Daily digest
Monday 12 October 2026
A heavy day: 683 new CVEs, well above the recent average of about 427. Of those, 44 critical and 214 high. 191 arrived with exploitation evidence or public exploit code already attached. frappe was the most-affected vendor with 86.
New this day, ranked by depth score
The 12 that matter most of the 683 published.
MAL-2026-17847Critical⚠ ExploitedMalicious code in npp-ml (PyPI)
Malicious code in npp-ml (PyPI)
MAL-2026-17809Critical⚠ ExploitedMalicious code in minecraftaccfinder (PyPI)
Malicious code in minecraftaccfinder (PyPI)
CVE-2026-108918Critical· 10.0PoCA vulnerability was identified in Edimax BR-6208AC 1.32
A vulnerability was identified in Edimax BR-6208AC 1.32. Impacted is an unknown function of the file /goform/formWlanMP. The manipulation of the argument readE2P leads to command injection. It is possible to initiate the attack remotely.…
CVE-2026-108917Critical· 10.0PoCA vulnerability was determined in Edimax BR-6208AC 1.32
A vulnerability was determined in Edimax BR-6208AC 1.32. This issue affects some unknown processing of the file /goform/formAutoFWupgrade. Executing a manipulation of the argument tftpsIP can lead to command injection. The attack may be …
CVE-2026-108915Critical· 9.9PoCA vulnerability has been found in Edimax BR-6208AC 1.32
A vulnerability has been found in Edimax BR-6208AC 1.32. This affects an unknown part of the file /goform/formWlanMP. Such manipulation of the argument ateBW leads to buffer overflow. The attack can be executed remotely. The exploit has …
CVE-2026-108914Critical· 9.9PoCA flaw has been found in Edimax BR-6208AC 1.32
A flaw has been found in Edimax BR-6208AC 1.32. Affected by this issue is some unknown functionality of the file /goform/formWlSiteSurvey. This manipulation of the argument ifname causes buffer overflow. Remote exploitation of the attack…
CVE-2026-108907Critical· 10.0PoCA vulnerability was determined in Netcore NR268 1.7.121109
A vulnerability was determined in Netcore NR268 1.7.121109. Affected is the function user_ok of the component CGI Execution. This manipulation causes improper authentication. The attack can be initiated remotely. The exploit has been pub…
CVE-2026-108896Critical· 9.9PoCA vulnerability was found in Linksys E1700 1.0.0.4.003
A vulnerability was found in Linksys E1700 1.0.0.4.003. This affects the function setLinksysIpv6 of the file /goform/setLinksysIpv6. The manipulation of the argument _6rd_prefix/_6rd_prefix_len results in os command injection. The attack…
CVE-2026-108895Critical· 9.9PoCA weakness has been identified in Linksys E1700 1.0.0.4.003
A weakness has been identified in Linksys E1700 1.0.0.4.003. The affected element is the function setDMZ of the file /goform/setDMZ. Executing a manipulation of the argument MAC_addr can lead to os command injection. The attack can be ex…
CVE-2026-108894Critical· 9.9PoCA security flaw has been discovered in Linksys E1700 1.0.0.4.003
A security flaw has been discovered in Linksys E1700 1.0.0.4.003. Impacted is the function addStaticRoute of the file /goform/addStaticRoute of the component Static Route Handler. Performing a manipulation of the argument staticRoute_IP_…
CVE-2026-108893Critical· 9.9PoCA vulnerability was identified in Linksys E1700 up to 1.0.0.4.003
A vulnerability was identified in Linksys E1700 up to 1.0.0.4.003. This issue affects the function setVlan of the file /goform/setVlan. Such manipulation of the argument vlan_set leads to stack-based buffer overflow. The attack may be la…
CVE-2026-108892Critical· 10.0PoCA vulnerability was determined in Linksys E1700 1.0.0.4.003
A vulnerability was determined in Linksys E1700 1.0.0.4.003. This vulnerability affects the function ssid1MACFilter of the file /goform/ssid1MACFilter of the component Mac Filter. This manipulation of the argument newap_text_%d causes st…
Most-changed records
Existing CVEs whose severity, score, KEV or exploitation status moved.
- CVE-2019-9901Envoy 1.9.0 and before does not normalize HTTP URL pathsseverity, cvss37
- CVE-2014-6407Arbitrary Code Execution in Dockercvss41
- CVE-2025-71348picklescan before 0.0.28 fails to detect malicious pickle files that invoke torch.utils._config_module.load_config function within reduce methodsexploit_available57
- CVE-2026-34910A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi OS devices to execute a Command Injection.epss, kev98
- CVE-2026-5388justhtml before 1.15.0 contains multiple security issues in URL sanitization helpers (clean_url_value/clean_url_in_js_string), HTML serialization, Markdown passthrough (html_passthrough=True), and several custom sanitization-policy edge …severity, cvss54
- CVE-2026-77000The WP Social Media Login WordPress plugin through 1.0.6 does not verify that a social login was actually completed with the identity provider before authenticating a visitor, allowing unauthenticated attackers to log in as any existing …severity, cvss54
- CVE-2026-77001The Social Login & Sharing buttons with Analytics By SoClever WordPress plugin through 1.2.0 does not perform any authentication, authorisation or nonce checks in one of its publicly accessible login handlers, allowing unauthenticated at…severity, cvss54
- CVE-2026-77002The SmilePass Selfie Login WordPress plugin through 1.0.2 does not perform any server-side verification of the identity it is asked to authenticate, allowing unauthenticated users to log in as any registered account, including administra…severity, cvss54
Most-affected vendors
By CVEs published in the period.