VulnSea

Daily digest

Monday 19 October 2026

430 new CVEs this day, in line with the recent average. Of those, 29 critical and 105 high. 154 arrived with exploitation evidence or public exploit code already attached. Apache Software Foundation was the most-affected vendor with 57.

430
New CVEs
29
Critical
0
KEV additions
416
Records changed

New this day, ranked by depth score

The 12 that matter most of the 430 published.

MAL-2026-18045Critical⚠ Exploited
1w ago

Malicious code in asurion (PyPI)

Malicious code in asurion (PyPI)

▾ Abyssalasurion · asurionvia OSV
MAL-2026-17943Critical⚠ Exploited
1w ago

Malicious code in vinted-mocked-apis (PyPI)

Malicious code in vinted-mocked-apis (PyPI)

▾ Abyssalvinted-mocked-apis · vinted-mocked-apisvia OSV
MAL-2026-17927Critical⚠ Exploited
1w ago

Malicious code in fabtoolkit (PyPI)

Malicious code in fabtoolkit (PyPI)

▾ Abyssalfabtoolkit · fabtoolkitvia OSV
MAL-2026-17926Critical⚠ Exploited
1w ago

Malicious code in fabdeploycheck (PyPI)

Malicious code in fabdeploycheck (PyPI)

▾ Abyssalfabdeploycheck · fabdeploycheckvia OSV
CVE-2026-78162Critical· 10.0PoC
1w ago

Apache Camel: Camel-Hazelcast Managed Instances Missing Java Deserialization Filter (Incomplete Fix for CVE-2026-43865)

Deserialization of Untrusted Data vulnerability in Apache Camel. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1. The camel-hazelcast component applies a default Hazelcast JavaSerializationFilte…

▾ AbyssalApache Software Foundation · org.apache.camel:camel-hazelcastEPSS 1.3%via CVEORG
CVE-2026-115893Critical· 9.9PoC
1w ago

Cranelift backend on aarch64 can jump to incorrect target on large Wasm `br_table` instruction

Cranelift backend on aarch64 can jump to incorrect target on large Wasm `br_table` instruction

▾ Abyssalwasmtime · wasmtimeEPSS 0.43%via OSV
CVE-2026-112371Critical· 9.9PoC
1w ago

H3C Magic NX15 RPC esps write code injection

A vulnerability was determined in H3C Magic NX15 NX15V100R017. Impacted is the function write of the file /api/esps of the component RPC Interface. Executing a manipulation of the argument path can lead to code injection. The attack can …

▾ AbyssalH3C · Magic NX15EPSS 0.55%via CVEORG
CVE-2026-112370Critical· 9.9PoC
1w ago

H3C Magic NX15 usrlist sub_416874 os command injection

A vulnerability was found in H3C Magic NX15 100R017. This issue affects the function sub_416874 of the file /usr/bin/usrlist. Performing a manipulation results in os command injection. Remote exploitation of the attack is possible. The e…

▾ AbyssalH3C · Magic NX15EPSS 2.0%via CVEORG
CVE-2026-111058Critical· 9.8PoC
1w ago

Mercury: Unauthenticated Remote Code Execution via /api/kernels

Mercury is a Python framework for sharing Jupyter notebooks as web applications and dashboards. Prior to 3.2.6, default tokenless deployments allow anonymous clients to create Jupyter kernels and send execute_request messages containing …

▾ Abyssalmljar · mercuryEPSS 0.52%via CVEORG
CVE-2026-109437Critical· 9.8PoC
1w ago

Cognition < 0.13.0 Unauthenticated RCE via Local Shell Backend

Cognition before 0.13.0 contains an unauthenticated remote code execution vulnerability due to defaulting its agent sandbox backend to local execution and shipping no authentication on its REST/SSE API. Attackers can create a session via…

▾ AbyssalCognicellAI · CognitionEPSS 0.78%via CVEORG
CVE-2026-109432Critical· 9.8PoC
1w ago

Camunda Expression Injection via orQueries RCE

Camunda 7.24.0 before 7.24.14 and 7.23.0 before 7.23.17 contains an expression injection vulnerability where AdhocQueryValidator.validate() fails to check sub-query expression maps within the orQueries field exposed by TaskQueryDto, allo…

▾ AbyssalCamunda · Camunda 7EPSS 0.56%via CVEORG
CVE-2026-107083Critical· 9.8PoC
1w ago

SENAYAN Library Management System (SLiMS) Bulian (slims9_bulian) 9.8.0 is vulnerable to SQL Injection in admin/modules/reporting/customs/dl_detail.php via the parameter fileID.

SENAYAN Library Management System (SLiMS) Bulian (slims9_bulian) 9.8.0 is vulnerable to SQL Injection in admin/modules/reporting/customs/dl_detail.php via the parameter fileID.

▾ AbyssalEPSS 0.49%via CVEORG

Most-changed records

Existing CVEs whose severity, score, KEV or exploitation status moved.

  • CVE-2019-9901EnvoyProxy Envoy Missing HTTP URL path normalization56
  • CVE-2014-6407Arbitrary Code Execution in Docker41
  • CVE-2025-71348picklescan before 0.0.28 fails to detect malicious pickle files that invoke torch.utils._config_module.load_config function within reduce methods45
  • CVE-2026-112075unslothai unsloth sentence_transformer.py externally-controlled input to select classes or code47
  • CVE-2026-78796An issue in Netcore B11 Enterprise-level full Gigabit 9-port shop wireless router v1.3.241114.024540 and before allows a remote attacker to execute arbitrary code via the www\cgi-bin\upgrade file66
  • CVE-2026-95125libming through 0.4.8 contains a heap buffer overflow in r_readc() in src/blocks/fromswf.c48
  • CVE-2025-70515The device log component of Fanvil x7a firmware version 2.6.0.1182 does not properly sanitize or encode reflected user supplied data46
  • CVE-2025-55667A segmentation violation in the dump_isom_saps function (/mp4box/filedump.c) of GPAC MP4Box v2.5-DEV-rev1672-gc9a31d0e1-masterallows attackers to cause a Denial of Service (DoS) via supplying a crafted MP4 file.42

Most-affected vendors

By CVEs published in the period.