacker to execute unauthorized code or commands via specially crafted packets.
Fix: 6 public exploits Fix panel
detailsCVE-2026-106173 -
NVD CVE API 2.0
CVE-2026-105445 · CVSS 9.4
An Incorrect Privilege Assignment vulnerability in Docker Hub's account-to-organization conversion feature allowed an authenticated attacker to reassign a personal access token (PAT) they controlled to another Docker Hub user without rotating or revoking the token secret. The unchanged PAT then authenticated to the registry as the recipient and could pull, push, or delete images, within its scopes, in repositories accessible to that user, including organization repositories.
Fix: 4 public exploits Fix panel
detailsCVE-2026-105445 -
NVD CVE API 2.0
CVE-2026-94603 · CVSS 10.0
Podman is a tool for managing OCI containers and pods. From 4.4.0 until 5.8.8 and 6.1.3, podman run treats an image carrying the io.podman.annotations.checkpoint.runtime.name annotation as a checkpoint and silently ignores user-supplied container creation restrictions such as --cap-drop=ALL, allowing image-controlled checkpoint state to select weaker sandbox settings and capabilities. Rootless containers are not affected because checkpoint and restore are unavailable in that mode. This issue is fixed in versions 5.8.8 and 6.1.3.
Fix: Nothing published yet: no patch, advisory or mitigation reference, no vendor advisory on the Wire, no KEV action. Fix panel
detailsCVE-2026-94603 -
NVD CVE API 2.0
CVE-2026-77459 · CVSS 9.9
Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. From 2.10.0 until 3.3.15, 3.4.10, 3.5.4, and 3.6.0-rc2, Argo CD creates PostDelete resource hooks without applying the AppProject destination and resource authorization checks used during ordinary synchronization. The omitted checks include cluster-scoped and namespaced resource allow/deny lists. A user who can write to an Application's Git repository can commit a delete hook targeting a forbidden namespace, server, group, kind, or resource name, and deletion of the Application causes the application-controller to create
Fix: Nothing published yet: no patch, advisory or mitigation reference, no vendor advisory on the Wire, no KEV action. Fix panel
detailsCVE-2026-77459 -
NVD CVE API 2.0
CVE-2026-69227 · CVSS 9.8
A flaw in Portal for ArcGIS allows unauthenticated access to certain Portal Administrator API endpoints under specific conditions. This could enable an attacker to access administrative functionality that should require authentication.
Fix: Nothing published yet: no patch, advisory or mitigation reference, no vendor advisory on the Wire, no KEV action. Fix panel
detailsCVE-2026-69227 -
NVD CVE API 2.0
CVE-2026-55562 · CVSS 9.0
Cronicle is a multi-server task scheduler and runner, with a web based front-end UI. Prior to 0.9.119, the administrator Activity Log in htdocs/js/pages/admin/Activity.js concatenates the attacker-controlled item.user.full_name value into HTML without applying encode_entities and inserts the result through this.div.html. The bundled pixl-server-user input filter can be bypassed by a tag containing a line break because its regular expression does not match newlines. An authenticated non-administrator can update the attacker's own name through /api/user/update using a valid session and current p
Fix: Nothing published yet: no patch, advisory or mitigation reference, no vendor advisory on the Wire, no KEV action. Fix panel
detailsCVE-2026-55562 -
NVD CVE API 2.0
CVE-2026-55183 · CVSS 9.6
RClone Manager is a cross-platform GUI application designed to help users manage Rclone remotes efficiently. Prior to 0.2.7, RClone Manager starts the local rclone rcd service on 127.0.0.1:51900 with --rc-no-auth, --rc-allow-origin *, and --rc-serve. A malicious web page opened by a user while the daemon is running can therefore send cross-origin requests to the unauthenticated local API with the user's operating-system privileges. The requests can disclose configured storage credentials and potentially access, upload, modify, or exfiltrate locally stored files accessible to the user and files
Fix: Nothing published yet: no patch, advisory or mitigation reference, no vendor advisory on the Wire, no KEV action. Fix panel
detailsCVE-2026-55183 -
NVD CVE API 2.0
CVE-2026-54454 · CVSS 9.1
OpenCATS is an open-source applicant tracking system and recruitment CRM for staffing agencies and hiring teams. Prior to 0.10.0, the OpenCATS Import module in modules/import/ImportUI.php can preserve an uploaded file's original name for one import data type and place the file in the web-accessible temporary directory. An authenticated user with Import privileges can select the affected import path and upload a PHP file that remains under an attacker-controlled executable filename, and an import error can leave the file on disk. If the temporary directory is served with PHP execution enabled,
Fix: Nothing published yet: no patch, advisory or mitigation reference, no vendor advisory on the Wire, no KEV action. Fix panel
detailsCVE-2026-54454 -
NVD CVE API 2.0
CVE-2026-109412 · CVSS 9.9
An exposed dangerous endpoint in Ivanti Neurons Patch for Intune allows a remote authenticated attacker to leak sensitive authentication information.
Fix: Nothing published yet: no patch, advisory or mitigation reference, no vendor advisory on the Wire, no KEV action. Fix panel
detailsCVE-2026-109412 -
NVD CVE API 2.0
CVE-2026-106042 · CVSS 9.9
An External Control of File Name or Path vulnerability in Ivanti Xtraction before version 2026.4 allows a remote authenticated attacker to redirect application-generated requests to an attacker-controlled endpoint and obtain EPMM connector credentials transmitted by the application.
Fix: Nothing published yet: no patch, advisory or mitigation reference, no vendor advisory on the Wire, no KEV action. Fix panel
detailsCVE-2026-106042 -
NVD CVE API 2.0
CVE-2026-102989 · CVSS 9.3
TanStack Router is a client-first, server-capable, fully type-safe router and full-stack framework for the web. From 1.143.12 until 1.169.39 for @tanstack/start-server-core, 1.168.60 for @tanstack/react-start, 1.168.57 for @tanstack/solid-start, and 1.168.56 for @tanstack/vue-start, an unauthenticated attacker can place non-public fields in a server-function request payload so that attacker-controlled middleware state reaches the error path and a response-shaped object is accepted as an HTTP response. A crafted server-function URL can therefore return attacker-controlled HTML from the applicat
Fix: Nothing published yet: no patch, advisory or mitigation reference, no vendor advisory on the Wire, no KEV action. Fix panel
detailsCVE-2026-102989 -
NVD CVE API 2.0
CVE-2026-78802 · CVSS 9.8
An issue in SKYWORTH DIGITAL CO.,LTD SK-WR6640X Wi-Fi 6 Dual-Band Fiber Router (AX1800M) V1.0.3 allows a remote attacker to execute arbitrary code.
Fix: Nothing published yet: no patch, advisory or mitigation reference, no vendor advisory on the Wire, no KEV action. Fix panel
detailsCVE-2026-78802 -
NVD CVE API 2.0
CVE-2026-55695 · CVSS 9.1
FearlessCMS is a flat-file content management system centered on simplicity and open source. In 0.1.2b and earlier, an authenticated administrator can set an arbitrary Git repository URL through admin/updater-handler.php and trigger perform_update, which passes the URL to update.sh. The updater clones the repository and replaces the live plugins/, admin/, and includes/ directories without verifying the repository's identity, signatures, or contents. Because router.php permits existing PHP files under plugins to be executed by the PHP development server, attacker-supplied update content can exe
Fix: Nothing published yet: no patch, advisory or mitigation reference, no vendor advisory on the Wire, no KEV action. Fix panel
detailsCVE-2026-55695 -
NVD CVE API 2.0
CVE-2026-55675 · CVSS 10.0
The Salty documentation repository builds and deploys the docs.saltbox.dev website. Prior to commit 649c9aea2daef1168eeb0415b44e65dbbde9f220, .github/workflows/trigger-pr-build.yml records an untrusted fork commit in the pr_info artifact, and the secret-bearing workflow_run job in .github/workflows/build-pr.yml checks out that commit before running pip install -r requirements.txt. A fork pull request can therefore supply attacker-authored setup.py or PEP 517 build hooks whose installation code executes in the privileged base-repository workflow with CF_API_TOKEN, GH_TOKEN, MKDOCS_GIT_COMMITTER
Fix: Nothing published yet: no patch, advisory or mitigation reference, no vendor advisory on the Wire, no KEV action. Fix panel
detailsCVE-2026-55675 -
NVD CVE API 2.0
CVE-2026-104935 · ivanti, connect_secure · CVSS 8.6
Authentication bypass by spoofing in ICS before version 25.1.3.0 allows a remote unauthenticated attacker to execute arbitrary commands. This does not impact ICS version 22.7R2.14 or prior.
Fix: 8 public exploits · CISA: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Securi… (due 2026-10-16) · 1 patch or advisory reference on NVD Fix panel
-
NVD CVE API 2.0
CVE-2026-103928 · CVSS 9.3
Metabase is an open source business intelligence and analytics platform. From 1.55.0 until 1.58.16, 1.59.13, 1.60.9, and 1.61.4, native queries and actions against an H2 data source are passed through without restricting host-facing built-in functions. A user authorized to run native queries or actions can invoke FILE_READ, FILE_WRITE, CSVREAD, CSVWRITE, or LINK_SCHEMA to read or write arbitrary files on the Metabase server or link other databases. The default sample database uses H2, so the vulnerable surface is exposed by default. This issue is fixed in versions 1.58.16, 1.59.13, 1.60.9, and
Fix: Nothing published yet: no patch, advisory or mitigation reference, no vendor advisory on the Wire, no KEV action. Fix panel
detailsCVE-2026-103928