Daily digest
Tuesday 6 October 2026
A heavy day: 1,028 new CVEs, well above the recent average of about 385. Severity skewed high: 101 critical and 418 high, 50% of the total. 94 arrived with exploitation evidence or public exploit code already attached. google was the most-affected vendor with 253.
New this day, ranked by depth score
The 12 that matter most of the 1028 published.
MAL-2026-17639Critical⚠ ExploitedMalicious code in lore-cs (PyPI)
Malicious code in lore-cs (PyPI)
CVE-2026-105778Critical· 9.9PoCA vulnerability has been found in Tenda AC5 02.03.01.111_multi
A vulnerability has been found in Tenda AC5 02.03.01.111_multi. Affected by this issue is some unknown functionality of the file /goform/setWifi of the component Wifi Handler. Such manipulation of the argument wifiPwd leads to stack-base…
CVE-2026-105484Critical· 10.0PoCA security vulnerability has been detected in TOTOLINK X6000R 9.4.0cu.652_B20230116
A security vulnerability has been detected in TOTOLINK X6000R 9.4.0cu.652_B20230116. The impacted element is the function firmware_check of the file /cgi-bin/cstecgi.cgi of the component UploadFirmwareFile Handler. Such manipulation of t…
CVE-2026-94293Critical· 9.8PoCAn unauthenticated remote attacker can modify Asset Administration Shell submodel data via PATCH requests and can read all data exposed by the GET endpoints.
An unauthenticated remote attacker can modify Asset Administration Shell submodel data via PATCH requests and can read all data exposed by the GET endpoints.
CVE-2026-106511Critical· 9.8PoCMultiversX's multisig-improved (repository: mx-multisig-and-modules) reference implementation of their on-chain multisig smart contract system contains a vulnerability where a missing independent authorization check allows any account wi…
MultiversX's multisig-improved (repository: mx-multisig-and-modules) reference implementation of their on-chain multisig smart contract system contains a vulnerability where a missing independent authorization check allows any account wi…
CVE-2026-106446Critical· 9.8PoCHandlebars provides the power necessary to let users build semantic templates
Handlebars provides the power necessary to let users build semantic templates. From 4.0.0 until 4.7.10, Handlebars.compile() and Handlebars.precompile() accept pre-parsed AST objects while validating only selected PathExpression, NumberL…
CVE-2026-106037Critical· 9.8PoCMooncake through 0.3.13.post1 contains a missing authentication vulnerability in the Store REST service, which binds to 0.0.0.0 without authentication on any route
Mooncake through 0.3.13.post1 contains a missing authentication vulnerability in the Store REST service, which binds to 0.0.0.0 without authentication on any route. Unauthenticated attackers can call routes such as /api/get, /api/put, /a…
CVE-2025-71383Critical· 9.8PoCDbit WIFI4 N300 1.0.0 devices allow the management interface to be crashed via a request (from the local Wi-Fi network) that lacks a /api/login username or password field
Dbit WIFI4 N300 1.0.0 devices allow the management interface to be crashed via a request (from the local Wi-Fi network) that lacks a /api/login username or password field. This occurs because of an error in a JSON parser.
CVE-2026-106445Critical· 9.2PoCHandlebars provides the power necessary to let users build semantic templates
Handlebars provides the power necessary to let users build semantic templates. From 3.0.0 until 4.7.10, Handlebars lookupProperty returns Function.prototype.constructor before applying the prototype-access deny list because constructor i…
CVE-2026-105844Critical· 9.3PoCPayload is a free and open source headless content management system
Payload is a free and open source headless content management system. In versions from 3.0.0 before 3.88.0 and canary versions before 4.0.0-canary.27, an unauthenticated user can submit prototype-sensitive field paths when @payloadcms/pl…
CVE-2026-105793Critical· 9.1PoCMicrosoft UFO is an open-source framework for intelligent automation across devices and platforms
Microsoft UFO is an open-source framework for intelligent automation across devices and platforms. Prior to 3.0.9, the press_key tool in ufo/client/mcp/http_servers/mobile_mcp_server.py accepts a free-form key_code parameter and passes i…
CVE-2026-105797High· 8.8PoCSimpleChat is a secure AI conversation application with personal and group workspaces for document-grounded interactions
SimpleChat is a secure AI conversation application with personal and group workspaces for document-grounded interactions. In versions 0.261.003 and 0.261.027, an authorization ordering flaw in POST /api/user/plugins allows an authenticat…
Most-changed records
Existing CVEs whose severity, score, KEV or exploitation status moved.
- CVE-2019-9901Envoy 1.9.0 and before does not normalize HTTP URL pathsseverity, cvss37
- CVE-2014-6407Arbitrary Code Execution in Dockercvss41
- CVE-2025-71348picklescan before 0.0.28 fails to detect malicious pickle files that invoke torch.utils._config_module.load_config function within reduce methodsexploit_available57
- CVE-2026-104711Improper neutralization of special elements used in an expression language statement ('Expression Language Injection') vulnerability in Apache Strutsseverity, cvss66
- CVE-2026-98080In the Linux kernel, the following vulnerability has been resolved: btrfs: do not force reloc root creation during qgroup_account_snapshot() [BUG] When running btrfs/252 with quota enabled through MKFS_OPTIONS="-O quota", it has a high…severity, cvss30
- CVE-2026-51881deeptutor 1.4.0 contains code injection in ExecTool.executeseverity, cvss, exploit_available66
- CVE-2026-51886langflow-ai langflow v1.9.3 is affected by: Code Injectionexploit_available, severity, cvss66
- CVE-2026-51922agentscope v1.0.20 contains code injection in execute_shell_command (src/agentscope/tool/_coding/_shell.py)severity, cvss, exploit_available66
Most-affected vendors
By CVEs published in the period.