# VulnSea

> Newly released CVE and 0day intelligence across every platform. Each entry is a structured markdown document with YAML frontmatter (id, severity, CVSS, affected/patched versions, references) followed by full technical detail.

Conventions for agents:
- Each CVE has raw markdown at https://vulnsea.com/cve/<CVE-ID>.md
- Structured JSON at https://vulnsea.com/api/cve/<CVE-ID>
- Any real CVE id resolves: an id not yet in the corpus is fetched live from CVE.org / NVD on first request (a few seconds), then served from the corpus
- Query the feed at https://vulnsea.com/api/cve?q=&severity=&vendor=&exploited=&depth=&limit=
- Compact triage digest at https://vulnsea.com/api/digest (format=json|text|ndjson)
- Typo-tolerant search at https://vulnsea.com/api/search?q=
- Related CVEs at https://vulnsea.com/api/cve/<CVE-ID>/related — shared product/vendor/CWE/advisory, scored
- Dependency triage: POST https://vulnsea.com/api/sbom { components:[ "pkg:npm/lodash@4.17.20", … ] } — affected CVEs per component, ranked by depth
- OSV-compatible: POST https://vulnsea.com/api/osv/v1/query and /api/osv/v1/querybatch speak the osv.dev schema — existing OSV clients work unchanged; VulnSea signal under database_specific
- Resolve any identifier (GHSA-… or alias) to its canonical record: https://vulnsea.com/api/resolve?id=
- Change feed at https://vulnsea.com/api/changes?after=<seq> — per-CVE field-change events (kev added, severity bumped, epss moved) with an exact cursor; the re-triage trigger
- EPSS movers at https://vulnsea.com/api/movers — biggest exploit-probability climbers over a window
- Whole dataset as NDJSON (one frontmatter record per line, streamed): https://vulnsea.com/api/dump — add ?since=<ISO> for a delta
- Scoring model (depth score 0-100 + zones), with the formula: https://vulnsea.com/docs/depth-score
- RSS feed at https://vulnsea.com/feed.xml
- OpenAPI 3.1 spec at https://vulnsea.com/openapi.json
- MCP server (JSON-RPC over Streamable HTTP) at https://vulnsea.com/api/mcp — tools: list_cves, search_cve, get_cve, batch_get_cve, triage_sbom, related_cve, changes_since, resolve_id, get_epss_movers, get_stats, get_digest; resources vulnsea://cve/{id}, vulnsea://cve/{id}/json, vulnsea://digest/week, vulnsea://digest/day, vulnsea://stats; prompts triage_sbom, explain_cve, weekly_patch_plan. Client setup + registry manifest: https://vulnsea.com/docs/mcp
- Records may carry owner-curated analyst notes (frontmatter `notes`, tag analyst-notes): https://vulnsea.com/tag/analyst-notes
- Per-package pages + feeds: https://vulnsea.com/package/<name> (name = the token before the range in `affected`), https://vulnsea.com/feed.xml?pkg=<name>, https://vulnsea.com/api/cve?pkg=<name>
- `scores` = every source's CVSS side by side (nvd / cna / adp / ghsa / osv / vendor); a 2.0+ spread carries the tag score-dispute: https://vulnsea.com/tag/score-dispute
- Sponsorship (labeled placements incl. this file and the MCP server): https://vulnsea.com/sponsor
- Licence: VulnSea's own fields (depth score, zones, tags, notes, aggregations) are CC BY 4.0 (attribute "VulnSea", link https://vulnsea.com); source data under its publishers' terms (NVD, CVE.org, GitHub Advisory Database CC BY 4.0, OSV, vendor CSAF, FIRST EPSS, CISA KEV). Details: https://vulnsea.com/terms#license

Incremental polling (for agents watching for new additions):
- https://vulnsea.com/api/cve?since=<ISO-or-epoch-ms>&order=asc — records ingested after a timestamp
- Page with the `next` cursor in each response until it is null.
- Track the max `ingestedAt` you have seen; pass it as `since` next poll.
- Send `If-None-Match: <etag>` to get 304 Not Modified when nothing changed.
- `ingestedAt` = when VulnSea added the record (use this, not `published`, for deltas).
- Cheap check before fetching: HEAD https://vulnsea.com/api/cve (or ?probe=1) returns only
  the corpus size + newest ingest timestamp (x-total-count / x-max-ingested-at).

Cost controls (fewer tokens / round-trips):
- `&fields=id,severity,depth,cvss` — sparse fieldset; returns only the named fields.
- https://vulnsea.com/api/cve?ids=CVE-2021-44228,CVE-2014-0160 — batch fetch a known set (max 200) in one request.
- `/api/digest?format=ndjson` — one compact line per CVE for cheap scanning.

Field semantics:
- `severity` is one of: critical, high, medium, low.
- `exploited: true` means known exploited in the wild.
- `kev: true` means listed in the CISA Known Exploited Vulnerabilities catalog.
- `epss` is the FIRST.org exploit-prediction probability (0..1, 30-day window).
- `depth` is a composite triage zone = severity + exploitation signal, one of (shallow→deep) sunlit, twilight, midnight, abyssal, hadal. Deeper = graver and more proven: abyssal = critical with a public exploit / in-the-wild use; hadal = critical and actively exploited (CISA KEV / 0day). Filter any list/digest/search with `&depth=<zone>` (e.g. `?depth=hadal` for the most urgent).
- `depthScore` is a composite 0..100 urgency number = impact (CVSS/severity) + likelihood (EPSS) + proof of exploitation (KEV/0day/in-the-wild/PoC). Higher = patch sooner; it intentionally ranks an exploited high above a quiet critical. /api/cve/<id> also returns `depthScoreParts` (impact/likelihood/exploitation/ransomware) so the ranking is explainable.
- Authenticate (optional) with `Authorization: Bearer vsk_…` or `x-api-key` for a higher rate limit; the full corpus is open either way.

Listing the 500 most recent of 67509 CVEs.
Enumerate the full corpus via https://vulnsea.com/api/cve?order=asc and the `next` cursor, or scan https://vulnsea.com/api/digest.

## Critical & actively exploited (50)

- [CVE-2026-108014 — eMudhra Compromised Certficate vulnerability impacts HCL Domino Server](https://vulnsea.com/cve/CVE-2026-108014.md): Private keys for eight eMudhra intermediate CA certificates have been  compromised https://emudhra.we-have-a-problem.com/ , which impacts certificate trust for outbound network request features of HCL Domino Server.  An unauthenticated n… (severity: critical, CVSS 9.1, depth: midnight, published Oct 27, 2026)
- [CVE-2026-48360 — Adobe Connect | Improper Control of Generation of Code ('Code Injection') (CWE-94)](https://vulnsea.com/cve/CVE-2026-48360.md): Adobe Connect is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to exe… (severity: critical, CVSS 9.6, depth: midnight, published Oct 27, 2026)
- [CVE-2026-114595 — Integer overflow or wraparound in EPICS Base](https://vulnsea.com/cve/CVE-2026-114595.md): In EPICS Base release 7.0.10 and prior, an integer overflow in network request processing can cause memory to be allocated with an incorrect size. Subsequent handling of attacker supplied data may result in memory corruption, denial of s… (severity: critical, CVSS 9.8, depth: midnight, published Oct 27, 2026)
- [CVE-2026-108015 — eMudhra Compromised Certficate vulnerability impacts HCL Notes Client](https://vulnsea.com/cve/CVE-2026-108015.md): Private keys for eight eMudhra intermediate CA certificates have been  compromised https://emudhra.we-have-a-problem.com/ , which impacts certificate trust for outbound network request features of HCL Notes Client.  An unauthenticated ne… (severity: critical, CVSS 9.1, depth: midnight, published Oct 27, 2026)
- [CVE-2026-105780 — Adobe Campaign Classic (ACC) | Incorrect Authorization (CWE-863)](https://vulnsea.com/cve/CVE-2026-105780.md): Adobe Campaign Classic (ACC) is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute … (severity: critical, CVSS 9.9, depth: midnight, published Oct 27, 2026)
- [CVE-2026-105779 — Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)](https://vulnsea.com/cve/CVE-2026-105779.md): Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage th… (severity: critical, CVSS 9.1, depth: midnight, published Oct 27, 2026)
- [CVE-2026-104354 — Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)](https://vulnsea.com/cve/CVE-2026-104354.md): Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that could result in arbitrary code execution in the context of the current user. An attack… (severity: critical, CVSS 9.1, depth: midnight, published Oct 27, 2026)
- [CVE-2026-105781 — Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)](https://vulnsea.com/cve/CVE-2026-105781.md): Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that could result in arbitrary code execution in the context of the current user. An attack… (severity: critical, CVSS 10, depth: midnight, published Oct 27, 2026)
- [CVE-2026-105489 — Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)](https://vulnsea.com/cve/CVE-2026-105489.md): Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that could result in arbitrary code execution in the context of the current user. A low-pri… (severity: critical, CVSS 9.9, depth: midnight, published Oct 27, 2026)
- [CVE-2026-104351 — Adobe Campaign Classic (ACC) | Improper Control of Generation of Code ('Code Injection') (CWE-94)](https://vulnsea.com/cve/CVE-2026-104351.md): Adobe Campaign Classic (ACC) is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could expl… (severity: critical, CVSS 9.9, depth: midnight, published Oct 27, 2026)
- [CVE-2026-104350 — Adobe Campaign Classic (ACC) | Cross-site Scripting (Reflected XSS) (CWE-79)](https://vulnsea.com/cve/CVE-2026-104350.md): Adobe Campaign Classic (ACC) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this vulnerability to inject malicious scripts into a web page, potentially gaining elevated access or control ov… (severity: critical, CVSS 9.3, depth: midnight, published Oct 27, 2026)
- [CVE-2026-104353 — Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78)](https://vulnsea.com/cve/CVE-2026-104353.md): Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability that could result in arbitrary code execution in the context of the current user. A l… (severity: critical, CVSS 9.9, depth: midnight, published Oct 27, 2026)
- [CVE-2026-106076 — A vulnerability allowing an authenticated organization-transfer peer to inject SQL into the configuration database of the source Veeam Backup for Microsoft 365 server, leading to cross-tenant read and write of configuration data and remo…](https://vulnsea.com/cve/CVE-2026-106076.md): A vulnerability allowing an authenticated organization-transfer peer to inject SQL into the configuration database of the source Veeam Backup for Microsoft 365 server, leading to cross-tenant read and write of configuration data and remo… (severity: critical, CVSS 9, depth: midnight, published Oct 27, 2026)
- [CVE-2026-108142 — A vulnerability allowing an unauthenticated attacker to bypass authorization on the CDP Coordinator Service.](https://vulnsea.com/cve/CVE-2026-108142.md): A vulnerability allowing an unauthenticated attacker to bypass authorization on the CDP Coordinator Service. (severity: critical, CVSS 9.1, depth: midnight, published Oct 27, 2026)
- [MAL-2026-18336 — Malicious code in h13t0ry-hello-demo (PyPI)](https://vulnsea.com/cve/MAL-2026-18336.md): Malicious code in h13t0ry-hello-demo (PyPI) (severity: critical, depth: abyssal, published Oct 27, 2026)
- [CVE-2026-116863 — WordPress Newsletters plugin <= 4.18.2 - Cross Site Request Forgery (CSRF) vulnerability](https://vulnsea.com/cve/CVE-2026-116863.md): Cross-Site Request Forgery (CSRF) vulnerability in Tribulant Software Newsletters newsletters-lite allows Cross Site Request Forgery.This issue affects Newsletters: from n/a through 4.18.2. (severity: critical, CVSS 9.6, depth: midnight, published Oct 27, 2026)
- [CVE-2026-112709 — Fireware OS Heap Buffer Overflow in AD Authentication Service Allows Pre-Authentication Remote Code Execution](https://vulnsea.com/cve/CVE-2026-112709.md): A heap-based buffer overflow vulnerability in the Fireware OS authentication service allows an attacker who controls or intercepts traffic to the configured Active Directory server to create a denial of service condition and potentially … (severity: critical, CVSS 9.2, depth: midnight, published Oct 27, 2026)
- [CVE-2026-103593 — Fireware OS Stack Buffer Overflow in Logging Service Allows Remote Code Execution](https://vulnsea.com/cve/CVE-2026-103593.md): A stack-based buffer overflow vulnerability in the Fireware OS logging service allows a network-adjacent attacker who can impersonate or intercept traffic to the configured log server to execute arbitrary code with root privileges by pre… (severity: critical, CVSS 9.1, depth: midnight, published Oct 27, 2026)
- [CVE-2026-112710 — Fireware OS Heap Buffer Overflow in AD Authentication Service Allows Pre-Authentication Remote Code Execution](https://vulnsea.com/cve/CVE-2026-112710.md): A heap-based buffer overflow vulnerability exists in the Fireware OS authentication service allows an attacker who controls or intercepts traffic to the configured Active Directory server to create a denial of service condition and poten… (severity: critical, CVSS 9.2, depth: midnight, published Oct 27, 2026)
- [CVE-2026-93866 — Fireware OS Pre-Authentication Integer Overflow in Access Portal Allows Out-of-Bounds Write](https://vulnsea.com/cve/CVE-2026-93866.md): An integer overflow vulnerability in the WebSocket connection handling used by WatchGuard Fireware OS's Access Portal allows a remote, unauthenticated attacker to write beyond the bounds of a heap buffer by sending a specially crafted re… (severity: critical, CVSS 9.2, depth: midnight, published Oct 27, 2026)
- [CVE-2026-93857 — Fireware OS Pre-Authentication Stack Buffer Overflow in SIP Proxy Allows Remote Code Execution](https://vulnsea.com/cve/CVE-2026-93857.md): A stack-based buffer overflow vulnerability in Fireware OS's SIP proxy allows a remote, unauthenticated attacker to execute arbitrary code by sending a specially crafted request through a policy that uses the SIP proxy. (severity: critical, CVSS 9.2, depth: midnight, published Oct 27, 2026)
- [CVE-2026-103594 — Fireware OS Stack Buffer Overflow in WireGuard Configuration Allows Remote Code Execution](https://vulnsea.com/cve/CVE-2026-103594.md): A stack-based buffer overflow vulnerability in Fireware OS's WireGuard configuration processing allows a remote attacker that has man-in-the-middle TLS-decrypted access between the Firebox and WatchGuard Cloud to create a Denial of Servi… (severity: critical, CVSS 9.5, depth: midnight, published Oct 27, 2026)
- [CVE-2026-93865 — Fireware OS Missing Authentication in FireCluster Sync Daemon Allows Remote Root Action Injection](https://vulnsea.com/cve/CVE-2026-93865.md): A missing authentication vulnerability in the Fireware OS FireCluster synchronization daemon allows a remote, unauthenticated attacker to invoke privileged system-level administrative actions by sending a specially crafted request to the… (severity: critical, CVSS 9.2, depth: midnight, published Oct 27, 2026)
- [CVE-2026-92885 — Qode Membership <= 2.0.6.2 - Authentication Bypass via Social Login](https://vulnsea.com/cve/CVE-2026-92885.md): The Qode Membership plugin for WordPress is vulnerable to Authentication Bypass leading to Account Takeover in all versions up to, and including, 2.0.6.2 via the qode_membership_check_facebook_user AJAX action. This is due to a typograph… (severity: critical, CVSS 9.8, depth: midnight, published Oct 27, 2026)
- [CVE-2026-117564 — nest-admin before 1.0.1 Authentication Bypass via Hardcoded JWT Secret](https://vulnsea.com/cve/CVE-2026-117564.md): nest-admin before 1.0.1 contains an authentication bypass vulnerability that allows unauthenticated attackers to forge administrator tokens by using a hardcoded JWT_SECRET committed in .env.production. Attackers can sign tokens with the … (severity: critical, CVSS 9.8, depth: midnight, published Oct 27, 2026)
- [CVE-2026-65145 — NVIDIA NeMo Agent Toolkit contains a vulnerability where a attacker could cause a missing authentication issue](https://vulnsea.com/cve/CVE-2026-65145.md): NVIDIA NeMo Agent Toolkit contains a vulnerability where a attacker could cause a missing authentication issue. This vulnerability might lead to code execution, escalation of privileges, data tampering, denial of service, and information… (severity: critical, CVSS 10, depth: midnight, published Oct 27, 2026)
- [CVE-2026-115216 — Eclipse ioFog Operator disables TLS certificate verification when sending Controller and OIDC credentials](https://vulnsea.com/cve/CVE-2026-115216.md): In Eclipse ioFog Operator versions 3.8.0 before 3.9.2, TLS certificate verification is disabled when the operator contacts the Controller API and when it logs in to an external OIDC issuer. An on-path attacker can present any certificate… (severity: critical, CVSS 9.1, depth: midnight, published Oct 27, 2026)
- [CVE-2026-112362 — @fastify/express vulnerable to path-scoped middleware bypass via absolute-form request targets](https://vulnsea.com/cve/CVE-2026-112362.md): @fastify/express is a Fastify plugin that runs Express middleware inside Fastify. In versions 4.0.5 through 4.0.8, when Fastify runs with the non-default ignoreDuplicateSlashes option enabled, the plugin matches path-scoped Express middl… (severity: critical, CVSS 9.1, depth: midnight, published Oct 27, 2026)
- [CVE-2026-117532 — REDAXO Core 5.3.0 before 5.21.4 Authentication Bypass via History Plugin](https://vulnsea.com/cve/CVE-2026-117532.md): REDAXO core from 5.3.0 before 5.21.4 contains an authentication bypass vulnerability in the structure/history plugin that allows unauthenticated attackers to forge temporary login tokens. Attackers can force the session-tied secret into … (severity: critical, CVSS 9.8, depth: midnight, published Oct 27, 2026)
- [CVE-2026-82122 — Stack-based Buffer Overflow Vulnerability in HiRDB](https://vulnsea.com/cve/CVE-2026-82122.md): Stack-based Buffer Overflow Vulnerability in HiRDB.


This issue affects HiRDB Server Version 10: from 10-00 before 10-12-01; HiRDB Server Version 9: from 09-00 through 09-66-22; HiRDB Server with Additional Function Version 9: from 09-0… (severity: critical, CVSS 9.4, depth: midnight, published Oct 27, 2026)
- [CVE-2026-86577 — Out-of-bounds Write Vulnerability in JP1 Products](https://vulnsea.com/cve/CVE-2026-86577.md): Out-of-bounds Write Vulnerability in JP1 Products.

This issue affects JP1/Integrated Management 3 - Manager: from 13-00 before 13-50-31; JP1/Automatic Job Management System 3 - Manager: from 13-00 before 13-50-31; JP1/Automatic Job Mana… (severity: critical, CVSS 9.4, depth: midnight, published Oct 27, 2026)
- [CVE-2026-82117 — Authentication Bypass by Spoofing Vulnerability in HiRDB](https://vulnsea.com/cve/CVE-2026-82117.md): Authentication Bypass by Spoofing Vulnerability in HiRDB.

This issue affects HiRDB Server Version 10: from 10-00 before 10-12-01; HiRDB Server Version 9: from 09-00 through 09-66-22; HiRDB Server with Additional Function Version 9: from… (severity: critical, CVSS 9.8, depth: midnight, published Oct 27, 2026)
- [CVE-2026-82120 — Heap-based Buffer Overflow Vulnerability in HiRDB](https://vulnsea.com/cve/CVE-2026-82120.md): Heap-based Buffer Overflow Vulnerability in HiRDB.


This issue affects HiRDB Server Version 10: from 10-00 before 10-12-01; HiRDB Server Version 9: from 09-00 through 09-66-22; HiRDB Server with Additional Function Version 9: from 09-00… (severity: critical, CVSS 9.8, depth: midnight, published Oct 27, 2026)
- [CVE-2026-82116 — Missing Authentication for Critical Function Vulnerability in HiRDB](https://vulnsea.com/cve/CVE-2026-82116.md): Missing Authentication for Critical Function Vulnerability in HiRDB.


This issue affects HiRDB Server Version 10: from 10-00 before 10-12-01; HiRDB Server Version 9: from 09-00 through 09-66-22; HiRDB Server with Additional Function Ver… (severity: critical, CVSS 9.8, depth: midnight, published Oct 27, 2026)
- [CVE-2026-86576 — Heap-based Buffer Overflow Vulnerability in JP1 Products](https://vulnsea.com/cve/CVE-2026-86576.md): Heap-based Buffer Overflow Vulnerability in JP1 Products.

This issue affects JP1/Integrated Management 3 - Manager: from 13-00 before 13-50-31; JP1/Automatic Job Management System 3 - Manager: from 13-00 before 13-50-31; JP1/Automatic J… (severity: critical, CVSS 9.4, depth: midnight, published Oct 27, 2026)
- [CVE-2026-82118 — Stack-based Buffer Overflow Vulnerability in HiRDB](https://vulnsea.com/cve/CVE-2026-82118.md): Stack-based Buffer Overflow Vulnerability in HiRDB.


This issue affects HiRDB Server Version 10: from 10-00 before 10-12-01; HiRDB Server Version 9: from 09-00 through 09-66-22; HiRDB Server with Additional Function Version 9: from 09-0… (severity: critical, CVSS 9.8, depth: midnight, published Oct 27, 2026)
- [CVE-2026-86575 — Stack-based Buffer Overflow Vulnerability in JP1 Products](https://vulnsea.com/cve/CVE-2026-86575.md): Stack-based Buffer Overflow Vulnerability in JP1 Products.

This issue affects JP1/Integrated Management 3 - Manager: from 13-00 before 13-50-31; JP1/Automatic Job Management System 3 - Manager: from 13-00 before 13-50-31; JP1/Automatic … (severity: critical, CVSS 9.4, depth: midnight, published Oct 27, 2026)
- [CVE-2026-82119 — OS Command Injection Vulnerability in HiRDB](https://vulnsea.com/cve/CVE-2026-82119.md): OS Command Injection Vulnerability in HiRDB.


This issue affects HiRDB Server Version 10: from 10-00 before 10-12-01; HiRDB Server Version 9: from 09-00 through 09-66-22; HiRDB Server with Additional Function Version 9: from 09-00 throu… (severity: critical, CVSS 9.8, depth: midnight, published Oct 27, 2026)
- [CVE-2026-86574 — Heap-based Buffer Overflow Vulnerability in JP1/Base](https://vulnsea.com/cve/CVE-2026-86574.md): Heap-based Buffer Overflow Vulnerability in JP1/Base.

This issue affects JP1/Base: from 11-00 before 12-50-54. (severity: critical, CVSS 9.8, depth: midnight, published Oct 27, 2026)
- [CVE-2026-76939 — Heap-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3](https://vulnsea.com/cve/CVE-2026-76939.md): Heap-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3.

This issue affects JP1/Automatic Job Management System 3 - Manager: from 11-00 before 13-50-31; JP1/Automatic Job Management System 3 - Agent: from 11-00… (severity: critical, CVSS 9.8, depth: midnight, published Oct 27, 2026)
- [CVE-2026-76937 — Heap-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3](https://vulnsea.com/cve/CVE-2026-76937.md): Heap-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3.


This issue affects JP1/Automatic Job Management System 3 - Manager: from 10-00 before 13-50-31. (severity: critical, CVSS 9.4, depth: midnight, published Oct 27, 2026)
- [CVE-2026-76936 — Stack-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3](https://vulnsea.com/cve/CVE-2026-76936.md): Stack-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3.


This issue affects JP1/Automatic Job Management System 3 - Manager: from 10-00 before 13-50-31. (severity: critical, CVSS 9.4, depth: midnight, published Oct 27, 2026)
- [CVE-2026-76938 — Authentication Bypass Vulnerability in JP1/Automatic Job Management System 3](https://vulnsea.com/cve/CVE-2026-76938.md): Authentication Bypass Vulnerability in JP1/Automatic Job Management System 3.


This issue affects JP1/Automatic Job Management System 3 - Manager: from 10-00 before 13-50-31. (severity: critical, CVSS 9.8, depth: midnight, published Oct 27, 2026)
- [CVE-2026-76934 — Stack-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3](https://vulnsea.com/cve/CVE-2026-76934.md): Stack-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3.

This issue affects JP1/Automatic Job Management System 3 - Manager: from 11-00 before 13-50-31; JP1/Automatic Job Management System 3 - Agent: from 11-0… (severity: critical, CVSS 9.8, depth: midnight, published Oct 27, 2026)
- [CVE-2026-76935 — Stack-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3](https://vulnsea.com/cve/CVE-2026-76935.md): Stack-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3.


This issue affects JP1/Automatic Job Management System 3 - Manager: from 10-00 before 13-50-31. (severity: critical, CVSS 9.4, depth: midnight, published Oct 27, 2026)
- [CVE-2026-102789 — Joomla Extension - balbooa.com - Missing Authorization Check on Editor Controller Task in Gridbox < 2.20.4.2](https://vulnsea.com/cve/CVE-2026-102789.md): Joomla Extension - balbooa.com - Missing Authorization Check on Editor Controller Task in Gridbox < 2.20.4.2 - EditorController::getBlogPosts() reads the order parameter and invokes getBlogPosts() . Unlike other tasks in this controller,… (severity: critical, CVSS 9.3, depth: midnight, published Oct 27, 2026)
- [CVE-2026-76933 — Heap-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3](https://vulnsea.com/cve/CVE-2026-76933.md): Heap-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3.

This issue affects JP1/Automatic Job Management System 3 - Manager: from 11-00 before 13-50-31; JP1/Automatic Job Management System 3 - Agent: from 11-00… (severity: critical, CVSS 9.4, depth: midnight, published Oct 27, 2026)
- [CVE-2026-76932 — Stack-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3](https://vulnsea.com/cve/CVE-2026-76932.md): Stack-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3.

This issue affects JP1/Automatic Job Management System 3 - Manager: from 11-00 before 13-50-31; JP1/Automatic Job Management System 3 - Agent: from 11-0… (severity: critical, CVSS 9.4, depth: midnight, published Oct 27, 2026)
- [CVE-2026-18450 — Supermicro BMC  contains Unprotected IPMI Commands Accepted on Active RMCP+ Sessions vulnerability](https://vulnsea.com/cve/CVE-2026-18450.md): The BMC does not correctly enforce integrity and encryption requirements for IPMI commands. An attacker may be able to craft packets that execute arbitrary commands on an active session. (severity: critical, CVSS 9.8, depth: midnight, published Oct 27, 2026)
- [CVE-2026-102788 — Joomla Extension - balbooa.com - Unauthenticated SQL injection in Gridbox < 2.20.4.2](https://vulnsea.com/cve/CVE-2026-102788.md): Joomla Extension - balbooa.com - Unauthenticated SQL injection in Gridbox < 2.20.4.2 - On store product list pages, the value of the sort-by URL parameter is retrieved using a string filter and passed directly to GridboxHelper::getBlogPo… (severity: critical, CVSS 9.3, depth: midnight, published Oct 27, 2026)

## Other recent CVEs (450)

- [CVE-2026-117516 — oretnom23 php-travel-agency-system Contact Form contact_insert.php sql injection](https://vulnsea.com/cve/CVE-2026-117516.md): A weakness has been identified in oretnom23 php-travel-agency-system. The affected element is an unknown function of the file contact_insert.php of the component Contact Form Handler. This manipulation of the argument name/company/email/… (severity: high, CVSS 7.3, depth: twilight, published Oct 27, 2026)
- [CVE-2026-116658 — Tanium addressed a denial of service vulnerability in Enforce.](https://vulnsea.com/cve/CVE-2026-116658.md): Tanium addressed a denial of service vulnerability in Enforce. (severity: medium, CVSS 6.5, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-87085 — Tanium addressed a SQL injection vulnerability in Provision.](https://vulnsea.com/cve/CVE-2026-87085.md): Tanium addressed a SQL injection vulnerability in Provision. (severity: medium, CVSS 6.5, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-108308 — Tanium addressed a SQL injection vulnerability in Patch.](https://vulnsea.com/cve/CVE-2026-108308.md): Tanium addressed a SQL injection vulnerability in Patch. (severity: medium, CVSS 6.5, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-116662 — Tanium addressed a compression bomb vulnerability in Enforce.](https://vulnsea.com/cve/CVE-2026-116662.md): Tanium addressed a compression bomb vulnerability in Enforce. (severity: high, CVSS 7.5, depth: twilight, published Oct 27, 2026)
- [CVE-2026-108331 — Tanium addressed an infinite loop vulnerability in Threat Response Client Extension.](https://vulnsea.com/cve/CVE-2026-108331.md): Tanium addressed an infinite loop vulnerability in Threat Response Client Extension. (severity: low, CVSS 3.3, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-108305 — Tanium addressed a local privilege escalation vulnerability in End-User Notifications.](https://vulnsea.com/cve/CVE-2026-108305.md): Tanium addressed a local privilege escalation vulnerability in End-User Notifications. (severity: high, CVSS 7.8, depth: twilight, published Oct 27, 2026)
- [CVE-2026-108310 — Tanium addressed a denial of service vulnerability in Tanium Server.](https://vulnsea.com/cve/CVE-2026-108310.md): Tanium addressed a denial of service vulnerability in Tanium Server. (severity: medium, CVSS 5.3, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-116679 — Neko: Authorization bypass in legacy WebRTC input handling](https://vulnsea.com/cve/CVE-2026-116679.md): Neko is a a self-hosted virtual browser that runs in Docker and uses WebRTC. From version 3.0.0 until 3.1.5, Neko deployments with legacy mode and session.implicit_hosting enabled incorrectly authorize legacy WebRTC data-channel input be… (severity: medium, CVSS 5.4, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-108307 — Tanium addressed a heap-based buffer overflow vulnerability in Index.](https://vulnsea.com/cve/CVE-2026-108307.md): Tanium addressed a heap-based buffer overflow vulnerability in Index. (severity: high, CVSS 7.8, depth: twilight, published Oct 27, 2026)
- [CVE-2026-108333 — Tanium addressed a use-after-free vulnerability in Threat Response Client Extension.](https://vulnsea.com/cve/CVE-2026-108333.md): Tanium addressed a use-after-free vulnerability in Threat Response Client Extension. (severity: low, CVSS 2.5, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-116657 — Tanium addressed a denial of service vulnerability in Enforce.](https://vulnsea.com/cve/CVE-2026-116657.md): Tanium addressed a denial of service vulnerability in Enforce. (severity: medium, CVSS 5.3, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-108330 — Tanium addressed an information disclosure vulnerability in Threat Response Client Extension.](https://vulnsea.com/cve/CVE-2026-108330.md): Tanium addressed an information disclosure vulnerability in Threat Response Client Extension. (severity: low, CVSS 3.6, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-108326 — Tanium addressed an improper certificate validation vulnerability in Stream Client Extension.](https://vulnsea.com/cve/CVE-2026-108326.md): Tanium addressed an improper certificate validation vulnerability in Stream Client Extension. (severity: medium, CVSS 6.5, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-116649 — Tanium addressed an improper output sanitization vulnerability in Enforce.](https://vulnsea.com/cve/CVE-2026-116649.md): Tanium addressed an improper output sanitization vulnerability in Enforce. (severity: high, CVSS 7.1, depth: twilight, published Oct 27, 2026)
- [CVE-2026-116647 — Tanium addressed an improper output sanitization vulnerability in Comply.](https://vulnsea.com/cve/CVE-2026-116647.md): Tanium addressed an improper output sanitization vulnerability in Comply. (severity: high, CVSS 7.1, depth: twilight, published Oct 27, 2026)
- [CVE-2026-116660 — Tanium addressed an improper access controls vulnerability in Enforce.](https://vulnsea.com/cve/CVE-2026-116660.md): Tanium addressed an improper access controls vulnerability in Enforce. (severity: medium, CVSS 4.3, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-108313 — Tanium addressed an incorrect privilege assignment vulnerability in Tanium Server.](https://vulnsea.com/cve/CVE-2026-108313.md): Tanium addressed an incorrect privilege assignment vulnerability in Tanium Server. (severity: medium, CVSS 6.6, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-87086 — Tanium addressed a denial of service vulnerability in Provision.](https://vulnsea.com/cve/CVE-2026-87086.md): Tanium addressed a denial of service vulnerability in Provision. (severity: high, CVSS 7.5, depth: twilight, published Oct 27, 2026)
- [CVE-2026-108329 — Tanium addressed an unauthorized code execution vulnerability in Threat Response.](https://vulnsea.com/cve/CVE-2026-108329.md): Tanium addressed an unauthorized code execution vulnerability in Threat Response. (severity: high, CVSS 8.8, depth: twilight, published Oct 27, 2026)
- [CVE-2026-108309 — Tanium addressed an uncontrolled resource consumption vulnerability in Performance Client Extension.](https://vulnsea.com/cve/CVE-2026-108309.md): Tanium addressed an uncontrolled resource consumption vulnerability in Performance Client Extension. (severity: medium, CVSS 5.5, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-108304 — Tanium addressed a local privilege escalation vulnerability in End-User Notifications.](https://vulnsea.com/cve/CVE-2026-108304.md): Tanium addressed a local privilege escalation vulnerability in End-User Notifications. (severity: high, CVSS 7.8, depth: twilight, published Oct 27, 2026)
- [CVE-2026-108332 — Tanium addressed an improper link resolution before file access vulnerability in Threat Response Client Extension.](https://vulnsea.com/cve/CVE-2026-108332.md): Tanium addressed an improper link resolution before file access vulnerability in Threat Response Client Extension. (severity: medium, CVSS 6.3, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-108301 — Tanium addressed an improper access controls vulnerability in Comply.](https://vulnsea.com/cve/CVE-2026-108301.md): Tanium addressed an improper access controls vulnerability in Comply. (severity: medium, CVSS 6, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-102812 — Hardcoded AES-128 Key and Fixed IV in Configuration Backup Encryption in TP-Link RE305 and Archer C7](https://vulnsea.com/cve/CVE-2026-102812.md): A hard-coded
cryptographic key vulnerability exists in the user-configuration backup
mechanism of TP-Link RE305 V3 and Archer C7 V5. A fixed AES-128 key and
initialization vector are embedded in the firmware configuration-management
comp… (severity: medium, CVSS 6.9, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-108306 — Tanium addressed a local privilege escalation vulnerability in End-User Notifications.](https://vulnsea.com/cve/CVE-2026-108306.md): Tanium addressed a local privilege escalation vulnerability in End-User Notifications. (severity: high, CVSS 7.8, depth: twilight, published Oct 27, 2026)
- [CVE-2026-108302 — Tanium addressed an improper access controls vulnerability in Comply.](https://vulnsea.com/cve/CVE-2026-108302.md): Tanium addressed an improper access controls vulnerability in Comply. (severity: medium, CVSS 4.3, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-108325 — Tanium addressed an insertion of sensitive information into log file vulnerability in Reputation.](https://vulnsea.com/cve/CVE-2026-108325.md): Tanium addressed an insertion of sensitive information into log file vulnerability in Reputation. (severity: medium, CVSS 6.6, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-116659 — Tanium addressed an uncontrolled resource consumption vulnerability in Enforce.](https://vulnsea.com/cve/CVE-2026-116659.md): Tanium addressed an uncontrolled resource consumption vulnerability in Enforce. (severity: medium, CVSS 4.3, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-116656 — Tanium addressed an uncontrolled resource consumption vulnerability in Enforce.](https://vulnsea.com/cve/CVE-2026-116656.md): Tanium addressed an uncontrolled resource consumption vulnerability in Enforce. (severity: high, CVSS 7.5, depth: twilight, published Oct 27, 2026)
- [CVE-2026-108316 — Tanium addressed an information disclosure vulnerability in Tanium Server.](https://vulnsea.com/cve/CVE-2026-108316.md): Tanium addressed an information disclosure vulnerability in Tanium Server. (severity: medium, CVSS 4.3, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-108303 — Tanium addressed an unauthorized code execution vulnerability in Certificate Manager.](https://vulnsea.com/cve/CVE-2026-108303.md): Tanium addressed an unauthorized code execution vulnerability in Certificate Manager. (severity: high, CVSS 8.8, depth: twilight, published Oct 27, 2026)
- [CVE-2026-108311 — Tanium addressed an insufficient logging vulnerability in Tanium Server.](https://vulnsea.com/cve/CVE-2026-108311.md): Tanium addressed an insufficient logging vulnerability in Tanium Server. (severity: low, CVSS 2.7, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-118132 — CVE-2026-118132](https://vulnsea.com/cve/CVE-2026-118132.md): NextChat version 2.16.1 contains a client‑side cross‑site scripting (XSS) vulnerability in the Plugin Editor due to unsafe rendering of externally supplied OpenAPI plugin schema content. When a plugin schema is loaded from a remote URL, … (severity: none, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-102814 — Improper Authentication in TP-Link TDDP v2 Allows Root Command Execution in TP-Link RE305](https://vulnsea.com/cve/CVE-2026-102814.md): An
authentication weakness exists in the TP-Link TDDP v2 service of TP-Link RE305
V3. TDDP v2 uses a fixed and derivable cryptographic key, which may allow an
unauthenticated attacker on the same local network to forge protocol packets
a… (severity: high, CVSS 8.7, depth: twilight, published Oct 27, 2026)
- [CVE-2026-102816 — Unauthenticated Wireless Regulatory Region Configuration in TP-Link RE305](https://vulnsea.com/cve/CVE-2026-102816.md): An authorization vulnerability exists in the country or region configuration interface of TP-Link RE305 V3. An unauthenticated attacker on the same local network may modify the wireless regulatory region and force the device to reapply i… (severity: medium, CVSS 5.3, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-117526 — reduxjs redux-devtools Remotedev Server evalAction code injection](https://vulnsea.com/cve/CVE-2026-117526.md): A vulnerability was found in reduxjs redux-devtools 5.0.0. Affected by this vulnerability is the function evalAction of the component Remotedev Server. The manipulation of the argument action results in code injection. The attack is only… (severity: medium, CVSS 5.3, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-116680 — Homebox generic notifier SSRF via HTTP redirect after URL validation](https://vulnsea.com/cve/CVE-2026-116680.md): HomeBox is a home inventory and organization system. Prior to version 0.27.0, Homebox validates generic notifier URLs with ValidateNotifierURL before creation, update, testing, and scheduled delivery, but shoutrrr sends the request throu… (severity: medium, CVSS 6.4, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-102813 — Administrator Password Reset Through the Verification-Code Interface in TP-Link RE305](https://vulnsea.com/cve/CVE-2026-102813.md): An authentication flaw exists in the password-recovery functionality of TP-Link RE305 V3. The verification-code interface allows an unauthenticated attacker on the same local network to trigger generation of an administrator password-res… (severity: medium, CVSS 6.1, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-102815 — Command Injection in tmpServer Allows Local Privilege Escalation in TP-Link RE305](https://vulnsea.com/cve/CVE-2026-102815.md): An
operating-system command injection vulnerability exists in the tmpServer
service of TP-Link RE305 V3. The service runs with root privileges and listens
on the local loopback interface. A local attacker with access to a
low-privileged … (severity: medium, CVSS 6.9, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-116682 — FileBrowser Quantum: Symlink following escapes user scope allowing arbitrary file read outside the served directory](https://vulnsea.com/cve/CVE-2026-116682.md): FileBrowser Quantum is a free, self-hosted, web-based file manager. Prior to 1.5.2-stable and 2.0.1-beta, file read handling in backend/pkg/indexing/indexingFiles.go resolves symbolic links through GetRealPath without confirming that the… (severity: high, CVSS 8.6, depth: twilight, published Oct 27, 2026)
- [CVE-2026-88812 — X.Org Server XKB SetGeometry TextDoodad Double Free](https://vulnsea.com/cve/CVE-2026-88812.md): A double free in XKB SetGeometryin X.Org X Server before 21.1.25 and X Wayland before 24.1.14 could be used by attached clients to cause a crash or potentially code in the x server context. (severity: high, CVSS 7.8, depth: twilight, published Oct 27, 2026)
- [CVE-2026-104349 — Creative Cloud Desktop | Uncontrolled Search Path Element (CWE-427)](https://vulnsea.com/cve/CVE-2026-104349.md): Creative Cloud Desktop is affected by an Uncontrolled Search Path Element vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execu… (severity: high, CVSS 7.3, depth: twilight, published Oct 27, 2026)
- [CVE-2026-48380 — Substance3D - Painter | Out-of-bounds Read (CWE-125)](https://vulnsea.com/cve/CVE-2026-48380.md): Substance3D - Painter is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requi… (severity: medium, CVSS 5.5, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-48379 — Substance3D - Painter | Stack-based Buffer Overflow (CWE-121)](https://vulnsea.com/cve/CVE-2026-48379.md): Substance3D - Painter is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must… (severity: high, CVSS 7.8, depth: twilight, published Oct 27, 2026)
- [CVE-2026-117512 — oretnom23 php-travel-agency-system employee_insert.php unrestricted upload](https://vulnsea.com/cve/CVE-2026-117512.md): A vulnerability was found in oretnom23 php-travel-agency-system. This affects an unknown part of the file admin/employee_insert.php. Performing a manipulation of the argument employee photo results in unrestricted upload. The attack is p… (severity: high, CVSS 7.3, depth: twilight, published Oct 27, 2026)
- [CVE-2026-109088 — libXtst RECORD EnableContext Reply Endless Loop](https://vulnsea.com/cve/CVE-2026-109088.md): A malicious X server could send malformed  RECORD EnableContext reolies that can cause a X client using the parse_reply_call_callback function in libXtst before 1.2.6 to enter a endless loop. (severity: medium, CVSS 6.5, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-116672 — Authlib RFC 7592 examples omit registration-access-token client binding](https://vulnsea.com/cve/CVE-2026-116672.md): Authlib is a Python library which builds OAuth and OpenID Connect servers. From 0.15 until 1.9.1, the documented ClientConfigurationEndpoint.authenticate_client and ClientConfigurationEndpoint.check_permission reference implementations l… (severity: high, CVSS 8.8, depth: twilight, published Oct 27, 2026)
- [CVE-2026-57185 — Asterisk: Buffer over-read in Asterisk PJSIP MWI body parser](https://vulnsea.com/cve/CVE-2026-57185.md): Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 23.4.1 and Certified Asterisk 20.7-cert11, 22.8-cert3, an authenticated attacker may crash Asterisk through a buffer o… (severity: medium, CVSS 6.5, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-109090 — libXi XGetDeviceControl DEVICE_ENABLE Heap Buffer Overflow](https://vulnsea.com/cve/CVE-2026-109090.md): A malicious X server could cause a heap overflow by injecting a large DEVICE_ENABLE reply when processed by libXi before 1.8.4. (severity: high, CVSS 7.5, depth: twilight, published Oct 27, 2026)
- [CVE-2026-57197 — Asterisk: Heap Buffer Overflow in OGG/Speex File Playback (format_ogg_speex)](https://vulnsea.com/cve/CVE-2026-57197.md): Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 23.4.1 and Certified Asterisk 20.7-cert11, 22.8-cert3, an unbounded `memcpy` of `OGG/Speex` packet data in `format_ogg… (severity: high, CVSS 7.7, depth: twilight, published Oct 27, 2026)
- [CVE-2026-116673 — systeminformation: Path traversal in Linux networkStats() allows symlink-based file disclosure outside /sys/class/net](https://vulnsea.com/cve/CVE-2026-116673.md): systeminformation is a System and OS information library for node.js. Prior to 5.33.14, the Linux networkStats(iface) implementation uses the caller-supplied interface value in an fs.existsSync() check and to build /sys/class/net/<iface>… (severity: low, CVSS 3.3, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-117513 — oretnom23 php-travel-agency-system Admin Search Pages customer_search.php sql injection](https://vulnsea.com/cve/CVE-2026-117513.md): A vulnerability was determined in oretnom23 php-travel-agency-system. This vulnerability affects unknown code of the file admin/customer_search.php of the component Admin Search Pages. Executing a manipulation of the argument customer_na… (severity: high, CVSS 7.3, depth: twilight, published Oct 27, 2026)
- [CVE-2026-116675 — TinyMCE Cross-Site Scripting (XSS) vulnerability using media plugin `data-mce-object` serialization](https://vulnsea.com/cve/CVE-2026-116675.md): TinyMCE is an open source rich text editor. From 7.9.3 until 7.9.4 and from 8.5.1 until 8.9.3, the media plugin creates elements crafted through data-mce-object in the active document before sanitization. Those elements can execute malic… (severity: high, CVSS 8.5, depth: twilight, published Oct 27, 2026)
- [CVE-2026-116674 — systeminformation: Prototype pollution in `networkStats()` via the interface name](https://vulnsea.com/cve/CVE-2026-116674.md): systeminformation is a System and OS information library for node.js. Prior to 5.33.13, networkStats(ifaces) in lib/network.js on FreeBSD, OpenBSD, and NetBSD stores per-interface data in the plain-object _network cache and indexes it wi… (severity: medium, CVSS 6.5, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-57198 — Asterisk: Possible RED T.140 Heap Buffer Overflow](https://vulnsea.com/cve/CVE-2026-57198.md): Asterisk is an open source private branch exchange and telephony toolkit. In affected deployments, an authenticated attacker may cause a `T.140 RED` heap buffer overflow using carefully crafted packets, potentially allowing remote code e… (severity: low, CVSS 2.3, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-57194 — Asterisk: chan_unistim DIALPAGE digit handling can overflow phone_number and crash Asterisk](https://vulnsea.com/cve/CVE-2026-57194.md): Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 23.4.1 and Certified Asterisk 20.7-cert11, 22.8-cert3, an out-of-bounds write in `chan_unistim` `DIALPAGE` digit handl… (severity: medium, CVSS 5.9, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-114596 — Integer overflow or wraparound in EPICS Base](https://vulnsea.com/cve/CVE-2026-114596.md): In EPICS Base release 7.0.10 and prior, an improper validation of message length values during protocol parsing can trigger an integer overflow, resulting in an out-of-bounds memory write. Successful exploitation can cause process instab… (severity: high, CVSS 8.2, depth: twilight, published Oct 27, 2026)
- [CVE-2026-114597 — Improper handling of length parameter inconsistency in EPICS Base](https://vulnsea.com/cve/CVE-2026-114597.md): In EPICS Base release 7.0.10 and prior, an insufficient validation of element or length values in a network message can cause the application to read beyond the bounds of an allocated buffer. This may lead to denial of service and could … (severity: high, CVSS 7.5, depth: twilight, published Oct 27, 2026)
- [CVE-2026-57201 — Asterisk: Stack Buffer Overflow in H.323 ooTrace() via Unbounded vsprintf into Fixed 2048-byte Buffer](https://vulnsea.com/cve/CVE-2026-57201.md): Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 23.4.1 and Certified Asterisk 20.7-cert11, 22.8-cert3, a stack buffer overflow in the H.323 `ooTrace()` trace-logging … (severity: high, CVSS 7.5, depth: twilight, published Oct 27, 2026)
- [CVE-2026-114598 — Access of resource using incompatible type ('type confusion') in EPICS Base](https://vulnsea.com/cve/CVE-2026-114598.md): In EPICS Base release 7.0.10 and prior, an insufficient validation of element or length values in a network message can cause the application to read beyond the bounds of an allocated buffer. This may lead to denial of service and could … (severity: high, CVSS 7.5, depth: twilight, published Oct 27, 2026)
- [CVE-2026-57189 — Asterisk: Possible RED T.140 Generation Accumulation OOB Write](https://vulnsea.com/cve/CVE-2026-57189.md): Asterisk is an open source private branch exchange and telephony toolkit. In affected deployments, an authenticated attacker may cause a `T.140 RED` out-of-bounds write during `generation accumulation` using carefully crafted packets, po… (severity: low, CVSS 2.3, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-117514 — oretnom23 php-travel-agency-system Admin Record Pages customer_detail.php sql injection](https://vulnsea.com/cve/CVE-2026-117514.md): A vulnerability was identified in oretnom23 php-travel-agency-system. This issue affects some unknown processing of the file admin/customer_detail.php of the component Admin Record Pages. The manipulation of the argument costomer_id/tick… (severity: high, CVSS 7.3, depth: twilight, published Oct 27, 2026)
- [CVE-2026-16491 — CVE-2026-16491 CVE Record](https://vulnsea.com/cve/CVE-2026-16491.md): Grafana’s RBAC service ignored the requested folder when checking whether a user was a folder administrator for deleted dashboard listings. A user with dashboard permission-management rights on any folder could therefore be treated as an… (severity: medium, CVSS 6.5, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-118131 — CVE-2026-118131](https://vulnsea.com/cve/CVE-2026-118131.md): GnuPG (version 2.5.21) for Windows contains a vulnerability where default Discretionary Access Control List (DACL) inheritance on the C:\ProgramData directory allows members of the BUILTIN\Users group to create arbitrary subdirectories u… (severity: none, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-116678 — Vaultwarden: Icon endpoint SSRF fix bypass via second-stage favicon IP literal URLs](https://vulnsea.com/cve/CVE-2026-116678.md): Vaultwarden is a Bitwarden-compatible server written in Rust. Prior to version 1.37.0, the Vaultwarden icon downloader validates the initial icon host and DNS results but passes favicon URLs parsed from attacker-controlled HTML to get_pa… (severity: medium, CVSS 5.8, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-116677 — OpenWISP Controller CA CRL REST API does not scope requests to managed organizations](https://vulnsea.com/cve/CVE-2026-116677.md): OpenWISP Controller is a network and WiFi controller for provisioning, configuration management, updates, and PKI management. From 1.0.0 until 1.3.2, the GET /api/v1/controller/ca/<integer-id>/crl endpoint allows an authenticated organiz… (severity: medium, CVSS 5.3, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-117515 — oretnom23 php-travel-agency-system traceapplication.php sql injection](https://vulnsea.com/cve/CVE-2026-117515.md): A security flaw has been discovered in oretnom23 php-travel-agency-system 4e28b8f84d72420373dd15c3ae32900beb7e0635. Impacted is an unknown function of the file traceapplication.php. The manipulation of the argument Search results in sql … (severity: high, CVSS 7.3, depth: twilight, published Oct 27, 2026)
- [CVE-2026-116676 — Atlantis: OS command injection through PR-controlled Terraform workspace enables RCE during plan](https://vulnsea.com/cve/CVE-2026-116676.md): Atlantis is a self-hosted golang application that listens for Terraform pull request events via webhooks. From version 0.4.0 until 0.47.1, Atlantis passes the pull-request-controlled workspace value from atlantis.yaml into Terraform comm… (severity: high, CVSS 8.8, depth: twilight, published Oct 27, 2026)
- [CVE-2026-108328 — Tanium addressed an insertion of sensitive information into log file vulnerability in Threat Response.](https://vulnsea.com/cve/CVE-2026-108328.md): Tanium addressed an insertion of sensitive information into log file vulnerability in Threat Response. (severity: medium, CVSS 4.2, depth: sunlit, published Oct 27, 2026)
- [GHSA-wf6j-7hvr-gr93 — Hydra legacy target blacklist permits unsafe PyYAML loading](https://vulnsea.com/cve/GHSA-wf6j-7hvr-gr93.md): Hydra legacy target blacklist permits unsafe PyYAML loading (severity: high, CVSS 7.8, depth: twilight, published Oct 27, 2026)
- [CVE-2026-117511 — desmondmorris node-tesseract Command Builder tesseract.js process os command injection](https://vulnsea.com/cve/CVE-2026-117511.md): A vulnerability has been found in desmondmorris node-tesseract up to 0.2.7. Affected by this issue is the function process of the file lib/tesseract.js of the component Command Builder. Such manipulation of the argument image leads to os… (severity: high, CVSS 7.3, depth: twilight, published Oct 27, 2026)
- [CVE-2026-102637 — Fusion Protocol URL Reflected Cross-Site Scripting (XSS) in Autodesk Fusion Desktop](https://vulnsea.com/cve/CVE-2026-102637.md): A maliciously crafted HTML payload in the documentName parameter of a Fusion protocol URL, when the protocol URL is invoked by a user, can trigger a Reflected Cross-site Scripting (XSS) vulnerability in the Autodesk Fusion desktop applic… (severity: high, CVSS 7.1, depth: twilight, published Oct 27, 2026)
- [CVE-2026-107672 — Stack File Trusted Markdown Injection in Autodesk Fusion Post Processor Utility](https://vulnsea.com/cve/CVE-2026-107672.md): A maliciously crafted .stack.json file can trigger a trusted Markdown injection vulnerability in Autodesk Fusion Post Processor Utility Extension. A malicious actor may exploit this vulnerability to execute arbitrary commands in the cont… (severity: high, CVSS 8.8, depth: twilight, published Oct 27, 2026)
- [CVE-2026-102636 — Design Name Stored Cross-Site Scripting (XSS) in Autodesk Fusion Desktop](https://vulnsea.com/cve/CVE-2026-102636.md): A maliciously crafted HTML payload in a design name, when displayed after another user opens the manipulated design, can trigger a Stored Cross-site Scripting (XSS) vulnerability in the Autodesk Fusion desktop application. A malicious ac… (severity: high, CVSS 7.1, depth: twilight, published Oct 27, 2026)
- [CVE-2026-102638 — Electronic Library Description Stored Cross-Site Scripting (XSS) in Autodesk Fusion Desktop](https://vulnsea.com/cve/CVE-2026-102638.md): A maliciously crafted HTML payload in the description of an electronic library (.lbr) file, when displayed in the Library Manager after the library is imported, can trigger a Stored Cross-site Scripting (XSS) vulnerability in the Autodes… (severity: high, CVSS 7.1, depth: twilight, published Oct 27, 2026)
- [CVE-2026-113775 — Dynamic Library Loading Process Control in Autodesk Fusion Desktop](https://vulnsea.com/cve/CVE-2026-113775.md): A maliciously crafted dynamic library, when loaded from an arbitrary path through the TextCommands.LoadDll command exposed by the Autodesk Fusion API, can trigger an Exposed Dangerous Function vulnerability in the Autodesk Fusion desktop… (severity: high, CVSS 7.8, depth: twilight, published Oct 27, 2026)
- [CVE-2026-109089 — libXi XGetDeviceControl Control Type Mismatch Heap Buffer Overflow](https://vulnsea.com/cve/CVE-2026-109089.md): A buffer overflow when handling DEVICE_RESOLUTION in libXi before 1.8.4 could overflow a heap, triggered by a malicious X server. (severity: high, CVSS 7.5, depth: twilight, published Oct 27, 2026)
- [CVE-2026-112353 — GFI KerioConnect < 10.0.8p2 Stored XSS via SVG Attachment](https://vulnsea.com/cve/CVE-2026-112353.md): GFI KerioConnect (Kerio Connect) before 10.0.8 Patch 2 contains a stored cross-site scripting vulnerability in the Webmail component that allows a remote attacker to run JavaScript in a victim's authenticated Webmail session by uploading… (severity: high, CVSS 8.2, depth: twilight, published Oct 27, 2026)
- [CVE-2026-82986 — The user in a group can bypass the group restriction set by an administrator on link sharing, creating share links for a table even though they shouldn't have that permission.](https://vulnsea.com/cve/CVE-2026-82986.md): The user in a group can bypass the group restriction set by an administrator on link sharing, creating share links for a table even though they shouldn't have that permission. (severity: medium, CVSS 4.6, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-54462 — knative.dev/pkg admission webhooks allow unbounded request-body memory exhaustion](https://vulnsea.com/cve/CVE-2026-54462.md): Knative pkg provides common packages shared across Knative repositories. Prior to 0.0.0-20260531000007-52dbd5ece63f, the knative.dev/pkg/webhook admissionHandler in webhook/admission.go decodes an attacker-supplied AdmissionReview throug… (severity: medium, CVSS 6.5, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-87897 — A SSRF vulnerability found that enables access to internal Chrome Devtools Protocol APIs that can leak the JWT authentication token for another user](https://vulnsea.com/cve/CVE-2026-87897.md): A SSRF vulnerability found that enables access to internal Chrome Devtools Protocol APIs that can leak the JWT authentication token for another user. A low privileged attacker could continually exploit this vulnerability to leak the JWT … (severity: medium, CVSS 4.6, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-82983 — The Tables app's share-listing endpoint (GET /apps/tables/share/table/{tableId}) did not verify that the requesting user has manage-level permission on the table before returning the full list of share recipients (users, groups, and team…](https://vulnsea.com/cve/CVE-2026-82983.md): The Tables app's share-listing endpoint (GET /apps/tables/share/table/{tableId}) did not verify that the requesting user has manage-level permission on the table before returning the full list of share recipients (users, groups, and team… (severity: low, CVSS 3.3, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-77171 — A public shared collective always allowed recipients of the link to create pages.](https://vulnsea.com/cve/CVE-2026-77171.md): A public shared collective always allowed recipients of the link to create pages. (severity: low, CVSS 3.5, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-77173 — A user could create a docx or odt file with a # in the filename with confidential information such as a credit card number and have it not be marked as confidential.](https://vulnsea.com/cve/CVE-2026-77173.md): A user could create a docx or odt file with a # in the filename with confidential information such as a credit card number and have it not be marked as confidential. (severity: medium, CVSS 4.3, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-77167 — Abusing the federated share endpoint, an attacker can write arbitrary rows into the oc_share_external database table](https://vulnsea.com/cve/CVE-2026-77167.md): Abusing the federated share endpoint, an attacker can write arbitrary rows into the oc_share_external database table. These rows persist indefinitely — there is no automatic cleanup mechanism. Three distinct denial-of-service conditions … (severity: high, CVSS 7.5, depth: twilight, published Oct 27, 2026)
- [CVE-2026-77172 — App passwords were allowed to bypass password confirmation on sensitive endpoints.](https://vulnsea.com/cve/CVE-2026-77172.md): App passwords were allowed to bypass password confirmation on sensitive endpoints. (severity: medium, CVSS 5.3, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-67400 — A missing token type check allowed to retrieve more additional information about the WOPI configuration with a user or guest token.](https://vulnsea.com/cve/CVE-2026-67400.md): A missing token type check allowed to retrieve more additional information about the WOPI configuration with a user or guest token. (severity: low, CVSS 3.5, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-82984 — When a team was configured as "visible to everyone", the web UI correctly blocked non-members from viewing the team ("You are not a member of ..."), but the resources API endpoint could still be called directly, allowing any authenticate…](https://vulnsea.com/cve/CVE-2026-82984.md): When a team was configured as "visible to everyone", the web UI correctly blocked non-members from viewing the team ("You are not a member of ..."), but the resources API endpoint could still be called directly, allowing any authenticate… (severity: medium, CVSS 4.3, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-108140 — A vulnerability allowing an authenticated user with the Restore Operator role, who also controls the contents of a backed-up NAS share, to write attacker-controlled files to an arbitrary path on the backup server through relative path tr…](https://vulnsea.com/cve/CVE-2026-108140.md): A vulnerability allowing an authenticated user with the Restore Operator role, who also controls the contents of a backed-up NAS share, to write attacker-controlled files to an arbitrary path on the backup server through relative path tr… (severity: medium, CVSS 5.9, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-105477 — A vulnerability in Veeam Agent for Linux allows for local privilege escalation](https://vulnsea.com/cve/CVE-2026-105477.md): A vulnerability in Veeam Agent for Linux allows for local privilege escalation. Only installations that are managed by a Veeam Backup & Replication instance are affected. (severity: high, CVSS 7.3, depth: twilight, published Oct 27, 2026)
- [CVE-2026-108141 — A vulnerability allowing an authenticated user with the Restore Operator role, who also controls the contents of a backed-up NAS share, to write attacker-controlled files to an arbitrary path on the backup server through relative path tr…](https://vulnsea.com/cve/CVE-2026-108141.md): A vulnerability allowing an authenticated user with the Restore Operator role, who also controls the contents of a backed-up NAS share, to write attacker-controlled files to an arbitrary path on the backup server through relative path tr… (severity: medium, CVSS 5.9, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-106077 — A vulnerability allowing a user with the Veeam Backup for Microsoft 365 Administrator role to read arbitrary files on the backup server with LocalSystem privileges.](https://vulnsea.com/cve/CVE-2026-106077.md): A vulnerability allowing a user with the Veeam Backup for Microsoft 365 Administrator role to read arbitrary files on the backup server with LocalSystem privileges. (severity: high, CVSS 8.3, depth: twilight, published Oct 27, 2026)
- [CVE-2026-107671 — A vulnerability allowing an attacker with valid Administrator credentials to bypass multi-factor authentication by disabling it globally before completing MFA verification.](https://vulnsea.com/cve/CVE-2026-107671.md): A vulnerability allowing an attacker with valid Administrator credentials to bypass multi-factor authentication by disabling it globally before completing MFA verification. (severity: high, CVSS 8.5, depth: twilight, published Oct 27, 2026)
- [CVE-2026-106078 — A vulnerability allowing an unauthenticated attacker to bypass REST API authentication with a forged federation token and receive responses from REST API endpoints that do not call the Veeam Backup for Microsoft 365 backup service.](https://vulnsea.com/cve/CVE-2026-106078.md): A vulnerability allowing an unauthenticated attacker to bypass REST API authentication with a forged federation token and receive responses from REST API endpoints that do not call the Veeam Backup for Microsoft 365 backup service. (severity: medium, CVSS 6.9, depth: sunlit, published Oct 27, 2026)
- [CVE-2025-64394 — A vulnerability allowing a low-privileged local user to write arbitrary files with SYSTEM privileges during the installation of Veeam Backup for Microsoft 365, which can lead to privilege escalation or denial of service.](https://vulnsea.com/cve/CVE-2025-64394.md): A vulnerability allowing a low-privileged local user to write arbitrary files with SYSTEM privileges during the installation of Veeam Backup for Microsoft 365, which can lead to privilege escalation or denial of service. (severity: medium, CVSS 4.3, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-115495 — Mobile VPN with SSL Client for Windows: Cleartext Transmission of VPN Credentials over Local Management Socket](https://vulnsea.com/cve/CVE-2026-115495.md): Cleartext Transmission of Sensitive Information vulnerability in the WatchGuard Mobile VPN with SSL client for Windows allows a local attacker who can capture loopback traffic to obtain the user’s VPN username and password. (severity: medium, CVSS 5.7, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-90465 — Fireware OS Missing Authentication in FireCluster Sync Allows Privilege Escalation](https://vulnsea.com/cve/CVE-2026-90465.md): A missing authentication vulnerability in the FireCluster Sync processing allows an attacker positioned on the cluster interconnect, such as a compromised cluster peer or an on-path network attacker, to invoke privileged firewall managem… (severity: high, CVSS 8.7, depth: twilight, published Oct 27, 2026)
- [CVE-2026-93862 — Fireware OS Out-of-Bounds Read in FireCluster Sync Allows Denial of Service](https://vulnsea.com/cve/CVE-2026-93862.md): An out-of-bounds read vulnerability in the FireCluster Sync processing allows an attacker positioned on the cluster interconnect, such as a compromised cluster peer or an on-path network attacker, to repeatedly crash the firewall's clust… (severity: high, CVSS 7.2, depth: twilight, published Oct 27, 2026)
- [CVE-2026-90464 — Fireware OS Missing Command Validation allows Authenticated Arbitrary File Modification as Root](https://vulnsea.com/cve/CVE-2026-90464.md): An external control of file path vulnerability in a WatchGuard Fireware OS firewall diagnostic command allows a remote, authenticated attacker with at least read-only (Device Monitor) privileges and access to the management CLI to create… (severity: high, CVSS 7.2, depth: twilight, published Oct 27, 2026)
- [CVE-2026-113881 — Fireware OS Stack Buffer Overflow in VPN Network Access Enforcement Allows Unprivileged Code Execution](https://vulnsea.com/cve/CVE-2026-113881.md): A stack-based buffer overflow vulnerability in Fireware OS's VPN Network Access Enforcement process allows an authenticated mobile VPN user to create a denial of service condition and potentially execute arbitrary code as an unprivileged… (severity: medium, CVSS 6.1, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-82332 — Fireware OS Improper Authentication in AuthPoint MFA Verification Allows Session Hijacking](https://vulnsea.com/cve/CVE-2026-82332.md): An improper authentication vulnerability in WatchGuard Fireware OS's AuthPoint multi-factor authentication process allows a local, unauthenticated attacker on the appliance to hijack another user's in-progress MFA session by supplying a … (severity: medium, CVSS 5.6, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-90442 — Fireware OS Authenticated Stack Buffer Overflow in certd Allows Denial of Service](https://vulnsea.com/cve/CVE-2026-90442.md): A stack-based buffer overflow vulnerability in the Fireware OS certd process allows an authenticated attacker with access to the Firebox management interface to crash the certificate management service and potentially execute arbitrary c… (severity: high, CVSS 8.6, depth: twilight, published Oct 27, 2026)
- [CVE-2026-93434 — Fireware OS XPath Injection in SSH Authentication Allows Blind Extraction of Configuration Secrets](https://vulnsea.com/cve/CVE-2026-93434.md): An XPath injection vulnerability in WatchGuard Fireware OS's SSH authentication process allows a remote, unauthenticated attacker with access to the management SSH interface to extract sensitive configuration data by submitting a special… (severity: high, CVSS 8.7, depth: twilight, published Oct 27, 2026)
- [CVE-2026-93864 — Fireware OS Link Following in firewalld Allows Local Arbitrary File Overwrite as Root](https://vulnsea.com/cve/CVE-2026-93864.md): A link following vulnerability in WatchGuard Fireware OS’s firewall daemon allows a local attacker with code execution as a low-privileged system process to overwrite arbitrary files with root privileges, and to tamper with firewall IP s… (severity: high, CVSS 7.1, depth: twilight, published Oct 27, 2026)
- [CVE-2026-109823 — Host filesystem path disclosure via DNS rebinding](https://vulnsea.com/cve/CVE-2026-109823.md): An attacker can read the name of filesystem paths of your application present via Tidewave configuration via /tidewave/connect or via the rendered toolbar.

Neither response checks the Host header. A web page that rebinds its own domain … (severity: low, CVSS 2.3, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-111107 — Fireware OS NULL Pointer Dereference in Management Interface Allows Unauthenticated Denial of Service](https://vulnsea.com/cve/CVE-2026-111107.md): A NULL pointer dereference vulnerability in WatchGuard Fireware OS’s management interface allows a remote, unauthenticated attacker with network access to the management interface to crash the management service by sending a specially cr… (severity: high, CVSS 8.7, depth: twilight, published Oct 27, 2026)
- [CVE-2026-104381 — Fireware OS Missing Authentication in FireCluster State Sync Allows BOVPN Tunnel Denial of Service](https://vulnsea.com/cve/CVE-2026-104381.md): A missing authentication vulnerability in Fireware OS's FireCluster state synchronization feature allows an unauthenticated attacker positioned on the cluster synchronization network segment to force premature VPN tunnel termination by s… (severity: medium, CVSS 6, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-117510 — Dexmal Dexbotic gr00tsonic Checkpoint Loader gr00tsonic_arch.py load_pretrained_gr00t path traversal](https://vulnsea.com/cve/CVE-2026-117510.md): A flaw has been found in Dexmal Dexbotic up to 0.2.0. Affected by this vulnerability is the function load_pretrained_gr00t of the file dexbotic/model/gr00tsonic/gr00tsonic_arch.py of the component gr00tsonic Checkpoint Loader. This manip… (severity: medium, CVSS 6.3, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-117509 — crownpku Rasa_NLU_Chi Model Persistor persistor.py Persistor._decompress path traversal](https://vulnsea.com/cve/CVE-2026-117509.md): A vulnerability was detected in crownpku Rasa_NLU_Chi up to 0.12.2. Affected is the function Persistor._decompress of the file rasa_nlu/persistor.py of the component Model Persistor. The manipulation results in path traversal. The attack… (severity: medium, CVSS 6.3, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-111585 — Integer Overflow in TeamViewer Remote Control Screen Decompression Leading to Heap-Based Buffer Overflow](https://vulnsea.com/cve/CVE-2026-111585.md): An integer overflow in the remote-control
screen processing component of TeamViewer clients (Full Client, Portable and Remote
Control App) prior to version 15.83 may allow a malicious remote host to cause
a denial of service or, dependin… (severity: high, CVSS 8.8, depth: twilight, published Oct 27, 2026)
- [CVE-2026-111584 — Local Privilege Escalation via Race Condition in TeamViewer Patch Management for Windows](https://vulnsea.com/cve/CVE-2026-111584.md): A race condition in the installation
process of TeamViewer Remote Management - Patch Management for Windows prior to
version 26.9.1 allows a local authenticated attacker with low privileges to
execute arbitrary code with elevated privile… (severity: high, CVSS 7.3, depth: twilight, published Oct 27, 2026)
- [CVE-2026-111582 — Local Privilege Escalation via DLL Hijacking in TeamViewer Monitoring for Windows](https://vulnsea.com/cve/CVE-2026-111582.md): A DLL loading vulnerability in the
TeamViewer Remote Management Monitoring installer for Windows prior to version 26.10.1
allows a local authenticated attacker with low privileges to execute arbitrary
code with elevated privileges. Explo… (severity: high, CVSS 7.3, depth: twilight, published Oct 27, 2026)
- [CVE-2026-104189 — 3Dviewer-Nextcloud: Share password not enforced when streaming 3D models from a public link share](https://vulnsea.com/cve/CVE-2026-104189.md): The 3D Viewer for Nextcloud is a comprehensive 3D model viewer application for Nextcloud that supports multiple 3D file formats. In versions 1.7.9 through 3.3.1, the app's public file endpoint performed no share authorization. Anyone who… (severity: high, CVSS 7.5, depth: twilight, published Oct 27, 2026)
- [CVE-2026-92377 — Local Privilege Escalation via DLL Sideloading in TeamViewer Patch Management for Windows](https://vulnsea.com/cve/CVE-2026-92377.md): Improper access control in the Patch
Management update mechanism of TeamViewer Full Client and Host for Windows
prior to version 15.82 allows a local authenticated attacker with low
privileges to supply a signed executable through a forg… (severity: high, CVSS 7.8, depth: twilight, published Oct 27, 2026)
- [CVE-2026-111583 — Local Privilege Escalation during Advanced Asset Management Installation in TeamViewer Client for Windows](https://vulnsea.com/cve/CVE-2026-111583.md): Improper access control in the installer
staging directory used by TeamViewer Full Client and Host prior to version
15.82 for Windows during installation of Advanced Asset Management allows a
local authenticated user with low privileges … (severity: high, CVSS 7.3, depth: twilight, published Oct 27, 2026)
- [CVE-2026-92376 — Local Privilege Escalation via IPC Broker Impersonation in TeamViewer Remote Management Monitoring for Windows](https://vulnsea.com/cve/CVE-2026-92376.md): Improper authentication in the
inter-process communication (IPC) mechanism of TeamViewer Remote Management
Monitoring for Windows prior to version 26.10.1 allows a local authenticated
attacker with low privileges to impersonate the IPC b… (severity: high, CVSS 7.8, depth: twilight, published Oct 27, 2026)
- [CVE-2026-92375 — Local privilege escalation via improper IPC access control in TeamViewer Remote Management Monitoring](https://vulnsea.com/cve/CVE-2026-92375.md): An improper access control vulnerability in
the IPC communication between TeamViewer Full Client or Host prior to version
15.83 and the Remote Management Monitoring component prior to version 26.10.1
allows a local authenticated attacker… (severity: high, CVSS 7.8, depth: twilight, published Oct 27, 2026)
- [CVE-2026-92374 — Privilege Escalation via Insecure Package Handling in TeamViewer Full Client and Host for macOS](https://vulnsea.com/cve/CVE-2026-92374.md): A time-of-check time-of-use (TOCTOU) race condition combined with improper symbolic link handling in the privileged helper of TeamViewer Full Client and Host prior to version 15.83 for macOS allows a local attacker with low privileges to… (severity: high, CVSS 7.8, depth: twilight, published Oct 27, 2026)
- [CVE-2026-105987 — Stored XSS in KGS Software tia Viewer](https://vulnsea.com/cve/CVE-2026-105987.md): KGS Software tia Viewer is vulnerable to Stored XSS via the annotation API. Due to the lack of input validation, an authenticated attacker can inject arbitrary JavaScript payload into a stickynote annotation. When any user opens the docu… (severity: medium, CVSS 5.1, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-92372 — Out-of-bounds Write in TeamViewer Full Client for Linux and macOS Allows Remote Code Execution](https://vulnsea.com/cve/CVE-2026-92372.md): An out-of-bounds write vulnerability in the
screen-image decoder of TeamViewer Full Client for Linux and macOS prior to
version 15.83 allows a remote attacker to execute arbitrary code by supplying
crafted screen-image data during a remo… (severity: high, CVSS 8.8, depth: twilight, published Oct 27, 2026)
- [CVE-2026-117507 — a2aproject a2a-java TaskManager.saveTaskEvent race condition](https://vulnsea.com/cve/CVE-2026-117507.md): A security vulnerability has been detected in a2aproject a2a-java up to 1.2.0.Final. This impacts the function TaskManager.saveTaskEvent. The manipulation leads to race condition. The attack may be initiated remotely. Upgrading to versio… (severity: medium, CVSS 5.4, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-118008 — Privilege escalation in the DOM: Navigation component](https://vulnsea.com/cve/CVE-2026-118008.md): Privilege escalation in the DOM: Navigation component. This vulnerability was fixed in Firefox 159. (severity: high, CVSS 8.8, depth: twilight, published Oct 27, 2026)
- [CVE-2026-117604 — Grav from 1.7.53.3 before 1.7.53.6 Clockwork Profiler Authorization Bypass via Loopback Fallback](https://vulnsea.com/cve/CVE-2026-117604.md): Grav from 1.7.53.3 before 1.7.53.6 contains an authorization bypass in Debugger::isDebuggerRequestAuthorized() that allows unauthenticated visitors to read /__clockwork/ profiler data via a loopback REMOTE_ADDR fallback. Behind a same-ho… (severity: high, CVSS 7.5, depth: twilight, published Oct 27, 2026)
- [CVE-2026-117506 — a2aproject a2a-java Push Notification Config Store JpaDatabasePushNotificationConfigStore.java InMemoryPushNotificationConfigStore.setInfo resource consumption](https://vulnsea.com/cve/CVE-2026-117506.md): A weakness has been identified in a2aproject a2a-java up to 1.2.0.Final. This affects the function InMemoryPushNotificationConfigStore.setInfo of the file extras/push-notification-config-store-database-jpa/src/main/java/org/a2aproject/sd… (severity: medium, CVSS 4.3, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-117999 — Race condition in the IPC component](https://vulnsea.com/cve/CVE-2026-117999.md): Race condition in the IPC component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6. (severity: none, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-117505 — a2aproject a2a-java ChildQueue queue.offer resource consumption](https://vulnsea.com/cve/CVE-2026-117505.md): A security flaw has been discovered in a2aproject a2a-java up to 1.2.0.Final. The impacted element is the function queue.offer of the component ChildQueue. Performing a manipulation results in resource consumption. The attack can be init… (severity: medium, CVSS 4.3, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-117976 — Site isolation issue in the DOM: Navigation component](https://vulnsea.com/cve/CVE-2026-117976.md): Site isolation issue in the DOM: Navigation component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6. (severity: none, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-78845 — Aidot products Linkind Matter Smart Plug 1.01.32, OREiN Matter Smart Light Bulb 3.15.21, and Linkind Wi-Fi Smart Light Bulb 3.30.17 are vulnerable to Remote Code Execution (RCE) via UPnP root description parsing.](https://vulnsea.com/cve/CVE-2026-78845.md): Aidot products Linkind Matter Smart Plug 1.01.32, OREiN Matter Smart Light Bulb 3.15.21, and Linkind Wi-Fi Smart Light Bulb 3.30.17 are vulnerable to Remote Code Execution (RCE) via UPnP root description parsing. (severity: none, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-116878 — Semantic MediaWiki 2.5.0 before 7.3.1 Resource Exhaustion via Special:PropertyLabelSimilarity](https://vulnsea.com/cve/CVE-2026-116878.md): Semantic MediaWiki from 2.5.0 before 7.3.1 contains an uncontrolled resource consumption vulnerability that allows anonymous attackers to force quadratic computation by supplying a zero limit to Special:PropertyLabelSimilarity. Attackers… (severity: high, CVSS 7.5, depth: twilight, published Oct 27, 2026)
- [CVE-2026-116620 — Tencent RapidJSON Regex stream.h Take out-of-bounds](https://vulnsea.com/cve/CVE-2026-116620.md): A security vulnerability has been detected in Tencent RapidJSON up to 1.1.0. This issue affects the function GenericStringStream<UTF8<char>>::Take in the library include/rapidjson/stream.h of the component Regex Parser. The manipulation … (severity: high, CVSS 7.3, depth: midnight, published Oct 27, 2026)
- [CVE-2024-58400 — llama.cpp before b3701 Out-of-Bounds Read in llama_decode via Token IDs](https://vulnsea.com/cve/CVE-2024-58400.md): llama.cpp before b3701 contains an out-of-bounds read vulnerability in llama_decode_internal and llama_encode_internal that allows remote unauthenticated attackers to read memory by supplying unvalidated token IDs. Attackers can send int… (severity: high, CVSS 8.2, depth: twilight, published Oct 27, 2026)
- [CVE-2026-116890 — Semantic MediaWiki 3.0.0 before 7.3.0 Missing Authorization via smwtask API](https://vulnsea.com/cve/CVE-2026-116890.md): Semantic MediaWiki from 3.0.0 before 7.3.0 contains a missing authorization vulnerability in the api.php smwtask module that allows unauthenticated attackers to run admin-only maintenance tasks. Attackers can use the public anonymous CSR… (severity: high, CVSS 7.3, depth: twilight, published Oct 27, 2026)
- [CVE-2026-116844 — Fclairamb ftpserverlib through 0.32.4 Cleartext FTPES Data Transfer via PROT P](https://vulnsea.com/cve/CVE-2026-116844.md): Fclairamb ftpserverlib through 0.32.4 contains a cleartext transmission vulnerability because TransferOpen checks only the transferTLS flag set by PROT, not whether the prepared data connection uses TLS. When a client sends PROT P after … (severity: medium, CVSS 4.8, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-116840 — llama.cpp b5854 before b11275 Integer Overflow in gguf_init_from_reader](https://vulnsea.com/cve/CVE-2026-116840.md): llama.cpp b5854 before b11275 contains an integer overflow vulnerability in gguf_init_from_reader that bypasses the CVE-2025-53630 size check when padding near-SIZE_MAX tensor sizes. Attackers can supply a crafted GGUF file whose tensor … (severity: medium, CVSS 6.1, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-116640 — Saruf-Ratul HR-Payroll-Management-System chat.php cross site scripting](https://vulnsea.com/cve/CVE-2026-116640.md): A flaw has been found in Saruf-Ratul HR-Payroll-Management-System e7cd81477001afdee95b843fd4137894d9418c9f/3fd6f45ead9f8197510c0910f759e06ee67251e5. Affected by this vulnerability is an unknown functionality of the file chat.php. Executi… (severity: low, CVSS 3.5, depth: twilight, published Oct 27, 2026)
- [CVE-2026-117533 — REDAXO 5.18.0 before 5.21.4 Stored XSS via Unsanitized Mediapool SVG Uploads](https://vulnsea.com/cve/CVE-2026-117533.md): REDAXO from 5.18.0 before 5.21.4 contains a stored cross-site scripting vulnerability because rex_media_service moves uploaded SVG files into the public media folder before sanitizing them. Authenticated users with mediapool upload right… (severity: medium, CVSS 4.4, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-116894 — REDAXO before 5.21.5 Insufficient Session Expiration on Password Change](https://vulnsea.com/cve/CVE-2026-116894.md): REDAXO before 5.21.5 contains an insufficient session expiration vulnerability that allows attackers to retain account access by keeping the current session and stay-logged-in key valid after a password change. Attackers who obtained a u… (severity: medium, CVSS 4.2, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-117541 — svg-sanitizer 0.11.0 before 1.1.0 Uncaught LogicException DoS via sanitize()](https://vulnsea.com/cve/CVE-2026-117541.md): svg-sanitizer from 0.11.0 before 1.1.0 contains an uncaught exception vulnerability that allows attackers to crash callers by submitting well-formed XML without a top-level svg root. Attackers can supply documents with a non-svg root or … (severity: medium, CVSS 5.3, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-117537 — REDAXO before 5.21.0 Reflected XSS via Metainfo API type Parameter](https://vulnsea.com/cve/CVE-2026-117537.md): REDAXO before 5.21.0 contains a reflected cross-site scripting vulnerability that allows authenticated attackers to inject scripts via the type parameter of the metainfo_default_fields_create API. Attackers can craft a link with a valid … (severity: medium, CVSS 4.1, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-116874 — SemanticMediaWiki 3.1.0 before 7.3.1 Reflected XSS via JsonResultPrinter Default Parameter](https://vulnsea.com/cve/CVE-2026-116874.md): SemanticMediaWiki from 3.1.0 before 7.3.1 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject scripts through the unescaped default parameter in JsonResultPrinter. Attackers can lure vi… (severity: medium, CVSS 6.1, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-90730 — Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, conta…](https://vulnsea.com/cve/CVE-2026-90730.md): Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, conta… (severity: medium, CVSS 6.5, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-116882 — Semantic MediaWiki 4.2.0 before 7.3.1 Stored XSS via FacetedSearch Exploration Labels](https://vulnsea.com/cve/CVE-2026-116882.md): Semantic MediaWiki from 4.2.0 before 7.3.1 contains a stored cross-site scripting vulnerability that allows authenticated profile or schema editors to inject HTML through FacetedSearch exploration-link labels. Attackers can store markup … (severity: medium, CVSS 4.8, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-116898 — REDAXO before 5.21.4 Missing Authorization in Media Pool Bulk Move](https://vulnsea.com/cve/CVE-2026-116898.md): REDAXO before 5.21.4 contains a missing authorization vulnerability in the media pool bulk move that checks only target category permission, ignoring the source category. Authenticated backend users with permission for one media category… (severity: high, CVSS 7.1, depth: twilight, published Oct 27, 2026)
- [CVE-2026-116886 — Semantic MediaWiki before 7.3.1 Stored XSS via External Identifier in Special:Browse](https://vulnsea.com/cve/CVE-2026-116886.md): Semantic MediaWiki from 2.5.0 before 7.3.1 contains a stored cross-site scripting vulnerability that allows users with page-edit rights to inject scripts via External identifier property values. Attackers can annotate markup payloads tha… (severity: medium, CVSS 5.4, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-118027 — Frame poisoning in the Layout component](https://vulnsea.com/cve/CVE-2026-118027.md): Frame poisoning in the Layout component. This vulnerability was fixed in Firefox ESR 115.44. (severity: none, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-118024 — Use-after-free in the Graphics: Text component](https://vulnsea.com/cve/CVE-2026-118024.md): Use-after-free in the Graphics: Text component. This vulnerability was fixed in Firefox 159. (severity: none, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-118026 — Invalid pointer in the JavaScript: GC component](https://vulnsea.com/cve/CVE-2026-118026.md): Invalid pointer in the JavaScript: GC component. This vulnerability was fixed in Firefox 159. (severity: none, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-118025 — Other issue in the SVG component](https://vulnsea.com/cve/CVE-2026-118025.md): Other issue in the SVG component. This vulnerability was fixed in Firefox 159. (severity: none, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-118022 — Sandbox escape due to use-after-free in the Disability Access APIs component](https://vulnsea.com/cve/CVE-2026-118022.md): Sandbox escape due to use-after-free in the Disability Access APIs component. This vulnerability was fixed in Firefox 159. (severity: none, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-118021 — Sandbox escape due to use-after-free in the XPCOM component](https://vulnsea.com/cve/CVE-2026-118021.md): Sandbox escape due to use-after-free in the XPCOM component. This vulnerability was fixed in Firefox 159. (severity: none, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-118023 — Sandbox escape due to use-after-free in the Graphics: WebRender component](https://vulnsea.com/cve/CVE-2026-118023.md): Sandbox escape due to use-after-free in the Graphics: WebRender component. This vulnerability was fixed in Firefox 159. (severity: none, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-118018 — Spoofing issue in the Downloads component in Firefox for Android](https://vulnsea.com/cve/CVE-2026-118018.md): Spoofing issue in the Downloads component in Firefox for Android. This vulnerability was fixed in Firefox 159. (severity: none, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-118020 — Use-after-free in the Layout component](https://vulnsea.com/cve/CVE-2026-118020.md): Use-after-free in the Layout component. This vulnerability was fixed in Firefox 159. (severity: none, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-118016 — Use-after-free in the DOM: Core & HTML component](https://vulnsea.com/cve/CVE-2026-118016.md): Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159. (severity: none, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-118019 — Race condition, use-after-free in the DOM: File component](https://vulnsea.com/cve/CVE-2026-118019.md): Race condition, use-after-free in the DOM: File component. This vulnerability was fixed in Firefox 159. (severity: none, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-118017 — Use-after-free in the SVG component](https://vulnsea.com/cve/CVE-2026-118017.md): Use-after-free in the SVG component. This vulnerability was fixed in Firefox 159. (severity: none, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-118012 — Use-after-free in the DOM: Animation component](https://vulnsea.com/cve/CVE-2026-118012.md): Use-after-free in the DOM: Animation component. This vulnerability was fixed in Firefox 159. (severity: none, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-118011 — Frame poisoning in the CSS Parsing and Computation component](https://vulnsea.com/cve/CVE-2026-118011.md): Frame poisoning in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 159. (severity: none, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-118014 — Use-after-free in the JavaScript Engine: JIT component](https://vulnsea.com/cve/CVE-2026-118014.md): Use-after-free in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 159. (severity: none, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-118013 — Use-after-free in the Layout: Images, Video, and HTML Frames component](https://vulnsea.com/cve/CVE-2026-118013.md): Use-after-free in the Layout: Images, Video, and HTML Frames component. This vulnerability was fixed in Firefox 159. (severity: none, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-118015 — Use-after-free in the DOM: Core & HTML component](https://vulnsea.com/cve/CVE-2026-118015.md): Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159. (severity: none, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-118009 — Integer overflow, use-after-free in the Graphics: Text component](https://vulnsea.com/cve/CVE-2026-118009.md): Integer overflow, use-after-free in the Graphics: Text component. This vulnerability was fixed in Firefox 159. (severity: none, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-118007 — Use-after-free in the JavaScript: GC component](https://vulnsea.com/cve/CVE-2026-118007.md): Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 159. (severity: none, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-118005 — Use-after-free in the WebRTC: Signaling component](https://vulnsea.com/cve/CVE-2026-118005.md): Use-after-free in the WebRTC: Signaling component. This vulnerability was fixed in Firefox 159. (severity: none, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-118010 — Use-after-free in the Disability Access APIs component](https://vulnsea.com/cve/CVE-2026-118010.md): Use-after-free in the Disability Access APIs component. This vulnerability was fixed in Firefox 159. (severity: none, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-118004 — Incorrect boundary conditions in the CSS Transitions and Animations component](https://vulnsea.com/cve/CVE-2026-118004.md): Incorrect boundary conditions in the CSS Transitions and Animations component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6. (severity: none, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-118006 — Privilege escalation due to use-after-free in the WebRTC: Signaling component](https://vulnsea.com/cve/CVE-2026-118006.md): Privilege escalation due to use-after-free in the WebRTC: Signaling component. This vulnerability was fixed in Firefox 159. (severity: none, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-118000 — Information disclosure in the Networking: HTTP component](https://vulnsea.com/cve/CVE-2026-118000.md): Information disclosure in the Networking: HTTP component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6. (severity: none, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-118002 — Information disclosure due to race condition in the Networking component](https://vulnsea.com/cve/CVE-2026-118002.md): Information disclosure due to race condition in the Networking component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6. (severity: none, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-117997 — Sandbox escape due to use-after-free in the Widget component](https://vulnsea.com/cve/CVE-2026-117997.md): Sandbox escape due to use-after-free in the Widget component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6. (severity: none, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-117998 — Mitigation bypass in the DOM: Push Subscriptions component](https://vulnsea.com/cve/CVE-2026-117998.md): Mitigation bypass in the DOM: Push Subscriptions component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6. (severity: none, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-117989 — Use-after-free in the Graphics component](https://vulnsea.com/cve/CVE-2026-117989.md): Use-after-free in the Graphics component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6. (severity: none, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-118003 — Information disclosure in the Networking: DNS component](https://vulnsea.com/cve/CVE-2026-118003.md): Information disclosure in the Networking: DNS component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6. (severity: none, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-117995 — Privilege escalation in the DOM: UI Events & Focus Handling component](https://vulnsea.com/cve/CVE-2026-117995.md): Privilege escalation in the DOM: UI Events & Focus Handling component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6. (severity: none, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-117994 — Use-after-free in the JavaScript: GC component](https://vulnsea.com/cve/CVE-2026-117994.md): Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6. (severity: none, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-117992 — Information disclosure in the CSS Parsing and Computation component](https://vulnsea.com/cve/CVE-2026-117992.md): Information disclosure in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6. (severity: none, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-117996 — Incorrect boundary conditions in the WebRTC component](https://vulnsea.com/cve/CVE-2026-117996.md): Incorrect boundary conditions in the WebRTC component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6. (severity: none, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-117988 — Sandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL component](https://vulnsea.com/cve/CVE-2026-117988.md): Sandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6. (severity: none, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-117987 — Use-after-free in the Graphics component](https://vulnsea.com/cve/CVE-2026-117987.md): Use-after-free in the Graphics component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6. (severity: none, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-117984 — Incorrect boundary conditions in the Layout: Scrolling and Overflow component](https://vulnsea.com/cve/CVE-2026-117984.md): Incorrect boundary conditions in the Layout: Scrolling and Overflow component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6. (severity: none, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-117993 — Integer overflow in the Graphics: Text component](https://vulnsea.com/cve/CVE-2026-117993.md): Integer overflow in the Graphics: Text component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6. (severity: none, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-117991 — Incorrect boundary conditions in the Layout: Text and Fonts component](https://vulnsea.com/cve/CVE-2026-117991.md): Incorrect boundary conditions in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6. (severity: none, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-117985 — Sandbox escape due to use-after-free in the Graphics component](https://vulnsea.com/cve/CVE-2026-117985.md): Sandbox escape due to use-after-free in the Graphics component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6. (severity: none, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-117990 — Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component](https://vulnsea.com/cve/CVE-2026-117990.md): Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6. (severity: none, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-117980 — Use-after-free in the Graphics component](https://vulnsea.com/cve/CVE-2026-117980.md): Use-after-free in the Graphics component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6. (severity: none, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-117983 — Use-after-free in the Graphics component](https://vulnsea.com/cve/CVE-2026-117983.md): Use-after-free in the Graphics component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6. (severity: none, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-117982 — Invalid pointer in the JavaScript Engine: JIT component](https://vulnsea.com/cve/CVE-2026-117982.md): Invalid pointer in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6. (severity: none, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-117981 — Privilege escalation in the Toolkit component](https://vulnsea.com/cve/CVE-2026-117981.md): Privilege escalation in the Toolkit component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6. (severity: none, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-117974 — Use-after-free in the XML component](https://vulnsea.com/cve/CVE-2026-117974.md): Use-after-free in the XML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6. (severity: none, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-117986 — Use-after-free in the Graphics component](https://vulnsea.com/cve/CVE-2026-117986.md): Use-after-free in the Graphics component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6. (severity: none, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-117979 — Incorrect boundary conditions in the Graphics: WebRender component](https://vulnsea.com/cve/CVE-2026-117979.md): Incorrect boundary conditions in the Graphics: WebRender component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6. (severity: none, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-117977 — Other issue in the Console component](https://vulnsea.com/cve/CVE-2026-117977.md): Other issue in the Console component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6. (severity: none, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-117975 — Sandbox escape due to invalid pointer in the Graphics: WebRender component](https://vulnsea.com/cve/CVE-2026-117975.md): Sandbox escape due to invalid pointer in the Graphics: WebRender component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6. (severity: none, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-117972 — Use-after-free in the Graphics component](https://vulnsea.com/cve/CVE-2026-117972.md): Use-after-free in the Graphics component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6. (severity: none, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-117971 — Sandbox escape due to use-after-free in the Print Preview component](https://vulnsea.com/cve/CVE-2026-117971.md): Sandbox escape due to use-after-free in the Print Preview component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6. (severity: none, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-117978 — Incorrect boundary conditions in the Graphics component](https://vulnsea.com/cve/CVE-2026-117978.md): Incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6. (severity: none, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-117965 — Same-origin policy bypass in the Address Bar component](https://vulnsea.com/cve/CVE-2026-117965.md): Same-origin policy bypass in the Address Bar component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6. (severity: none, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-117968 — Use-after-free in the DOM: Core & HTML component](https://vulnsea.com/cve/CVE-2026-117968.md): Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6. (severity: none, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-117967 — Mitigation bypass in the DOM: Security component](https://vulnsea.com/cve/CVE-2026-117967.md): Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6. (severity: none, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-117973 — Use-after-free in the Networking: DNS component](https://vulnsea.com/cve/CVE-2026-117973.md): Use-after-free in the Networking: DNS component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6. (severity: none, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-117966 — Site isolation issue in the Networking: HTTP component](https://vulnsea.com/cve/CVE-2026-117966.md): Site isolation issue in the Networking: HTTP component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6. (severity: none, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-117970 — Race condition in the Disability Access APIs component](https://vulnsea.com/cve/CVE-2026-117970.md): Race condition in the Disability Access APIs component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6. (severity: none, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-117962 — Sandbox escape due to incorrect boundary conditions in the Storage: Quota Manager component](https://vulnsea.com/cve/CVE-2026-117962.md): Sandbox escape due to incorrect boundary conditions in the Storage: Quota Manager component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6. (severity: none, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-117969 — Invalid pointer in the JavaScript Engine: JIT component](https://vulnsea.com/cve/CVE-2026-117969.md): Invalid pointer in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6. (severity: none, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-117963 — Incorrect boundary conditions in the DOM: Service Workers component](https://vulnsea.com/cve/CVE-2026-117963.md): Incorrect boundary conditions in the DOM: Service Workers component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6. (severity: none, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-117964 — Use-after-free in the Panning and Zooming component](https://vulnsea.com/cve/CVE-2026-117964.md): Use-after-free in the Panning and Zooming component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6. (severity: none, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-117958 — Site isolation issue in the Networking: HTTP component](https://vulnsea.com/cve/CVE-2026-117958.md): Site isolation issue in the Networking: HTTP component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6. (severity: none, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-117956 — Invalid pointer in the Nimbus Desktop Client component](https://vulnsea.com/cve/CVE-2026-117956.md): Invalid pointer in the Nimbus Desktop Client component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6. (severity: none, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-117955 — JIT miscompilation in the JavaScript: WebAssembly component](https://vulnsea.com/cve/CVE-2026-117955.md): JIT miscompilation in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6. (severity: none, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-117954 — Use-after-free in the Layout: Positioned component](https://vulnsea.com/cve/CVE-2026-117954.md): Use-after-free in the Layout: Positioned component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6. (severity: none, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-117961 — Incorrect boundary conditions in the Layout: Text and Fonts component](https://vulnsea.com/cve/CVE-2026-117961.md): Incorrect boundary conditions in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6. (severity: none, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-117960 — Spoofing issue in the DOM: Core & HTML component](https://vulnsea.com/cve/CVE-2026-117960.md): Spoofing issue in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6. (severity: none, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-117959 — Site isolation issue in the DOM: Service Workers component](https://vulnsea.com/cve/CVE-2026-117959.md): Site isolation issue in the DOM: Service Workers component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6. (severity: none, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-117951 — Use-after-free in the DOM: Core & HTML component](https://vulnsea.com/cve/CVE-2026-117951.md): Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6. (severity: none, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-117953 — Use-after-free in the DOM: Core & HTML component](https://vulnsea.com/cve/CVE-2026-117953.md): Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6. (severity: none, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-117952 — Uninitialized memory in the Networking component](https://vulnsea.com/cve/CVE-2026-117952.md): Uninitialized memory in the Networking component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6. (severity: none, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-117957 — Cryptographic issue in the WebRTC: Networking component](https://vulnsea.com/cve/CVE-2026-117957.md): Cryptographic issue in the WebRTC: Networking component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6. (severity: none, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-117950 — Incorrect boundary conditions in the DOM: Core & HTML component](https://vulnsea.com/cve/CVE-2026-117950.md): Incorrect boundary conditions in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6. (severity: none, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-117949 — Use-after-free in the DOM: Core & HTML component](https://vulnsea.com/cve/CVE-2026-117949.md): Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6. (severity: none, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-117947 — Use-after-free in the XML component](https://vulnsea.com/cve/CVE-2026-117947.md): Use-after-free in the XML component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6. (severity: none, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-117948 — Use-after-free in the SVG component](https://vulnsea.com/cve/CVE-2026-117948.md): Use-after-free in the SVG component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6. (severity: none, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-117946 — Incorrect boundary conditions in the JavaScript Engine component](https://vulnsea.com/cve/CVE-2026-117946.md): Incorrect boundary conditions in the JavaScript Engine component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6. (severity: none, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-117944 — Use-after-free in the Layout component](https://vulnsea.com/cve/CVE-2026-117944.md): Use-after-free in the Layout component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6. (severity: none, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-117943 — Use-after-free in the DOM: Core & HTML component](https://vulnsea.com/cve/CVE-2026-117943.md): Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6. (severity: none, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-117941 — Use-after-free in the DOM: CSS Object Model component](https://vulnsea.com/cve/CVE-2026-117941.md): Use-after-free in the DOM: CSS Object Model component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6. (severity: none, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-117939 — Use-after-free in the XML component](https://vulnsea.com/cve/CVE-2026-117939.md): Use-after-free in the XML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6. (severity: none, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-117945 — Incorrect boundary conditions in the XML component](https://vulnsea.com/cve/CVE-2026-117945.md): Incorrect boundary conditions in the XML component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6. (severity: none, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-117940 — Use-after-free in the DOM: Core & HTML component](https://vulnsea.com/cve/CVE-2026-117940.md): Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6. (severity: none, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-117938 — Use-after-free in the Layout component](https://vulnsea.com/cve/CVE-2026-117938.md): Use-after-free in the Layout component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6. (severity: none, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-117942 — Incorrect boundary conditions in the JavaScript Engine: JIT component](https://vulnsea.com/cve/CVE-2026-117942.md): Incorrect boundary conditions in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6. (severity: none, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-117935 — Use-after-free in the DOM: Bindings (WebIDL) component](https://vulnsea.com/cve/CVE-2026-117935.md): Use-after-free in the DOM: Bindings (WebIDL) component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6. (severity: none, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-117936 — Use-after-free in the DOM: Core & HTML component](https://vulnsea.com/cve/CVE-2026-117936.md): Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6. (severity: none, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-117933 — Frame poisoning in the CSS Parsing and Computation component](https://vulnsea.com/cve/CVE-2026-117933.md): Frame poisoning in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6. (severity: none, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-117932 — Use-after-free in the DOM: Core & HTML component](https://vulnsea.com/cve/CVE-2026-117932.md): Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6. (severity: none, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-117931 — Use-after-free in the DOM: Events component](https://vulnsea.com/cve/CVE-2026-117931.md): Use-after-free in the DOM: Events component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6. (severity: none, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-117937 — Invalid pointer in the JavaScript Engine component](https://vulnsea.com/cve/CVE-2026-117937.md): Invalid pointer in the JavaScript Engine component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6. (severity: none, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-117927 — Use-after-free in the SVG component](https://vulnsea.com/cve/CVE-2026-117927.md): Use-after-free in the SVG component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6. (severity: none, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-117934 — Use-after-free in the Layout component](https://vulnsea.com/cve/CVE-2026-117934.md): Use-after-free in the Layout component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6. (severity: none, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-117929 — Use-after-free in the DOM: Core & HTML component](https://vulnsea.com/cve/CVE-2026-117929.md): Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6. (severity: none, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-117925 — Use-after-free in the DOM: Core & HTML component](https://vulnsea.com/cve/CVE-2026-117925.md): Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6. (severity: none, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-117924 — Use-after-free in the XSLT component](https://vulnsea.com/cve/CVE-2026-117924.md): Use-after-free in the XSLT component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6. (severity: none, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-117923 — Use-after-free in the Audio/Video component](https://vulnsea.com/cve/CVE-2026-117923.md): Use-after-free in the Audio/Video component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6. (severity: none, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-117922 — Use-after-free in the Networking: WebSockets component](https://vulnsea.com/cve/CVE-2026-117922.md): Use-after-free in the Networking: WebSockets component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6. (severity: none, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-117930 — Use-after-free in the DOM: Bindings (WebIDL) component](https://vulnsea.com/cve/CVE-2026-117930.md): Use-after-free in the DOM: Bindings (WebIDL) component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6. (severity: none, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-117928 — Same-origin policy bypass in the CSS Parsing and Computation component](https://vulnsea.com/cve/CVE-2026-117928.md): Same-origin policy bypass in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6. (severity: none, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-117926 — Incorrect boundary conditions in the SVG component](https://vulnsea.com/cve/CVE-2026-117926.md): Incorrect boundary conditions in the SVG component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6. (severity: none, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-117921 — Use-after-free in the CSS Parsing and Computation component](https://vulnsea.com/cve/CVE-2026-117921.md): Use-after-free in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6. (severity: none, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-117919 — Use-after-free in the DOM: Core & HTML component](https://vulnsea.com/cve/CVE-2026-117919.md): Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6. (severity: none, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-117914 — Use-after-free in the SVG component](https://vulnsea.com/cve/CVE-2026-117914.md): Use-after-free in the SVG component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6. (severity: none, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-117920 — Use-after-free in the DOM: HTML Parser component](https://vulnsea.com/cve/CVE-2026-117920.md): Use-after-free in the DOM: HTML Parser component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6. (severity: none, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-117915 — Incorrect boundary conditions in the Layout: Block and Inline component](https://vulnsea.com/cve/CVE-2026-117915.md): Incorrect boundary conditions in the Layout: Block and Inline component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6. (severity: none, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-117911 — Use-after-free in the Audio/Video: Playback component](https://vulnsea.com/cve/CVE-2026-117911.md): Use-after-free in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6. (severity: none, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-117918 — Use-after-free in the Graphics: Canvas2D component](https://vulnsea.com/cve/CVE-2026-117918.md): Use-after-free in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6. (severity: none, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-117912 — Same-origin policy bypass in the CSS Parsing and Computation component](https://vulnsea.com/cve/CVE-2026-117912.md): Same-origin policy bypass in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6. (severity: none, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-117917 — Invalid pointer in the Graphics: WebRender component](https://vulnsea.com/cve/CVE-2026-117917.md): Invalid pointer in the Graphics: WebRender component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6. (severity: none, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-117916 — Use-after-free in the XSLT component](https://vulnsea.com/cve/CVE-2026-117916.md): Use-after-free in the XSLT component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6. (severity: none, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-117913 — Use-after-free in the SVG component](https://vulnsea.com/cve/CVE-2026-117913.md): Use-after-free in the SVG component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6. (severity: none, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-117910 — Invalid pointer in the JavaScript Engine component](https://vulnsea.com/cve/CVE-2026-117910.md): Invalid pointer in the JavaScript Engine component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6. (severity: none, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-117906 — Use-after-free in the CSS Parsing and Computation component](https://vulnsea.com/cve/CVE-2026-117906.md): Use-after-free in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6. (severity: none, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-117903 — Use-after-free in the Audio/Video component](https://vulnsea.com/cve/CVE-2026-117903.md): Use-after-free in the Audio/Video component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6. (severity: none, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-117907 — Use-after-free in the Networking component](https://vulnsea.com/cve/CVE-2026-117907.md): Use-after-free in the Networking component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6. (severity: none, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-117905 — Use-after-free in the Audio/Video: Playback component](https://vulnsea.com/cve/CVE-2026-117905.md): Use-after-free in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6. (severity: none, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-117908 — Use-after-free in the Graphics: ImageLib component](https://vulnsea.com/cve/CVE-2026-117908.md): Use-after-free in the Graphics: ImageLib component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6. (severity: none, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-117901 — Use-after-free in the DOM: Core & HTML component](https://vulnsea.com/cve/CVE-2026-117901.md): Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6. (severity: none, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-117909 — Use-after-free in the JavaScript: GC component](https://vulnsea.com/cve/CVE-2026-117909.md): Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6. (severity: none, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-117902 — Use-after-free in the Layout: Text and Fonts component](https://vulnsea.com/cve/CVE-2026-117902.md): Use-after-free in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6. (severity: none, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-117904 — Use-after-free in the JavaScript: GC component](https://vulnsea.com/cve/CVE-2026-117904.md): Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6. (severity: none, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-117898 — Use-after-free in the JavaScript Engine: JIT component](https://vulnsea.com/cve/CVE-2026-117898.md): Use-after-free in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6. (severity: none, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-117897 — Incorrect boundary conditions in the Layout: Tables component](https://vulnsea.com/cve/CVE-2026-117897.md): Incorrect boundary conditions in the Layout: Tables component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6. (severity: none, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-117895 — Use-after-free in the DOM: Core & HTML component](https://vulnsea.com/cve/CVE-2026-117895.md): Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6. (severity: none, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-117900 — Use-after-free in the DOM: Editor component](https://vulnsea.com/cve/CVE-2026-117900.md): Use-after-free in the DOM: Editor component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6. (severity: none, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-117896 — Use-after-free in the DOM: Core & HTML component](https://vulnsea.com/cve/CVE-2026-117896.md): Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6. (severity: none, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-117899 — Use-after-free in the Networking: HTTP component](https://vulnsea.com/cve/CVE-2026-117899.md): Use-after-free in the Networking: HTTP component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6. (severity: none, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-117893 — Incorrect boundary conditions in the Security: PSM component](https://vulnsea.com/cve/CVE-2026-117893.md): Incorrect boundary conditions in the Security: PSM component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6. (severity: none, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-117891 — Use-after-free in the JavaScript Engine: JIT component](https://vulnsea.com/cve/CVE-2026-117891.md): Use-after-free in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6. (severity: none, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-117887 — Use-after-free in the DOM: Core & HTML component](https://vulnsea.com/cve/CVE-2026-117887.md): Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6. (severity: none, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-117890 — JIT miscompilation in the JavaScript Engine: JIT component](https://vulnsea.com/cve/CVE-2026-117890.md): JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6. (severity: none, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-117884 — Use-after-free in the Networking component](https://vulnsea.com/cve/CVE-2026-117884.md): Use-after-free in the Networking component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6. (severity: none, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-117894 — Incorrect boundary conditions in the WebRTC: Signaling component](https://vulnsea.com/cve/CVE-2026-117894.md): Incorrect boundary conditions in the WebRTC: Signaling component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6. (severity: none, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-117888 — Uninitialized memory in the Graphics: Canvas2D component](https://vulnsea.com/cve/CVE-2026-117888.md): Uninitialized memory in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6. (severity: none, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-117886 — Incorrect boundary conditions in the Graphics: Text component](https://vulnsea.com/cve/CVE-2026-117886.md): Incorrect boundary conditions in the Graphics: Text component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6. (severity: none, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-117885 — Use-after-free in the Layout: Grid component](https://vulnsea.com/cve/CVE-2026-117885.md): Use-after-free in the Layout: Grid component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6. (severity: none, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-117892 — Privilege escalation due to use-after-free in the WebRTC: Networking component](https://vulnsea.com/cve/CVE-2026-117892.md): Privilege escalation due to use-after-free in the WebRTC: Networking component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6. (severity: none, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-117880 — Use-after-free in the XML component](https://vulnsea.com/cve/CVE-2026-117880.md): Use-after-free in the XML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6. (severity: none, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-117889 — Incorrect boundary conditions in the JavaScript Engine component](https://vulnsea.com/cve/CVE-2026-117889.md): Incorrect boundary conditions in the JavaScript Engine component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6. (severity: none, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-117881 — Use-after-free in the DOM: Core & HTML component](https://vulnsea.com/cve/CVE-2026-117881.md): Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6. (severity: none, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-117877 — Use-after-free in the Layout: Text and Fonts component](https://vulnsea.com/cve/CVE-2026-117877.md): Use-after-free in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6. (severity: none, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-117874 — Use-after-free in the Internationalization component](https://vulnsea.com/cve/CVE-2026-117874.md): Use-after-free in the Internationalization component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6. (severity: none, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-117883 — Use-after-free in the DOM: HTML Parser component](https://vulnsea.com/cve/CVE-2026-117883.md): Use-after-free in the DOM: HTML Parser component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6. (severity: none, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-117875 — Use-after-free in the Layout: Scrolling and Overflow component](https://vulnsea.com/cve/CVE-2026-117875.md): Use-after-free in the Layout: Scrolling and Overflow component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6. (severity: none, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-117882 — Use-after-free in the Layout component](https://vulnsea.com/cve/CVE-2026-117882.md): Use-after-free in the Layout component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6. (severity: none, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-117872 — Use-after-free in the JavaScript: Standard Library component](https://vulnsea.com/cve/CVE-2026-117872.md): Use-after-free in the JavaScript: Standard Library component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6. (severity: none, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-117879 — Incorrect boundary conditions in the Layout: Tables component](https://vulnsea.com/cve/CVE-2026-117879.md): Incorrect boundary conditions in the Layout: Tables component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6. (severity: none, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-117876 — Use-after-free in the Layout: Text and Fonts component](https://vulnsea.com/cve/CVE-2026-117876.md): Use-after-free in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6. (severity: none, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-117878 — Other issue, use-after-free in the Storage: IndexedDB component](https://vulnsea.com/cve/CVE-2026-117878.md): Other issue, use-after-free in the Storage: IndexedDB component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6. (severity: none, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-117868 — Sandbox escape in the DOM: Networking component](https://vulnsea.com/cve/CVE-2026-117868.md): Sandbox escape in the DOM: Networking component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6. (severity: none, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-117863 — Information disclosure due to uninitialized memory in the Audio/Video component](https://vulnsea.com/cve/CVE-2026-117863.md): Information disclosure due to uninitialized memory in the Audio/Video component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6. (severity: none, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-117873 — Incorrect boundary conditions in the Audio/Video: Playback component](https://vulnsea.com/cve/CVE-2026-117873.md): Incorrect boundary conditions in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6. (severity: none, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-117862 — Privilege escalation due to incorrect boundary conditions in the Networking component](https://vulnsea.com/cve/CVE-2026-117862.md): Privilege escalation due to incorrect boundary conditions in the Networking component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6. (severity: none, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-117871 — Invalid pointer in the Graphics component](https://vulnsea.com/cve/CVE-2026-117871.md): Invalid pointer in the Graphics component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6. (severity: none, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-117870 — Use-after-free in the JavaScript Engine component](https://vulnsea.com/cve/CVE-2026-117870.md): Use-after-free in the JavaScript Engine component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6. (severity: none, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-117869 — Use-after-free in the DOM: Core & HTML component](https://vulnsea.com/cve/CVE-2026-117869.md): Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6. (severity: none, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-117867 — Use-after-free in the Layout component](https://vulnsea.com/cve/CVE-2026-117867.md): Use-after-free in the Layout component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6. (severity: none, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-117866 — Privilege escalation due to use-after-free in the Graphics: Canvas2D component](https://vulnsea.com/cve/CVE-2026-117866.md): Privilege escalation due to use-after-free in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6. (severity: none, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-117861 — Sandbox escape in the DOM: Navigation component](https://vulnsea.com/cve/CVE-2026-117861.md): Sandbox escape in the DOM: Navigation component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6. (severity: none, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-117865 — Use-after-free in the JavaScript: GC component](https://vulnsea.com/cve/CVE-2026-117865.md): Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6. (severity: none, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-117864 — Sandbox escape in the Form Manager component](https://vulnsea.com/cve/CVE-2026-117864.md): Sandbox escape in the Form Manager component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6. (severity: none, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-117504 — a2aproject a2a-go Distributed Manager distributed_manager.go Cancel denial of service](https://vulnsea.com/cve/CVE-2026-117504.md): A vulnerability was identified in a2aproject a2a-go up to 2.4.0. The affected element is the function Cancel of the file internal/taskexec/distributed_manager.go of the component Distributed Manager. Such manipulation leads to denial of … (severity: medium, CVSS 5.3, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-117860 — Same-origin policy bypass in the DOM: Navigation component](https://vulnsea.com/cve/CVE-2026-117860.md): Same-origin policy bypass in the DOM: Navigation component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6. (severity: none, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-90725 — Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, conta…](https://vulnsea.com/cve/CVE-2026-90725.md): Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, conta… (severity: medium, CVSS 4.9, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-107067 — An issue in Shirt Pocket's SuperDuper! 4.0.9 and earlier allow a local attacker to obtain sensitive information](https://vulnsea.com/cve/CVE-2026-107067.md): An issue in Shirt Pocket's SuperDuper! 4.0.9 and earlier allow a local attacker to obtain sensitive information (severity: none, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-68866 — PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.0 through 7.13.1.70, LTS2025 release versions 8.3.1.0 through 8.3.1.30, LTS2026 release versions 8.6.1.0 through 8.6.1.10, contain a …](https://vulnsea.com/cve/CVE-2026-68866.md): PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.0 through 7.13.1.70, LTS2025 release versions 8.3.1.0 through 8.3.1.30, LTS2026 release versions 8.6.1.0 through 8.6.1.10, contain a … (severity: medium, CVSS 6.5, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-117503 — a2aproject a2a-go REST SSE handler rest.go resource consumption](https://vulnsea.com/cve/CVE-2026-117503.md): A vulnerability was determined in a2aproject a2a-go up to 2.4.0. Impacted is an unknown function of the file a2asrv/rest.go of the component REST SSE handler. This manipulation causes resource consumption. It is possible to initiate the … (severity: medium, CVSS 5.3, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-90726 — Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, conta…](https://vulnsea.com/cve/CVE-2026-90726.md): Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, conta… (severity: medium, CVSS 6, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-90727 — Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, conta…](https://vulnsea.com/cve/CVE-2026-90727.md): Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, conta… (severity: low, CVSS 3.8, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-10537 — Remote unauthenticated information disclosure and denial of service due to unauthenticated service access](https://vulnsea.com/cve/CVE-2026-10537.md): A misconfiguration issue in the affected service in Control-M/Enterprise Manager and Control-M/Server may allow unauthenticated remote users to access certain service functionality, which could potentially result in information exposure … (severity: medium, CVSS 5.3, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-94347 — PowerProtect Data Domain Virtual Edition, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.0 through 7.13.1.70, LTS2025 release versions 8.3.1.0 through 8.3.1.30, LTS2026 release versions 8.6.1.0 through 8.6.…](https://vulnsea.com/cve/CVE-2026-94347.md): PowerProtect Data Domain Virtual Edition, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.0 through 7.13.1.70, LTS2025 release versions 8.3.1.0 through 8.3.1.30, LTS2026 release versions 8.6.1.0 through 8.6.… (severity: high, CVSS 7.2, depth: twilight, published Oct 27, 2026)
- [CVE-2026-94346 — PowerProtect Data Domain Virtual Edition, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.0 through 7.13.1.70, LTS2025 release versions 8.3.1.0 through 8.3.1.30, LTS2026 release versions 8.6.1.0 through 8.6.…](https://vulnsea.com/cve/CVE-2026-94346.md): PowerProtect Data Domain Virtual Edition, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.0 through 7.13.1.70, LTS2025 release versions 8.3.1.0 through 8.3.1.30, LTS2026 release versions 8.6.1.0 through 8.6.… (severity: high, CVSS 7.2, depth: twilight, published Oct 27, 2026)
- [CVE-2026-16307 — IDOR in Netiket Information Technologies' EdoWEB](https://vulnsea.com/cve/CVE-2026-16307.md): Authorization bypass through User-Controlled key vulnerability in Netiket Information Technologies EdoWEB allows Accessing Functionality Not Properly Constrained by ACLs.

This issue affects EdoWEB: before 780-g7. (severity: medium, CVSS 4.3, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-12887 — In affected versions of Octopus Server, a user with permission to upload a malicious nuget package is able to deploy a script step so the script executes outside of the parent directory.](https://vulnsea.com/cve/CVE-2026-12887.md): In affected versions of Octopus Server, a user with permission to upload a malicious nuget package is able to deploy a script step so the script executes outside of the parent directory. (severity: medium, CVSS 5.1, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-117602 — Electrum before 4.7.2 External Plugin Authorization Bypass Local Code Execution](https://vulnsea.com/cve/CVE-2026-117602.md): Electrum 4.6.0 before 4.7.2 contains an authorization bypass in the external plugin loader, which executes a plugin's __init__.py module when the plugin is marked enabled in the config file, without verifying its plugin-password signatur… (severity: high, CVSS 8.4, depth: twilight, published Oct 27, 2026)
- [CVE-2026-117573 — hagent through commit 761eec6 OS Command Injection via Arduino and ESP32 MCP Tools](https://vulnsea.com/cve/CVE-2026-117573.md): hagent through commit 761eec6 contains an OS command injection vulnerability that allows MCP clients to execute shell commands by injecting metacharacters into the args parameter of the hagent_arduino and hagent_esp32 tools. Attackers or… (severity: high, CVSS 7.8, depth: twilight, published Oct 27, 2026)
- [CVE-2026-117603 — Electrum before 4.7.2 Nostr Wallet Connect Plugin Daily Spending Limit Bypass](https://vulnsea.com/cve/CVE-2026-117603.md): Electrum before 4.7.2 contains a spending limit bypass vulnerability in the Nostr Wallet Connect plugin that allows malicious NWC clients to exceed daily_limit_sat by exploiting non-atomic budget checks and millisatoshi truncation. Attac… (severity: medium, CVSS 4.3, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-117569 — Kali-GPT through commit a608c74 OS Command Injection via MCP Scanner Tool Parameters](https://vulnsea.com/cve/CVE-2026-117569.md): Kali-GPT through commit a608c74 contains an OS command injection vulnerability in execute_tool() in kali_gpt/tools/mcp_server.py that allows MCP clients to run commands via unsanitized scanner parameters. Attackers or prompt-injected age… (severity: high, CVSS 7.8, depth: twilight, published Oct 27, 2026)
- [CVE-2026-117601 — Electrum before 4.8.3 Missing Signature Verification of Mempool Transactions](https://vulnsea.com/cve/CVE-2026-117601.md): Electrum before 4.8.3 fails to verify signatures of wallet-owned inputs in unconfirmed mempool transactions, allowing malicious servers to replace a just-broadcast transaction with a conflicting one. Attackers can swallow the user's tran… (severity: high, CVSS 7.5, depth: twilight, published Oct 27, 2026)
- [CVE-2026-117561 — sf-mcp through 1.3.2 OS Command Injection via Salesforce CLI Flag Values](https://vulnsea.com/cve/CVE-2026-117561.md): Codefriar sf-mcp through 1.3.2 contains an OS command injection vulnerability that allows attackers to execute shell commands by supplying crafted Salesforce CLI tool flag values. Because escapeValue() in src/utils.ts fails to neutralize… (severity: high, CVSS 7.8, depth: twilight, published Oct 27, 2026)
- [CVE-2026-117568 — mcp-ffmpeg through 1.0.5 OS Command Injection via videoPath and outputDir](https://vulnsea.com/cve/CVE-2026-117568.md): mcp-ffmpeg through 1.0.5 contains an OS command injection vulnerability that allows attackers to run shell commands by supplying crafted videoPath or outputDir values to the resize-video, extract-audio and get-video-info tools. Attackers… (severity: high, CVSS 7, depth: twilight, published Oct 27, 2026)
- [CVE-2026-117565 — Artalk before 2.10.1 Unauthenticated SSRF via Comment Page Title Fetch](https://vulnsea.com/cve/CVE-2026-117565.md): Artalk before 2.10.1 contains an unauthenticated server-side request forgery vulnerability that allows remote attackers to make the server fetch arbitrary URLs by submitting anonymous comments to /api/v2/comments. Attackers can set a pag… (severity: medium, CVSS 5.3, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-117567 — esp-mcp through commit 28afddf OS Command Injection via MCP Tool Parameters](https://vulnsea.com/cve/CVE-2026-117567.md): esp-mcp through commit 28afddf contains an OS command injection vulnerability that allows attackers to run arbitrary commands by supplying shell metacharacters in MCP tool parameters. Attackers influencing agent tool calls through prompt… (severity: high, CVSS 7.8, depth: twilight, published Oct 27, 2026)
- [CVE-2026-117566 — EasyImages2.0 through 2.8.6 Unauthenticated Path Traversal via down.php, thumb.php and info.php](https://vulnsea.com/cve/CVE-2026-117566.md): EasyImages2.0 through 2.8.6 contains an unauthenticated path traversal vulnerability in app/down.php, app/thumb.php and app/info.php that allows reading files outside the upload directory. Attackers can supply ../ sequences in the dw, hi… (severity: medium, CVSS 5.3, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-117570 — nmap-mcp through commit 3636afa Permissive NSE Script Allowlist in scan_vulnerabilities](https://vulnsea.com/cve/CVE-2026-117570.md): Vorota-ai nmap-mcp through commit 3636afa contains an improper allowlist validation vulnerability in the scan_vulnerabilities tool that lets callers run blocked NSE script categories. MCP clients or prompt-injected agents can pass catego… (severity: medium, CVSS 5.2, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-117563 — MrDoc through 1.1.1 Broken Access Control via manage_doc_share](https://vulnsea.com/cve/CVE-2026-117563.md): MrDoc through 1.1.1 contains a broken access control vulnerability in the manage_doc_share type 3 branch that allows authenticated users to modify other users' document share settings because updates lack an ownership check. Attackers ca… (severity: medium, CVSS 5.4, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-117560 — ATXP Gemini CLI Extension through 1.0.0 OS Command Injection via MCP Tools](https://vulnsea.com/cve/CVE-2026-117560.md): ATXP Gemini CLI extension through 1.0.0 contains an OS command injection vulnerability in runAtxp() that allows attackers to execute shell commands through unsanitized MCP tool parameters. Attackers can plant instructions in email or SMS… (severity: high, CVSS 7.8, depth: twilight, published Oct 27, 2026)
- [CVE-2026-117557 — SDL_image through 3.4.8 and 2.8.12 Stack Out-of-Bounds Read in ILBM Loader](https://vulnsea.com/cve/CVE-2026-117557.md): SDL_image through 3.4.8 and through 2.8.12 contains a stack out-of-bounds read vulnerability in IMG_LoadLBM_IO() in src/IMG_lbm.c that skips bitplane count validation when HAM mode is set. Attackers can supply a crafted ILBM file with mo… (severity: medium, CVSS 6.1, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-117556 — zchunk before 1.5.5 Heap Out-of-Bounds Read via read_preface()](https://vulnsea.com/cve/CVE-2026-117556.md): zchunk before 1.5.5 contains a heap out-of-bounds read vulnerability in read_preface() in src/lib/header.c that passes the total header length instead of remaining bytes to compint parsing functions. Attackers can supply a crafted .zck f… (severity: medium, CVSS 4.3, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-117562 — rssant 1.9.0 through 1.9.1 Information Disclosure via publish.story_get Endpoint](https://vulnsea.com/cve/CVE-2026-117562.md): rssant 1.9.0 through 1.9.1 contains an authorization bypass vulnerability that allows unauthenticated attackers to read stories from unpublished feeds through the anonymous publish.story_get endpoint. Because UnionStory.get_by_feed_offse… (severity: medium, CVSS 5.3, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-117553 — Umbraco CMS before 17.7.2 and 18.2.2 Account Takeover via Host Header Poisoning](https://vulnsea.com/cve/CVE-2026-117553.md): Umbraco CMS before 17.7.2 and 18.2.2 contains an authentication bypass vulnerability that allows unauthenticated attackers to register attacker-controlled OAuth redirect URIs by poisoning the Host header. Attackers send signed-in users a… (severity: high, CVSS 7.5, depth: twilight, published Oct 27, 2026)
- [CVE-2026-117559 — DroidMind through 0.4.0 Command Injection via Shell Allowlist Bypass](https://vulnsea.com/cve/CVE-2026-117559.md): DroidMind through 0.4.0 contains a command injection vulnerability that allows MCP clients to bypass the shell command allowlist by using $(...) or backtick substitution. Attackers, including prompt-injected agents, can inject commands t… (severity: high, CVSS 7.8, depth: twilight, published Oct 27, 2026)
- [CVE-2026-117558 — ai-sdlc MCP Server through 0.31.2 Command Injection via check_issue and check_pr_status](https://vulnsea.com/cve/CVE-2026-117558.md): The ai-sdlc plugin MCP server through 0.31.2 contains an OS command injection vulnerability that allows attackers to execute commands by supplying shell metacharacters in the repo argument. The unvalidated repo value is interpolated into… (severity: high, CVSS 7.8, depth: twilight, published Oct 27, 2026)
- [CVE-2026-117555 — GreycLab CImg through 4.0.6 Heap Out-of-Bounds Read via Integer Overflow in _load_bmp()](https://vulnsea.com/cve/CVE-2026-117555.md): CImg through 4.0.6 contains a heap out-of-bounds read vulnerability in the _load_bmp() function of CImg.h caused by an integer overflow in the row byte count. Attackers can supply a crafted BMP file with a large header width that wraps d… (severity: medium, CVSS 6.1, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-117554 — Admidio before 5.0.17 Event Guest Restriction Bypass via events_function.php](https://vulnsea.com/cve/CVE-2026-117554.md): Admidio before 5.0.17 contains an improper access control vulnerability that allows authenticated members to register event guests by submitting the additional_guests field when guests are disallowed. Attackers can set additional_guests … (severity: medium, CVSS 4.3, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-116627 — Improper neutralization of input during web page generation ('Cross-site Scripting') in the notifications feature in Devolutions PowerShell Universal 2026.3.0 and earlier allows an authenticated user with notification creation permission…](https://vulnsea.com/cve/CVE-2026-116627.md): Improper neutralization of input during web page generation ('Cross-site Scripting') in the notifications feature in Devolutions PowerShell Universal 2026.3.0 and earlier allows an authenticated user with notification creation permission… (severity: none, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-110737 — Push Endpoint Returns Permissive CORS Headers](https://vulnsea.com/cve/CVE-2026-110737.md): The push endpoint of a Vaadin application that uses server push reflects the request Origin into the Access-Control-Allow-Origin response header and allows credentials, because Flow configures Atmosphere with DROP_ACCESS_CONTROL_ALLOW_OR… (severity: low, CVSS 2.3, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-92546 — Authentication Bypass with X-Agentic-Ally-Token in Keepnet Labs Agentic AI / Agentic Ally](https://vulnsea.com/cve/CVE-2026-92546.md): Authentication bypass by spoofing vulnerability in Keepnet Labs Cybersecurity Inc. Agentic AI / Agentic Ally allows Authentication Bypass.

This issue affects Agentic AI / Agentic Ally: before 0ef61f2e. (severity: high, CVSS 7.5, depth: twilight, published Oct 27, 2026)
- [CVE-2026-114409 — Docker Desktop logs can expose stored third-party credentials](https://vulnsea.com/cve/CVE-2026-114409.md): Docker Desktop before version 4.97.0 could write third-party API keys and OAuth access tokens in cleartext to local application logs and diagnostics bundles due to insufficient IPC payload redaction. An attacker with read access to these… (severity: medium, CVSS 5.7, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-15586 — OTP Brute-Force Account Takeover in Idvlabs Software's Ontime](https://vulnsea.com/cve/CVE-2026-15586.md): Improper restriction of excessive authentication attempts vulnerability in İdvlabs Software and Consulting Services Inc. Ontime allows Brute Force.

This issue affects Ontime: through 2026-10-27.
 NOTE: The vendor was contacted early abo… (severity: medium, CVSS 5.3, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-107590 — Out-of-bounds write vulnerability in QTextCodec iconv-based encoding impacts Qt](https://vulnsea.com/cve/CVE-2026-107590.md): An out-of-bounds write vulnerability in the Qt QTextCodec iconv-based encoding of the Qt 5 Compatibility APIs module (Qt Core in Qt 5 and earlier) impacts Qt. Under certain conditions, encoding text with QTextCodec may write outside an i… (severity: low, CVSS 1.9, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-47486 — NVIDIA PhysX for all platforms contains a vulnerability where an attacker could cause an out-of-bounds write](https://vulnsea.com/cve/CVE-2026-47486.md): NVIDIA PhysX for all platforms contains a vulnerability where an attacker could cause an out-of-bounds write. A successful exploit of this vulnerability might lead to code execution, data tampering, denial of service, information disclos… (severity: high, CVSS 7.8, depth: twilight, published Oct 27, 2026)
- [CVE-2026-65151 — NVIDIA NeMo Agent Toolkit contains vulnerability where an attacker could cause a SQL injection issue](https://vulnsea.com/cve/CVE-2026-65151.md): NVIDIA NeMo Agent Toolkit contains vulnerability where an attacker could cause a SQL injection issue. A successful exploit of this vulnerability might lead to data tampering, denial of service and information disclosure. (severity: high, CVSS 8.4, depth: twilight, published Oct 27, 2026)
- [CVE-2026-65119 — NVIDIA TensorRT-LLM for any platform contains a vulnerability in KvCacheAwareRouter tokenizer loading, where an attacker could cause inclusion of functionality from an untrusted control sphere](https://vulnsea.com/cve/CVE-2026-65119.md): NVIDIA TensorRT-LLM for any platform contains a vulnerability in KvCacheAwareRouter tokenizer loading, where an attacker could cause inclusion of functionality from an untrusted control sphere. A successful exploit might lead to code exe… (severity: high, CVSS 8.4, depth: twilight, published Oct 27, 2026)
- [CVE-2026-65120 — NVIDIA TensorRT-LLM contains a vulnerability where an attacker could cause a server-side request forgery](https://vulnsea.com/cve/CVE-2026-65120.md): NVIDIA TensorRT-LLM contains a vulnerability where an attacker could cause a server-side request forgery. A successful exploit of this vulnerability might lead to information disclosure. (severity: high, CVSS 7.1, depth: twilight, published Oct 27, 2026)
- [CVE-2026-24269 — NVIDIA TensorRT-LLM contains a vulnerability where an attacker could cause a server-side request forgery](https://vulnsea.com/cve/CVE-2026-24269.md): NVIDIA TensorRT-LLM contains a vulnerability where an attacker could cause a server-side request forgery. A successful exploit of this vulnerability might lead to information disclosure and data tampering. (severity: high, CVSS 7.1, depth: twilight, published Oct 27, 2026)
- [CVE-2026-10756 — TRO600 contains a vulnerability that allows an authenticated attacker to bypass network access restrictions and access services intended to be reachable only from localhost](https://vulnsea.com/cve/CVE-2026-10756.md): TRO600 contains a vulnerability that allows an authenticated attacker to bypass network access restrictions and access services intended to be reachable only from localhost. By leveraging port forwarding, an attacker can interact with lo… (severity: high, CVSS 7.7, depth: twilight, published Oct 27, 2026)
- [CVE-2026-115408 — ML-KEM key-pair lookup can bind an unrelated or attacker-planted public key, exposing encapsulated shared secrets](https://vulnsea.com/cve/CVE-2026-115408.md): In `github.com/eclipse-keypont/crypto11/v2` versions `>= 2.0.0-rc3, <= 2.0.0-rc8`, the ML-KEM key-pair lookup functions (`FindMLKEMKeyPair`, `FindMLKEMKeyPairs`, `FindMLKEMKeyPairsWithAttributes`) locate the public half of an ML-KEM key … (severity: medium, CVSS 5.5, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-100164 — User Enumeration in Rolantis Information Technologies' Agentis](https://vulnsea.com/cve/CVE-2026-100164.md): Observable response discrepancy vulnerability in Rolantis Information Technologies Tourism Industry and Trade Co. Ltd. Agentis allows Account Footprinting.

This issue affects Agentis: before 4.8. (severity: high, CVSS 7.5, depth: twilight, published Oct 27, 2026)
- [CVE-2026-113644 — iofogctl command injection via Controller provisioning response](https://vulnsea.com/cve/CVE-2026-113644.md): In Eclipse ioFog iofogctl versions 1.0.0 through 3.7.0 and 3.8.0-rc.1 through 3.9.1, the provisioning key and CA certificate returned by the Controller API are concatenated into shell commands (`edgelet provision` and `edgelet config cer… (severity: medium, CVSS 5.5, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-106087 — TRO600 contains an arbitrary file read vulnerability](https://vulnsea.com/cve/CVE-2026-106087.md): TRO600 contains an arbitrary file read vulnerability. An unauthenticated attacker can exploit this vulnerability to read or download arbitrary files on the affected device, including sensitive configuration files and password data, resul… (severity: high, CVSS 8.7, depth: twilight, published Oct 27, 2026)
- [CVE-2026-41022 — Eaton easySoft improperly validates TLS certificates presented by easyE4 devices](https://vulnsea.com/cve/CVE-2026-41022.md): Eaton easySoft improperly validates TLS certificates presented by easyE4 devices. A network-adjacent attacker could exploit this weakness to perform a man-in-the-middle attack and potentially intercept or modify communications between ea… (severity: medium, CVSS 5.9, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-13162 — An OS command vulnerability exists in CoreTec product that allows authenticated users with certain roles to execute arbitrary system commands with full control over the device](https://vulnsea.com/cve/CVE-2026-13162.md): An OS command vulnerability exists in CoreTec product that allows authenticated users with certain roles to execute arbitrary system commands with full control over the device. The vulnerability exists in the configuration daemon's time … (severity: high, CVSS 7.7, depth: twilight, published Oct 27, 2026)
- [CVE-2026-90731 — Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, conta…](https://vulnsea.com/cve/CVE-2026-90731.md): Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, conta… (severity: medium, CVSS 4.9, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-90728 — Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, conta…](https://vulnsea.com/cve/CVE-2026-90728.md): Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, conta… (severity: medium, CVSS 6.3, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-109995 — Advanced Views <= 3.9.6 - Unauthenticated Stored Cross-Site Scripting via Comment Content](https://vulnsea.com/cve/CVE-2026-109995.md): The Advanced Views – Display Framework for Gutenberg & Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'comment' parameter in all versions up to, and including, 3.9.6 due to insufficient input sanitiza… (severity: high, CVSS 7.2, depth: twilight, published Oct 27, 2026)
- [CVE-2026-105323 — Reflected XSS in Kulga Software's Kulga News Software](https://vulnsea.com/cve/CVE-2026-105323.md): Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Kulga Software and Telecommunications Limited Company Kulga News Software allows Reflected XSS.

This issue affects Kulga News Software… (severity: medium, CVSS 6.1, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-90729 — Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, conta…](https://vulnsea.com/cve/CVE-2026-90729.md): Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, conta… (severity: medium, CVSS 6.7, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-41021 — Eaton easyE4 uses an insufficiently strong password policy](https://vulnsea.com/cve/CVE-2026-41021.md): Eaton easyE4 uses an insufficiently strong password policy. An attacker who obtains a password hash, including through CVE-2026-41020, could perform an offline password-guessing attack and potentially recover user credentials. (severity: high, CVSS 7.5, depth: twilight, published Oct 27, 2026)
- [CVE-2026-117499 — @fastify/session vulnerable to session revocation bypass via a logout race condition](https://vulnsea.com/cve/CVE-2026-117499.md): @fastify/session is a session plugin for Fastify. In all releases before 11.1.6, with the default rolling session behavior, a request that restored a session before a logout could save its own copy after another request had completed the… (severity: low, CVSS 3.7, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-10752 — Advanced Custom Fields: Extended <= 0.9.2.6 - Missing Authorization to Unauthenticated Arbitrary Attachment Deletion via Email Action Dynamic File Field](https://vulnsea.com/cve/CVE-2026-10752.md): The Advanced Custom Fields: Extended plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 0.9.2.6. This is due to the plugin not properly verifying that a user is authorized to perform an actio… (severity: medium, CVSS 4.8, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-90732 — Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through LTS 2026, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, …](https://vulnsea.com/cve/CVE-2026-90732.md): Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through LTS 2026, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, … (severity: medium, CVSS 4.9, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-56084 — Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, conta…](https://vulnsea.com/cve/CVE-2026-56084.md): Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, conta… (severity: medium, CVSS 5.8, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-117538 — REDAXO before 5.21.0 Reflected XSS via Packages API function Parameter](https://vulnsea.com/cve/CVE-2026-117538.md): REDAXO before 5.21.0 contains a reflected cross-site scripting vulnerability in the backend packages API, where the function parameter is concatenated into an error message rendered without HTML escaping. Attackers can lure an authentica… (severity: medium, CVSS 4.1, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-102800 — Joomla Extension - dj-extensions.com - Unauthenticated Stored XSS in DJ-HelpfulArticles < 1.3.0](https://vulnsea.com/cve/CVE-2026-102800.md): Joomla Extension - dj-extensions.com - Unauthenticated Stored XSS in DJ-HelpfulArticles < 1.3.0 - The “was this article helpful” voting widget posts a client-supplied ip field to its AJAX handlers (getDeny, getConfirm, getDenyReason in m… (severity: high, CVSS 8.7, depth: twilight, published Oct 27, 2026)
- [CVE-2026-41020 — Eaton easyE4 uses a static nonce during authentication, which could allow an unauthenticated attacker with access to captured authentication traffic to replay a valid authentication exchange and gain unauthorized access to the device.](https://vulnsea.com/cve/CVE-2026-41020.md): Eaton easyE4 uses a static nonce during authentication, which could allow an unauthenticated attacker with access to captured authentication traffic to replay a valid authentication exchange and gain unauthorized access to the device. (severity: high, CVSS 7.5, depth: twilight, published Oct 27, 2026)
- [CVE-2026-4337 — Unrestricted Upload of File in PuMuKIT application](https://vulnsea.com/cve/CVE-2026-4337.md): Unrestricted Upload of File with Dangerous Type vulnerability in the PuMuKIT application allows a unauthenticated user to upload any type of file to the server, and to any path where the web server user has write permissions. This could … (severity: high, CVSS 8.8, depth: twilight, published Oct 27, 2026)
- [CVE-2026-117540 — svg-sanitizer before 1.1.0 Quadratic CPU-Exhaustion DoS via PHP-Tag Stripping Loop](https://vulnsea.com/cve/CVE-2026-117540.md): svg-sanitizer from 0.5.3 before 1.1.0 contains a denial of service vulnerability in Sanitizer::sanitize() that repeatedly rescans the whole input while stripping PHP tags. Unauthenticated attackers can upload SVGs with many overlapping P… (severity: high, CVSS 7.5, depth: twilight, published Oct 27, 2026)
- [CVE-2026-117539 — darylldoyle svg-sanitizer before 1.0.0 CSS Injection and Remote Reference Bypass](https://vulnsea.com/cve/CVE-2026-117539.md): darylldoyle svg-sanitizer before 1.0.0 contains CSS injection and remote reference bypass vulnerabilities that allow attackers to embed external resources by uploading crafted SVG files. Attackers can use unsanitized style content, unquo… (severity: low, CVSS 3.5, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-117536 — REDAXO before 5.21.3 CSRF Token Bypass via users/users Privilege Escalation](https://vulnsea.com/cve/CVE-2026-117536.md): REDAXO before 5.21.3 contains a cross-site request forgery vulnerability in the backend user administration page (users/users) because the CSRF token check only runs when the save parameter is set, while the update path triggered by FUNC… (severity: high, CVSS 8.8, depth: twilight, published Oct 27, 2026)
- [CVE-2026-117535 — REDAXO before 5.21.3 Reflected XSS via opener_link in Media Pool](https://vulnsea.com/cve/CVE-2026-117535.md): REDAXO before 5.21.3 contains a reflected cross-site scripting vulnerability in the backend media pool detail page, where the opener_link parameter is rendered without HTML escaping. Unauthenticated attackers can lure logged-in backend u… (severity: medium, CVSS 6.1, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-116900 — REDAXO before 5.21.4 Stored XSS via Media and Link Input Widgets](https://vulnsea.com/cve/CVE-2026-116900.md): REDAXO before 5.21.4 contains a stored cross-site scripting vulnerability that allows content editors to inject HTML by storing unescaped values rendered by media, medialist, link and linklist widgets. Attackers can submit crafted REX_IN… (severity: medium, CVSS 5.4, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-116870 — In affected versions of Octopus Server, OIDC token issuer validation was performed inconsistently](https://vulnsea.com/cve/CVE-2026-116870.md): In affected versions of Octopus Server, OIDC token issuer validation was performed inconsistently. This could result in a token issued from a suitably configured non legitimate issuer being accepted as a token belonging to a service acco… (severity: high, CVSS 8.7, depth: twilight, published Oct 27, 2026)
- [CVE-2026-117534 — REDAXO before 5.21.3 CSRF in Article History Plugin](https://vulnsea.com/cve/CVE-2026-117534.md): REDAXO before 5.21.3 contains a cross-site request forgery vulnerability in the structure/history plugin that allows attackers to delete history or roll back content via unvalidated GET requests. Attackers can lure logged-in backend user… (severity: medium, CVSS 5.4, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-117466 — In affected versions of Octopus Server, a user holding the System Manager role could escalate their privileges to full system Administrator.](https://vulnsea.com/cve/CVE-2026-117466.md): In affected versions of Octopus Server, a user holding the System Manager role could escalate their privileges to full system Administrator. (severity: high, CVSS 8.6, depth: twilight, published Oct 27, 2026)
- [CVE-2026-116899 — REDAXO before 5.21.4 Broken Access Control in Slice Operations](https://vulnsea.com/cve/CVE-2026-116899.md): REDAXO before 5.21.4 contains a broken access control vulnerability that allows authenticated editors to modify slices in unauthorized categories by pairing a permitted article with a foreign slice id. Attackers can abuse content/edit de… (severity: medium, CVSS 6.5, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-116893 — REDAXO core before 5.21.5 Missing Authorization in rex_api_package API](https://vulnsea.com/cve/CVE-2026-116893.md): REDAXO core before 5.21.5 contains a missing authorization vulnerability in the rex_api_package API function that lets non-admin backend users manage packages with only a valid CSRF token. Attackers holding a token, such as demoted admin… (severity: medium, CVSS 6.8, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-116891 — SemanticMediaWiki 4.2.0 before 7.2.1 Reflected XSS via Special:FacetedSearch cstate](https://vulnsea.com/cve/CVE-2026-116891.md): SemanticMediaWiki from 4.2.0 before 7.2.1 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject HTML via unescaped cstate parameters in Special:FacetedSearch. Attackers can craft URLs wit… (severity: medium, CVSS 6.1, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-116897 — REDAXO before 5.21.4 Missing Authorization in Version and History Previews](https://vulnsea.com/cve/CVE-2026-116897.md): REDAXO core before 5.21.4 contains a missing authorization vulnerability in the structure/version and structure/history frontend preview modes, which do not check category or clang permissions for the previewed article. Any backend user,… (severity: medium, CVSS 6.5, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-116892 — SemanticMediaWiki 3.1.0 before 7.3.1 Reflected XSS via Special:Search smw Profile](https://vulnsea.com/cve/CVE-2026-116892.md): SemanticMediaWiki from 3.1.0 before 7.3.1 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject markup through the search parameter of the extended Special:Search profile. Attackers can s… (severity: medium, CVSS 6.1, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-116896 — REDAXO before 5.21.5 Privilege Escalation via Backup Export of Authentication Tables](https://vulnsea.com/cve/CVE-2026-116896.md): REDAXO before 5.21.5 contains a missing authorization vulnerability in the backup addon export that accepts any database table, allowing non-admin users with the backup[export] permission to export rex_user, rex_user_session, and other a… (severity: high, CVSS 7.5, depth: twilight, published Oct 27, 2026)
- [CVE-2026-116895 — REDAXO before 5.21.5 CSRF via Safe Mode Toggle Parameter](https://vulnsea.com/cve/CVE-2026-116895.md): REDAXO before 5.21.5 contains a cross-site request forgery vulnerability because the backend processes the safemode GET parameter in index.php without validating a CSRF token. Attackers can lure a logged-in administrator into opening a c… (severity: medium, CVSS 5.4, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-116888 — SemanticMediaWiki 3.2.0 before 7.3.1 Stored XSS via Special:Browse Group Heading](https://vulnsea.com/cve/CVE-2026-116888.md): SemanticMediaWiki from 3.2.0 before 7.3.1 contains a stored cross-site scripting vulnerability that allows users with the smw-schemaedit right to inject markup through an unescaped property group schema canonical_name. Attackers can save… (severity: medium, CVSS 4.8, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-116883 — Semantic MediaWiki 3.1.0 before 7.3.1 Stored XSS via Schema Descriptions](https://vulnsea.com/cve/CVE-2026-116883.md): Semantic MediaWiki from 3.1.0 before 7.3.1 contains a stored cross-site scripting vulnerability that allows authenticated schema editors to inject HTML through schema descriptions. Attackers with the smw-schemaedit permission can save HT… (severity: medium, CVSS 4.8, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-117341 — In affected versions of Octopus Server, creating a user invitation writes the invitation code to the audit event log](https://vulnsea.com/cve/CVE-2026-117341.md): In affected versions of Octopus Server, creating a user invitation writes the invitation code to the audit event log. When the invitation is linked to a space, a user in that space with appropriate permissions could read the code from th… (severity: high, CVSS 7.7, depth: twilight, published Oct 27, 2026)
- [CVE-2026-116885 — Semantic MediaWiki before 7.3.1 Reflected XSS via Special:SMWAdmin id Parameter](https://vulnsea.com/cve/CVE-2026-116885.md): Semantic MediaWiki from 3.1.0 before 7.3.1 contains a reflected cross-site scripting vulnerability in the Special:SMWAdmin ID lookup that allows unauthenticated attackers to inject markup through the unescaped id parameter. Attackers can… (severity: medium, CVSS 6.1, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-116884 — SemanticMediaWiki 5.0.0 before 7.3.1 Stored XSS via Tooltip Module data-* Attributes](https://vulnsea.com/cve/CVE-2026-116884.md): SemanticMediaWiki from 5.0.0 before 7.3.1 contains a stored cross-site scripting vulnerability in ext.smw.tooltip.tippy.js that renders data-* attributes via innerHTML with allowHTML enabled. Editors can plant a .smw-highlighter span wit… (severity: medium, CVSS 6.1, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-116881 — Semantic MediaWiki 3.0.0 before 7.3.1 XSS via Property-Value Autocomplete](https://vulnsea.com/cve/CVE-2026-116881.md): Semantic MediaWiki from 3.0.0 before 7.3.1 contains a cross-site scripting vulnerability that allows attackers to inject markup by storing malicious semantic property values rendered unescaped in autocomplete suggestions. When another us… (severity: medium, CVSS 6.1, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-116889 — SemanticMediaWiki 2.5.0 before 7.3.1 Stored XSS via Special:Browse Code Property](https://vulnsea.com/cve/CVE-2026-116889.md): SemanticMediaWiki from 2.5.0 before 7.3.1 contains a stored cross-site scripting vulnerability that allows users with page-edit rights to inject script through Code-typed property values. Attackers can annotate a valid JSON value embeddi… (severity: medium, CVSS 6.1, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-116880 — Semantic MediaWiki 3.0.0 before 7.3.1 CSRF via Special:SMWAdmin Maintenance Actions](https://vulnsea.com/cve/CVE-2026-116880.md): Semantic MediaWiki from 3.0.0 before 7.3.1 contains a cross-site request forgery vulnerability in Special:SMWAdmin because it overwrites the wpEditToken with a freshly generated valid token. Attackers can lure an authenticated smw-admin … (severity: high, CVSS 7.1, depth: twilight, published Oct 27, 2026)
- [CVE-2026-116876 — Semantic MediaWiki 2.5.0 before 7.3.1 Missing Authorization via Is edit protected](https://vulnsea.com/cve/CVE-2026-116876.md): Semantic MediaWiki from 2.5.0 before 7.3.1 contains an improper authorization vulnerability that allows ordinary editors to permanently protect pages by adding an Is edit protected annotation. When $smwgEditProtectionRight is enabled, Ed… (severity: high, CVSS 7.1, depth: twilight, published Oct 27, 2026)
- [CVE-2026-116887 — Semantic MediaWiki 3.0.0 before 7.3.1 Stored XSS via Special:Browse Keyword Property](https://vulnsea.com/cve/CVE-2026-116887.md): Semantic MediaWiki from 3.0.0 before 7.3.1 contains a stored cross-site scripting vulnerability that allows users with page-edit rights to inject HTML through Keyword-typed property values rendered unescaped on Special:Browse. Attackers … (severity: medium, CVSS 5.4, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-116877 — Semantic MediaWiki 2.5.0 before 7.3.1 Resource Exhaustion via #set_recurring_event](https://vulnsea.com/cve/CVE-2026-116877.md): Semantic MediaWiki from 2.5.0 before 7.3.1 contains an uncontrolled resource consumption vulnerability that allows low-privilege editors to bypass smwgMaxNumRecurringEvents by supplying a large limit parameter. Attackers can save pages u… (severity: medium, CVSS 6.5, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-116879 — Semantic MediaWiki 7.3.0 before 7.3.1 Missing Authorization via smwtask Update Task](https://vulnsea.com/cve/CVE-2026-116879.md): Semantic MediaWiki from 7.3.0 before 7.3.1 contains a missing authorization vulnerability in the smwtask update task that allows users with edit rights to force semantic updates on arbitrary pages. Attackers can supply a serialized subje… (severity: medium, CVSS 5.4, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-116875 — SemanticMediaWiki 3.0.0 before 7.3.1 Reflected XSS via Special:Ask Separator Parameters](https://vulnsea.com/cve/CVE-2026-116875.md): SemanticMediaWiki from 3.0.0 before 7.3.1 contains a reflected cross-site scripting vulnerability in Special:Ask, which outputs separator parameters (sep, propsep, valuesep, delim, separator) without HTML escaping in list, category, DSV,… (severity: medium, CVSS 6.1, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-117530 — In JetBrains Junie CLI before 26.8.17 command execution was possible due to incomplete validation of allowlisted commands](https://vulnsea.com/cve/CVE-2026-117530.md): In JetBrains Junie CLI before 26.8.17 command execution was possible due to incomplete validation of allowlisted commands (severity: medium, CVSS 6.7, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-116871 — Semantic MediaWiki 3.0.0 before 7.3.1 Uncontrolled Recursion via Special:Ask](https://vulnsea.com/cve/CVE-2026-116871.md): Semantic MediaWiki 3.0.0 before 7.3.1 contains an uncontrolled recursion vulnerability in LegacyParser::getSubqueryDescription() that processes nested query tokens before depth limits apply. Unauthenticated attackers can submit deeply ne… (severity: high, CVSS 7.5, depth: twilight, published Oct 27, 2026)
- [CVE-2026-116872 — Semantic MediaWiki 3.0.0 before 7.3.1 Denial of Service via Special:Search Compact Filters](https://vulnsea.com/cve/CVE-2026-116872.md): Semantic MediaWiki from 3.0.0 before 7.3.1 contains an algorithmic complexity vulnerability in TermParser::normalize_compact_form() that allows unauthenticated attackers to cause quadratic CPU consumption. Attackers can submit long searc… (severity: high, CVSS 7.5, depth: twilight, published Oct 27, 2026)
- [CVE-2026-116873 — Semantic MediaWiki 7.3.0 Missing Authorization via smwtask API run-joblist and update](https://vulnsea.com/cve/CVE-2026-116873.md): Semantic MediaWiki from 7.3.0 before 7.3.1 contains a missing authorization vulnerability in the smwtask API module that allows unauthenticated attackers to run queued jobs and force store updates. Attackers can use the public anonymous … (severity: high, CVSS 7.3, depth: twilight, published Oct 27, 2026)
- [CVE-2026-111548 — A stack-based buffer overflow vulnerability exists in the web management interface of affected Moxa wireless device servers](https://vulnsea.com/cve/CVE-2026-111548.md): A stack-based buffer overflow vulnerability exists in the web management interface of affected Moxa wireless device servers. An authenticated remote attacker with low privileges could exploit insufficient bounds checking of user-supplied… (severity: medium, CVSS 5.3, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-82121 — Origin Validation Error Vulnerability in HiRDB](https://vulnsea.com/cve/CVE-2026-82121.md): Origin Validation Error Vulnerability in HiRDB.


This issue affects HiRDB Server Version 10: from 10-00 before 10-12-01; HiRDB Server Version 9: from 09-00 through 09-66-22; HiRDB Server with Additional Function Version 9: from 09-00 th… (severity: high, CVSS 7.5, depth: twilight, published Oct 27, 2026)
- [CVE-2026-106174 — A improper locking vulnerability in Fortinet FortiOS 8.0.0, FortiOS 7.6.4 through 7.6.6 may allow an unauthenticated attacker with network access to the device to cause a denial of service of the HTTPS management interface via crafted HT…](https://vulnsea.com/cve/CVE-2026-106174.md): A improper locking vulnerability in Fortinet FortiOS 8.0.0, FortiOS 7.6.4 through 7.6.6 may allow an unauthenticated attacker with network access to the device to cause a denial of service of the HTTPS management interface via crafted HT… (severity: medium, CVSS 6.7, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-85299 — Missing Authorization in Compute Engine allows Cross-Project Disk Exfiltration](https://vulnsea.com/cve/CVE-2026-85299.md): A Missing Authorization vulnerability in the disks.createSnapshot and regionDisks.createSnapshot APIs in Google Compute Engine versions prior to 2026-08-31 on Google Cloud Platform allows an authenticated attacker to exfiltrate cross-pro… (severity: high, CVSS 8.3, depth: twilight, published Oct 27, 2026)
- [CVE-2026-65211 — Supermicro BMC IPMI  feature contains Critical Privilege Escalation and Arbitrary Access vulnerability](https://vulnsea.com/cve/CVE-2026-65211.md): This issue may allow an authenticated IPMI Administrator to read and write arbitrary BMC physical memory and thereby execute code on the BMC operating system. (severity: high, CVSS 7.2, depth: twilight, published Oct 27, 2026)
- [CVE-2026-65219 — Supermicro BMC contains Unordered RAKP Message 3 Grants an IPMI Session vulnerability](https://vulnsea.com/cve/CVE-2026-65219.md): A flaw in the BMC RAKP+ implementation may allow an attacker to send a request followed by a specially crafted RAKP message and establish an RMCP+ session, which could then be used to execute commands. (severity: high, CVSS 7.4, depth: twilight, published Oct 27, 2026)
- [CVE-2026-65213 — Supermicro BMC IPMI feature contains a Arbitrary Command Execution with Superuser Privileges vulnerability](https://vulnsea.com/cve/CVE-2026-65213.md): This issue may allow an IPMI authenticated administrator to execute commands as the operating system root user on the BMC (severity: medium, CVSS 6.6, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-107147 — Authentication bypass by spoofing in twofactor_gauthenticator](https://vulnsea.com/cve/CVE-2026-107147.md): The twofactor_gauthenticator plugin for Roundcube is vulnerable to 2fa authentication bypass by spoofed client address headers. Due to the lack of validation of the Client-IP and X-Forwarded-For headers, an attacker who obtains user's pa… (severity: medium, CVSS 6.3, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-107146 — Insufficient session expiration in twofactor_gauthenticator](https://vulnsea.com/cve/CVE-2026-107146.md): The twofactor_gauthenticator plugin for Roundcube is vulnerable to session persistence after failed 2FA verification. Due to the lack of server-side session destruction, an attacker can ignore the logout redirect and keep the session ali… (severity: medium, CVSS 6.3, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-65210 — Supermicro BMC IPMI feature contains Arbitrary File Access vulnerability](https://vulnsea.com/cve/CVE-2026-65210.md): This issue may allow an authenticated IPMI Administrator to read arbitrary files from the BMC filesystem, disclosing material well beyond the intended IPMI management role. (severity: medium, CVSS 4.9, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-107145 — Lack of rate-limiting in 2fa code check mechanism in twofactor_gauthenticator](https://vulnsea.com/cve/CVE-2026-107145.md): The twofactor_gauthenticator plugin for Roundcube is vulnerable to brute-forcing of the second-factor code. Due to the lack of rate limiting, an attacker who obtains user's password can submit arbitrary 6-digit codes, resulting in second… (severity: medium, CVSS 6.3, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-117493 — Multiple vulnerabilities in Sisense’s Cloud BI Platform](https://vulnsea.com/cve/CVE-2026-117493.md): Stored cross-site scripting (XSS) in BloX widgets. The /api/dashboards/<id>/widgets/<id> API accepts HTML and JavaScript content in the ‘desc’ and ‘text’ parameters. The code entered is executed in the browser when the widget is rendered… (severity: high, CVSS 8.3, depth: twilight, published Oct 27, 2026)
- [CVE-2026-102787 — Joomla Extension - phoca.cz - CSRF in category management in Phoca Download 3.1.0 - 6.1.5](https://vulnsea.com/cve/CVE-2026-102787.md): Joomla Extension - phoca.cz - CSRF in category management in Phoca Download 3.1.0 - 6.1.5 (severity: medium, CVSS 5.3, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-117494 — Multiple vulnerabilities in Sisense’s Cloud BI Platform](https://vulnsea.com/cve/CVE-2026-117494.md): Cross-Site Scripting (XSS) in the processing of SVG images submitted to the /api/v2/ai/sessions API in the format data:image/svg+xml;base64. Script tags embedded in the SVG are processed when the content is rendered in the assistant wind… (severity: high, CVSS 8.3, depth: twilight, published Oct 27, 2026)
- [CVE-2026-18451 — Supermicro BMC's iKVM feature is vulnerable to KVM session hijacking due to a predictable time-seeded launch token](https://vulnsea.com/cve/CVE-2026-18451.md): The HTML5 KVM-over-IP console authenticates with a token returned by the web interface. Weaknesses in token generation may allow an attacker to guess the session token and take control of the KVM session. (severity: low, CVSS 3.1, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-16521 — Supermicro BMC's syslog feature contains a command injection vulnerability](https://vulnsea.com/cve/CVE-2026-16521.md): An OS command injection vulnerability exists because of insufficient input filtering. An attacker can inject a command payload into a BMC function; the payload may execute when the related service is restarted. (severity: high, CVSS 7.2, depth: twilight, published Oct 27, 2026)
- [CVE-2026-18449 — Supermicro BMC contains a SMCRAKP Fixed Key vulnerability](https://vulnsea.com/cve/CVE-2026-18449.md): The BMC does not correctly enforce integrity and encryption requirements for IPMI commands. An attacker may be able to craft packets that execute arbitrary commands on an active session. (severity: high, CVSS 7.5, depth: twilight, published Oct 27, 2026)
- [CVE-2026-65220 — Supermicro BMC IPMI feature contains a Privilege escalation vulnerability](https://vulnsea.com/cve/CVE-2026-65220.md): A logic flaw in the BMC IPMI implementation may allow an attacker to send specially crafted RAKP+ messages and escalate an account to administrator privileges. (severity: high, CVSS 8.8, depth: twilight, published Oct 27, 2026)
- [CVE-2026-10511 — Jupiter X Core <= 4.61.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'forget_password_link' Parameter](https://vulnsea.com/cve/CVE-2026-10511.md): The Jupiter X Core plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'forget_password_link' parameter in all versions up to, and including, 4.61.0 due to insufficient input sanitization and output escaping. This m… (severity: medium, CVSS 6.4, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-107472 — Out-of-bounds read vulnerability in QTextCodec TSCII encoding impacts Qt](https://vulnsea.com/cve/CVE-2026-107472.md): An out-of-bounds read vulnerability in the QTextCodec TSCII encoding of the Qt 5 Compatibility APIs module (Qt Core in Qt 5 and earlier) impacts Qt. Applications that convert text to the TSCII encoding through QTextCodec may read memory … (severity: medium, CVSS 4.3, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-101034 — Security Advisory for offline recovery of Symantec GSS 3.3 RU11 stored domain credentials](https://vulnsea.com/cve/CVE-2026-101034.md): An attacker who obtained the hardcoded key could decrypt domain/service account passwords, task run-as credentials, and sysprep passwords stored in or transmitted by GSS Deployment Server installation. (severity: medium, CVSS 6.8, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-110910 — qs.stringify with allowEmptyArrays does not encode the keys of empty arrays, allowing query string parameter injection](https://vulnsea.com/cve/CVE-2026-110910.md): ### Summary



`qs.stringify` with `allowEmptyArrays: true` writes the key of an empty array without encoding it, even though keys are encoded by default. A key that contains `&` (or the configured `delimiter`), `=`, or `#` ∴ becomes que… (severity: low, CVSS 3.7, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-111461 — SMS upgrade argument reaches system() unescaped in OnCell G3150A-LTE Series](https://vulnsea.com/cve/CVE-2026-111461.md): An OS command injection vulnerability exists in OnCell G3150A-LTE Series. When the SMS management functionality is enabled and configured, a remote attacker with the required privileges could exploit insufficient input validation in the … (severity: high, CVSS 7.5, depth: twilight, published Oct 27, 2026)
- [CVE-2026-111460 — Static HTTPS private key and CA private key in firmware in OnCell G3150A-LTE Series](https://vulnsea.com/cve/CVE-2026-111460.md): A hard-coded cryptographic key vulnerability exists in the OnCell G3150A-LTE Series. Under certain conditions, an unauthenticated remote attacker could obtain shared cryptographic key material and use it to impersonate affected devices t… (severity: high, CVSS 7.7, depth: twilight, published Oct 27, 2026)
- [CVE-2026-111459 — Unauthenticated server-supplied OpenVPN configuration in Moxa Remote Connect Suite (MRC Client)](https://vulnsea.com/cve/CVE-2026-111459.md): An improper certificate validation vulnerability exists in Moxa Remote Connect Suite (MRC Client). Under certain conditions, an unauthenticated attacker with on-path access to the communication between the MRC Client and its server could… (severity: high, CVSS 7.6, depth: twilight, published Oct 27, 2026)
- [CVE-2026-105946 — Out-of-bounds read vulnerability in NTLM authentication handling impacts Qt](https://vulnsea.com/cve/CVE-2026-105946.md): Out-of-bounds read in the QAuthenticator NTLM authentication handling in the Qt Network module in Qt Group Qt allows remote attackers to obtain sensitive information (heap memory contents) or cause a denial of service (application crash)… (severity: medium, CVSS 5.3, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-103325 — TiendaCrypto para WooCommerce 1.0.1 - 1.2.1 - Unauthenticated Order Payment Forgery via Webhook HMAC Bypass](https://vulnsea.com/cve/CVE-2026-103325.md): The TiendaCrypto para WooCommerce WordPress plugin through 1.2.1 does not correctly verify the authenticity of its payment webhook, validating the request signature against a key that is always empty, which allows unauthenticated attacke… (severity: low, CVSS 3.7, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-75891 — Kirki <= 6.2.5 - Authenticated (Subscriber+) PHP Object Injection to Administrator Account Takeover via 'get-single-symbol' AJAX Endpoint](https://vulnsea.com/cve/CVE-2026-75891.md): The Kirki plugin for WordPress is vulnerable to Privilege Escalation via PHP Object Injection in all versions up to, and including, 6.2.5 via deserialization of untrusted input through the 'get-single-symbol' branch of the kirki_post_api… (severity: high, CVSS 8.8, depth: twilight, published Oct 27, 2026)
- [CVE-2026-103359 — PayDunya WooCommerce Payment Gateway 1.1.6 - Unauthenticated Order Payment Completion via Webhook Forgery](https://vulnsea.com/cve/CVE-2026-103359.md): The PayDunya WooCommerce Payment Gateway WordPress plugin through 1.1.6 does not verify the authenticity of incoming payment notifications and, until the gateway is configured, authenticates them with a value derived from an empty secret… (severity: medium, CVSS 5.3, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-117468 — Device-code claim permits restricted token escalation in Psono Server](https://vulnsea.com/cve/CVE-2026-117468.md): Psono Server versions 5.3.5 through 7.2.3 used a permission class that did not enforce token write scope when claiming a device code. An authenticated remote attacker holding a restricted API key-derived session could claim an attacker-c… (severity: medium, CVSS 6.5, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-103332 — Payex Payment Gateway for WooCommerce <= 1.2.10 - Unauthenticated Payment Confirmation Forgery via Empty-Default Secret Key](https://vulnsea.com/cve/CVE-2026-103332.md): The Payex Payment Gateway for Woocommerce WordPress plugin through 1.2.10 does not properly verify the authenticity of incoming payment notifications, relying on a validation secret that is empty by default, allowing unauthenticated atta… (severity: none, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-103312 — Payment Integration Wompi <= 4.0.1 - Unauthenticated Payment Confirmation Forgery via IPN Callback](https://vulnsea.com/cve/CVE-2026-103312.md): The Payment Integration Wompi WordPress plugin through 4.0.1 does not verify the authenticity of incoming payment notifications on a stock install, because the callback's checksum is keyed on a merchant secret that is empty until it is m… (severity: none, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-117472 — URL prefix handling permits API key read-scope bypass in Psono Server](https://vulnsea.com/cve/CVE-2026-117472.md): Psono Server CE && EE versions 4.0.33 through 7.2.3 compared the request path for the bulk-secret-read endpoint with a hard-coded unprefixed path. In deployments configured with URL_PREFIX, the comparison failed and the POST request was … (severity: medium, CVSS 4.3, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-117470 — WebAuthn assertion replay permits second-factor bypass in Psono Server](https://vulnsea.com/cve/CVE-2026-117470.md): Psono Server CE & EE versions 3.1.0 through 7.2.3 did not consume a stored WebAuthn challenge after assertion verification. An unauthenticated remote attacker who possessed the user's password and one captured valid WebAuthn assertion co… (severity: medium, CVSS 6.5, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-117471 — User-controlled Duo host permits authenticated SSRF in Psono Server](https://vulnsea.com/cve/CVE-2026-117471.md): Psono Server CE && EE versions 0.1.0 through 7.2.3 accepted a user-controlled host when configuring a personal Duo device and passed it to the Duo client without an allowlist or explicit timeout. An authenticated remote attacker could ca… (severity: medium, CVSS 5.4, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-117469 — File-transfer type confusion permits unauthorized repository writes in Psono Server](https://vulnsea.com/cve/CVE-2026-117469.md): Psono Server (CE & EE) versions 1.0.0 through 7.2.3 did not enforce the direction of file-transfer credentials on file-repository operations. An authenticated remote attacker with read-only access to a file could present a download trans… (severity: medium, CVSS 5.4, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-111820 — Analytics Insights <= 6.3.12 - Unauthenticated Stored Cross-Site Scripting via GA4 Realtime Page Title](https://vulnsea.com/cve/CVE-2026-111820.md): The Analytics Insights – Google Analytics Dashboard for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Page Title in all versions up to, and including, 6.3.12 due to insufficient input sanitization an… (severity: high, CVSS 7.2, depth: twilight, published Oct 27, 2026)
- [CVE-2026-88781 — Untrusted Pointer Dereference in ASUS certain motherboards firmware allows a kernel-level privileges user can supply an arbitrary memory address via an I/O command, leading to subsequent system information being tampered with or causing …](https://vulnsea.com/cve/CVE-2026-88781.md): Untrusted Pointer Dereference in ASUS certain motherboards firmware allows a kernel-level privileges user can supply an arbitrary memory address via an I/O command, leading to subsequent system information being tampered with or causing … (severity: medium, CVSS 6.8, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-116639 — MD-MAFUJUL-HASAN Online-Payroll-Management-System chat.php cross site scripting](https://vulnsea.com/cve/CVE-2026-116639.md): A vulnerability was detected in MD-MAFUJUL-HASAN Online-Payroll-Management-System up to a8902bf64575e325f6d6bf93a55f7bd273ec58cd. Affected is an unknown function of the file chat.php. Performing a manipulation of the argument ID results … (severity: low, CVSS 3.5, depth: sunlit, published Oct 27, 2026)
- [CVE-2026-116838 — A malicious actor who lures an authenticated user to a malicious page could exploit a Cross-Site Request Forgery (CSRF) vulnerability found in airMAX M devices to execute a Command Injection on the device.](https://vulnsea.com/cve/CVE-2026-116838.md): A malicious actor who lures an authenticated user to a malicious page could exploit a Cross-Site Request Forgery (CSRF) vulnerability found in airMAX M devices to execute a Command Injection on the device. (severity: high, CVSS 8.8, depth: twilight, published Oct 27, 2026)
- [CVE-2026-116839 — A malicious actor who lures an authenticated user to a malicious page could exploit a Cross-Site Request Forgery (CSRF) vulnerability found in airMAX M devices to make unauthorized changes and execute a Denial of Service (DoS) attack on …](https://vulnsea.com/cve/CVE-2026-116839.md): A malicious actor who lures an authenticated user to a malicious page could exploit a Cross-Site Request Forgery (CSRF) vulnerability found in airMAX M devices to make unauthorized changes and execute a Denial of Service (DoS) attack on … (severity: high, CVSS 7.1, depth: twilight, published Oct 27, 2026)
- [CVE-2026-116623 — code-projects Simple Content Management System Admin welcome.php authorization](https://vulnsea.com/cve/CVE-2026-116623.md): A vulnerability was detected in code-projects Simple Content Management System 1.0. Impacted is an unknown function of the file /web/admin/welcome.php of the component Admin Interface. The manipulation of the argument addnews results in … (severity: high, CVSS 7.3, depth: twilight, published Oct 27, 2026)
- [CVE-2026-116837 — A malicious actor with access to the adjacent network could exploit a Heap-based Buffer Overflow vulnerability found in airMAX M, LTU, SolarPoint, and SolarSwitch devices to execute arbitrary code on the device.](https://vulnsea.com/cve/CVE-2026-116837.md): A malicious actor with access to the adjacent network could exploit a Heap-based Buffer Overflow vulnerability found in airMAX M, LTU, SolarPoint, and SolarSwitch devices to execute arbitrary code on the device. (severity: high, CVSS 8.8, depth: twilight, published Oct 27, 2026)
- [CVE-2026-116843 — Mistral Vibe before 3.0.3 RCE via Git Filter Drivers in Worktree Mode](https://vulnsea.com/cve/CVE-2026-116843.md): Mistral Vibe before 3.0.3 contains a remote code execution vulnerability that allows attackers to run commands by defining git filter drivers in an untrusted repository's .git/config. When started with --worktree, git worktree add applie… (severity: high, CVSS 8.8, depth: twilight, published Oct 27, 2026)