Daily digest
Friday 2 October 2026
445 new CVEs this day, in line with the recent average. Severity skewed high: 51 critical and 197 high, 56% of the total. 84 arrived with exploitation evidence or public exploit code already attached. CISA added 2 CVEs to the Known Exploited Vulnerabilities catalog. Apache Software Foundation was the most-affected vendor with 69.
Added to CISA KEV
Confirmed exploitation in the wild — federal remediation deadlines attach to these.
CVE-2026-102489Critical· 9.8CISA KEVPoCZammad versions 6.3.0 to 6.5.4 are vulnerable a session hijack vulnerability that leads to remote code execution as the zammad user
Zammad versions 6.3.0 to 6.5.4 are vulnerable a session hijack vulnerability that leads to remote code execution as the zammad user. The bug is also present in version 7.0.0 to version 7.1.2, but not exploitable due to changes in the und…
CVE-2026-102490High· 7.8CISA KEVPoCZammad packages built with packager.io (DEB and RPM) could have allowed a local attacker who already had file system write privileges as the unprivileged zammad service account to escalate to full root privileges on the host
Zammad packages built with packager.io (DEB and RPM) could have allowed a local attacker who already had file system write privileges as the unprivileged zammad service account to escalate to full root privileges on the host. Service pro…
New this day, ranked by depth score
The 12 that matter most of the 445 published.
MAL-2026-17457Critical⚠ ExploitedMalicious code in voxeval (PyPI)
Malicious code in voxeval (PyPI)
MAL-2026-17455Critical⚠ ExploitedMalicious code in dedh-devops-automation (PyPI)
Malicious code in dedh-devops-automation (PyPI)
MAL-2026-17454Critical⚠ ExploitedMalicious code in gogets.dev/btreex (Go)
Malicious code in gogets.dev/btreex (Go)
MAL-2026-17453Critical⚠ ExploitedMalicious code in gocommunity.io/orderedbtree (Go)
Malicious code in gocommunity.io/orderedbtree (Go)
CVE-2026-90970Critical· 9.9PoCGitLab has remediated a vulnerability in the GitLab AI Gateway component affecting all versions of the AI Gateway from 18.1.6 before 19.2.4, 19.3 before 19.3.2, and 19.4 before 19.4.1 that, under certain conditions, could have allowed an…
GitLab has remediated a vulnerability in the GitLab AI Gateway component affecting all versions of the AI Gateway from 18.1.6 before 19.2.4, 19.3 before 19.3.2, and 19.4 before 19.4.1 that, under certain conditions, could have allowed an…
CVE-2026-104610Critical· 10.0PoCA security vulnerability has been detected in Tenda HG7, HG9 and HG10 300001138_en_xpon
A security vulnerability has been detected in Tenda HG7, HG9 and HG10 300001138_en_xpon. This impacts the function boaGetVar of the file /boaform/formLoopBack of the component Boa Web Server. Such manipulation of the argument Ethtype lea…
CVE-2026-103956Critical· 10.0PoCMissing authentication for critical function in the authentication dependency in Loom for AWS before 1.6.1 allowed remote actors to obtain super-admin authority over the agent control plane, including registering tool servers, reading st…
Missing authentication for critical function in the authentication dependency in Loom for AWS before 1.6.1 allowed remote actors to obtain super-admin authority over the agent control plane, including registering tool servers, reading st…
CVE-2026-94541Critical· 9.8PoCThe WPMobile.App – Android and iOS App Builder plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 11.82 This is due to the plugin not properly verifying that a user is authorized to perform a…
The WPMobile.App – Android and iOS App Builder plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 11.82 This is due to the plugin not properly verifying that a user is authorized to perform a…
CVE-2026-84411Critical· 9.8PoCThe web management service in affected RouterOS versions contains an integer underflow in its HTTP request body handling that is reachable before authentication
The web management service in affected RouterOS versions contains an integer underflow in its HTTP request body handling that is reachable before authentication. This can be leveraged by an unauthenticated network attacker to achieve arb…
CVE-2026-51922Critical· 9.8PoCagentscope v1.0.20 contains code injection in execute_shell_command (src/agentscope/tool/_coding/_shell.py)
agentscope v1.0.20 contains code injection in execute_shell_command (src/agentscope/tool/_coding/_shell.py). Depending on the exposed entry, an attacker can trigger attacker-controlled code or command execution.
CVE-2026-51918Critical· 9.8PoCFinRobot 1.0.0 contains code injection in CodingUtils.create_file_with_code ().
FinRobot 1.0.0 contains code injection in CodingUtils.create_file_with_code ().
CVE-2026-51911Critical· 9.8PoCvanna v2.0.2 contains a code injection vulnerability in VannaBase.get_plotly_figure (src/vanna/legacy/base/base.py)
vanna v2.0.2 contains a code injection vulnerability in VannaBase.get_plotly_figure (src/vanna/legacy/base/base.py). Depending on the exposed entry, an attacker can trigger attacker-controlled code or command execution.
Most-changed records
Existing CVEs whose severity, score, KEV or exploitation status moved.
- CVE-2019-9901EnvoyProxy Envoy Missing HTTP URL path normalizationseverity, cvss56
- CVE-2014-6407Docker before 1.3.2 allows remote attackers to write to arbitrary files and execute arbitrary code via a (1) symlink or (2) hard link attack in an image archive in a (a) pull or (b) load operation.cvss42
- CVE-2025-71348picklescan before 0.0.28 fails to detect malicious pickle files that invoke torch.utils._config_module.load_config function within reduce methodsexploit_available45
- CVE-2026-102489Zammad versions 6.3.0 to 6.5.4 are vulnerable a session hijack vulnerability that leads to remote code execution as the zammad userseverity, cvss, exploited, exploit_available79
- CVE-2026-102490Zammad packages built with packager.io (DEB and RPM) could have allowed a local attacker who already had file system write privileges as the unprivileged zammad service account to escalate to full root privileges on the hostseverity, cvss, exploited, exploit_available68
- CVE-2026-51857In camel-ai camel 0.2.91a1, v0.2.91a2 and v0.2.91a3, CodeExecutionToolkit can run model-produced Python code through SubprocessInterpreter without an approval boundary.severity, cvss, exploit_available66
- CVE-2026-51858In camel-ai camel 0.2.91a1, v0.2.91a2 and v0.2.91a3, TerminalToolkit.shell_exec allows prompt-driven shell command execution without an approval boundary.severity, cvss, exploit_available66
- CVE-2026-51861bisheng 2.3.0, 2.4.0, and 2.4.0-beta1 is vulnerable to Code Injection in src/backend/bisheng/api/v1/validate.py.severity, cvss, exploit_available66
Most-affected vendors
By CVEs published in the period.