VulnSea

Daily digest

Thursday 15 October 2026

571 new CVEs this day, in line with the recent average. Of those, 52 critical and 227 high. 178 arrived with exploitation evidence or public exploit code already attached. CISA added one CVE to the Known Exploited Vulnerabilities catalog. QNAP Systems Inc. was the most-affected vendor with 35.

571
New CVEs
52
Critical
1
KEV additions
1452
Records changed

Added to CISA KEV

Confirmed exploitation in the wild — federal remediation deadlines attach to these.

CVE-2026-21589Critical· 9.3CISA KEVPoC
3w ago

This is a vulnerability in Bitbucket Data Center, Confluence Data Center, Jira Service Management Data Center, Jira Software Data Center, Bamboo Data Center

This is a vulnerability in Bitbucket Data Center, Confluence Data Center, Jira Service Management Data Center, Jira Software Data Center, Bamboo Data Center. Crowd Data Center, Crucible and Fisheye. This Arbitrary File Access vulnerabili…

▾ HadalAtlassian · Bamboo Data CenterEPSS 99%via NVD

New this day, ranked by depth score

The 12 that matter most of the 571 published.

CVE-2026-102764Critical· 9.3CISA KEV0dayPoC
1w ago

Improper Origin Validation in Internal Messaging Components of BeyondTrust Remote Support

The vulnerability exists within internal components of BeyondTrust’s Remote Support product. The components did not adequately validate the origin of the messages it received. Under the right conditions, this could allow an attacker to p…

▾ HadalBeyondTrust · Remote SupportEPSS 19%via CVEORG
MAL-2026-17889Critical⚠ Exploited
1w ago

Malicious code in proxyrobika (PyPI)

Malicious code in proxyrobika (PyPI)

▾ Abyssalproxyrobika · proxyrobikavia OSV
MAL-2026-17887Critical⚠ Exploited
1w ago

Malicious code in proxy-rubikis (PyPI)

Malicious code in proxy-rubikis (PyPI)

▾ Abyssalproxy-rubikis · proxy-rubikisvia OSV
MAL-2026-17886Critical⚠ Exploited
1w ago

Malicious code in py-wormgpt (PyPI)

Malicious code in py-wormgpt (PyPI)

▾ Abyssalpy-wormgpt · py-wormgptvia OSV
MAL-2026-17885Critical⚠ Exploited
1w ago

Malicious code in proxyrubika (PyPI)

Malicious code in proxyrubika (PyPI)

▾ Abyssalproxyrubika · proxyrubikavia OSV
MAL-2026-17884Critical⚠ Exploited
1w ago

Malicious code in getpubip (PyPI)

Malicious code in getpubip (PyPI)

▾ Abyssalgetpubip · getpubipvia OSV
MAL-2026-17883Critical⚠ Exploited
1w ago

Malicious code in py-worm (PyPI)

Malicious code in py-worm (PyPI)

▾ Abyssalpy-worm · py-wormvia OSV
MAL-2026-17881Critical⚠ Exploited
1w ago

Malicious code in py-sock2 (PyPI)

Malicious code in py-sock2 (PyPI)

▾ Abyssalpy-sock2 · py-sock2via OSV
CVE-2026-110957Critical· 10.0PoC
1w ago

A vulnerability has been found in Wavlink WL-WN530BE2-A up to M30BE2_V250604

A vulnerability has been found in Wavlink WL-WN530BE2-A up to M30BE2_V250604. The affected element is the function sub_12580 of the file api.cgi of the component Login Processing. The manipulation of the argument REMOTE_ADDR leads to os …

▾ AbyssalWavlink · WL-WN530BE2-AEPSS 3.1%via NVD
CVE-2026-57155Critical· 9.9PoC
1w ago

OPNsense is a FreeBSD based firewall and routing platform

OPNsense is a FreeBSD based firewall and routing platform. Prior to version 26.1.11, the Firewall Alias GeoIP importer's process_zip() and process_gzip() paths in src/opnsense/scripts/filter/lib/alias/geoip.py use an unvalidated CSV coun…

▾ Abyssalopnsense · coreEPSS 0.86%via NVD
CVE-2026-110958Critical· 10.0PoC
1w ago

A vulnerability was found in Wavlink WN530HG4B M30HG4B_V260724

A vulnerability was found in Wavlink WN530HG4B M30HG4B_V260724. The impacted element is an unknown function of the file api.cgi. The manipulation results in heap-based buffer overflow. It is possible to launch the attack remotely. The ex…

▾ AbyssalWavlink · WN530HG4BEPSS 1.0%via NVD
CVE-2026-111329Critical· 9.8PoC
1w ago

JuggleIM im-server through 1.8.16 Default Admin Credentials in Admin Console

JuggleIM im-server through 1.8.16 ships default administrator credentials admin/123456 that allow unauthenticated remote attackers to access the admin console on port 8090. Attackers can log in as administrator, even after account deleti…

▾ Abyssaljuggleim · JuggleIMEPSS 0.69%via CVEORG

Most-changed records

Existing CVEs whose severity, score, KEV or exploitation status moved.

  • CVE-2019-9901EnvoyProxy Envoy Missing HTTP URL path normalization56
  • CVE-2014-6407Arbitrary Code Execution in Docker41
  • CVE-2025-71348picklescan before 0.0.28 fails to detect malicious pickle files that invoke torch.utils._config_module.load_config function within reduce methods45
  • CVE-2026-0322A remote code execution (RCE) vulnerability in the management interface of Palo Alto Networks PAN-OS® software enables an authenticated attacker with network access to execute arbitrary code with root privileges on the firewall. The s…65
  • CVE-2026-101307When the PCM sample array needs to grow, the RACK stack doubles a 16-bit allocation counter45
  • CVE-2025-70520The websocket handler of Fanvil x7a firmware version 2.6.0.1182 does not enforce proper authentication restrictions against sessionless users66
  • CVE-2026-77371Redash is a package for data visualization and sharing63
  • CVE-2021-4469Denver SHO-110 IP cameras expose a secondary HTTP service on TCP port 8001 that provides access to a '/snapshot' endpoint without authentication60

Most-affected vendors

By CVEs published in the period.