🔴 CVE Digest — 29 Oct 2026
1 critical vulnerability
🔴 CVE-2026-109516 · CVSS 9.8
The Bot for Telegram on WooCommerce plugin for WordPress is vulnerable to Authentication Bypass leading to Account...
#CVE #Critical #Vulnerability
1 critical vulnerability
🔴 CVE-2026-109516 · CVSS 9.8
The Bot for Telegram on WooCommerce plugin for WordPress is vulnerable to Authentication Bypass leading to Account...
#CVE #Critical #Vulnerability
cvefeed.io
CVE-2026-109516 - Bot for Telegram on WooCommerce <= 1.3.0 - Unauthenticated Authentication Bypass to Account Takeover via Fake…
The Bot for Telegram on WooCommerce plugin for WordPress is vulnerable to Authentication Bypass leading to Account Takeover in all versions up to, and including, 1.3.0. The `/wp-json/woo-telegram/v1/main/` REST endpoint is registered with `permission_callback…
🔴 CVE Digest — 29 Oct 2026
1 critical vulnerability
🔴 CVE-2026-114358 · CVSS 9.3
This
vulnerability exists in the Radius
Xenia M2M Platform due to insufficient validation of user supplied input in
the...
#CVE #Critical #Vulnerability
1 critical vulnerability
🔴 CVE-2026-114358 · CVSS 9.3
This
vulnerability exists in the Radius
Xenia M2M Platform due to insufficient validation of user supplied input in
the...
#CVE #Critical #Vulnerability
cvefeed.io
CVE-2026-114358 - SQL Injection Vulnerability in Radius Xenia M2M Platform
This vulnerability exists in the Radius Xenia M2M Platform due to insufficient validation of user supplied input in the password recovery functionality in the web management interface. An unauthenticated remote attacker could exploit this vulnerability by…
🔴 CVE Digest — 29 Oct 2026
6 critical vulnerabilities
🔴 CVE-2026-97854 · CVSS 9.8
Yamaha wireless LAN router NWR100 provided by Yamaha Corporation contains an OS command injection vulnerability....
🔴 CVE-2026-115964 · CVSS 9.3
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in StylemixThemes...
🔴 CVE-2026-115245 · CVSS 9.8
The Chat AI with Dispatcher WordPress plugin before 2.4 does not properly validate uploaded files, relying only on a...
🔴 CVE-2026-113617 · CVSS 9.9
The Automated Import Products to Cart WordPress plugin before 1.0.4 does not sanitize a user-supplied file path before...
🔴 CVE-2026-113616 · CVSS 9.8
The LogixFast Auth WordPress plugin before 1.0.4 does not deliver its password-reset one-time code to the resolved...
🔴 CVE-2026-103693 · CVSS 9.0
The Frontend Dashboard WordPress plugin before 3.0.5, ProfileGrid WordPress plugin before 6.0.0.5 do not prevent an...
#CVE #Critical #Vulnerability
6 critical vulnerabilities
🔴 CVE-2026-97854 · CVSS 9.8
Yamaha wireless LAN router NWR100 provided by Yamaha Corporation contains an OS command injection vulnerability....
🔴 CVE-2026-115964 · CVSS 9.3
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in StylemixThemes...
🔴 CVE-2026-115245 · CVSS 9.8
The Chat AI with Dispatcher WordPress plugin before 2.4 does not properly validate uploaded files, relying only on a...
🔴 CVE-2026-113617 · CVSS 9.9
The Automated Import Products to Cart WordPress plugin before 1.0.4 does not sanitize a user-supplied file path before...
🔴 CVE-2026-113616 · CVSS 9.8
The LogixFast Auth WordPress plugin before 1.0.4 does not deliver its password-reset one-time code to the resolved...
🔴 CVE-2026-103693 · CVSS 9.0
The Frontend Dashboard WordPress plugin before 3.0.5, ProfileGrid WordPress plugin before 6.0.0.5 do not prevent an...
#CVE #Critical #Vulnerability
cvefeed.io
CVE-2026-97854 - Yamaha Wireless LAN Router OS Command Injection Vulnerability
Yamaha wireless LAN router NWR100 provided by Yamaha Corporation contains an OS command injection vulnerability. Arbitrary OS commands may be executed by sending a specially crafted request to the affected product.
🔴 CVE Digest — 29 Oct 2026
10 critical vulnerabilities
🔴 CVE-2026-90868 · CVSS 9.9
An OS command injection vulnerability in Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.0.4 on...
🔴 CVE-2026-90866 · CVSS 9.1
A path traversal vulnerability in Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows...
🔴 CVE-2026-90865 · CVSS 9.0
An OS command injection vulnerability in Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.0.4 on...
🔴 CVE-2026-90864 · CVSS 9.1
A path traversal vulnerability in Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows...
🔴 CVE-2026-90863 · CVSS 9.1
Missing authorization in the administrative interface of Progress Software WS_FTP Server versions prior to 2024.0.7 and...
🔴 CVE-2026-84295 · CVSS 10.0
Improper authentication in Progress Software WS_FTP Server versions prior to 2024.0.6 and 2025.0.3 on Windows could...
🔴 CVE-2026-111732 · CVSS 9.3
P-Net before 1.0.3, when built with PNET_OPTION_AR_VENDOR_BLOCKS enabled, parses a data length from a field of the...
🔴 CVE-2026-112256 · CVSS 9.2
Acceptance of extraneous untrusted data with trusted data vulnerability in OpenText Advanced Authentication Server...
🔴 CVE-2026-62131 · CVSS 9.8
Unauthenticated PHP Object Injection in Zoho Flow
🔴 CVE-2026-62018 · CVSS 9.8
Unauthenticated PHP Object Injection in Gunslinger
#CVE #Critical #Vulnerability
10 critical vulnerabilities
🔴 CVE-2026-90868 · CVSS 9.9
An OS command injection vulnerability in Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.0.4 on...
🔴 CVE-2026-90866 · CVSS 9.1
A path traversal vulnerability in Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows...
🔴 CVE-2026-90865 · CVSS 9.0
An OS command injection vulnerability in Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.0.4 on...
🔴 CVE-2026-90864 · CVSS 9.1
A path traversal vulnerability in Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows...
🔴 CVE-2026-90863 · CVSS 9.1
Missing authorization in the administrative interface of Progress Software WS_FTP Server versions prior to 2024.0.7 and...
🔴 CVE-2026-84295 · CVSS 10.0
Improper authentication in Progress Software WS_FTP Server versions prior to 2024.0.6 and 2025.0.3 on Windows could...
🔴 CVE-2026-111732 · CVSS 9.3
P-Net before 1.0.3, when built with PNET_OPTION_AR_VENDOR_BLOCKS enabled, parses a data length from a field of the...
🔴 CVE-2026-112256 · CVSS 9.2
Acceptance of extraneous untrusted data with trusted data vulnerability in OpenText Advanced Authentication Server...
🔴 CVE-2026-62131 · CVSS 9.8
Unauthenticated PHP Object Injection in Zoho Flow
🔴 CVE-2026-62018 · CVSS 9.8
Unauthenticated PHP Object Injection in Gunslinger
#CVE #Critical #Vulnerability
cvefeed.io
CVE-2026-90868 - OS Command Injection in Progress WS_FTP Server
An OS command injection vulnerability in Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows could allow arbitrary command execution under certain configurations.
🔴 CVE Digest — 29 Oct 2026
3 critical vulnerabilities
🔴 CVE-2026-118762 · CVSS 9.3
Monkeytype is a minimalistic and customizable typing test. Prior to 26.43.0, the .github/workflows/fix-formatting.yml...
🔴 CVE-2026-93680 · CVSS 9.8
IBM Langflow OSS 1.0.0 through 1.12.8 could allow a remote attacker to bypass security restrictions due to improper...
🔴 CVE-2026-62017 · CVSS 9.8
Unauthenticated PHP Object Injection in Good Homes
#CVE #Critical #Vulnerability
3 critical vulnerabilities
🔴 CVE-2026-118762 · CVSS 9.3
Monkeytype is a minimalistic and customizable typing test. Prior to 26.43.0, the .github/workflows/fix-formatting.yml...
🔴 CVE-2026-93680 · CVSS 9.8
IBM Langflow OSS 1.0.0 through 1.12.8 could allow a remote attacker to bypass security restrictions due to improper...
🔴 CVE-2026-62017 · CVSS 9.8
Unauthenticated PHP Object Injection in Good Homes
#CVE #Critical #Vulnerability
cvefeed.io
CVE-2026-118762 - Monkeytype: fork PR can execute code with elevated GITHUB_TOKEN
Monkeytype is a minimalistic and customizable typing test. Prior to 26.43.0, the .github/workflows/fix-formatting.yml workflow runs on pull_request_target with repository write permissions, checks out a fork pull request, installs dependencies from the fork's…
🔴 CVE Digest — 29 Oct 2026
2 critical vulnerabilities
🔴 CVE-2026-103093 · CVSS 9.4
ServiceNow has remediated a sandbox escape security issue that was identified in the ServiceNow AI Platform. This...
🔴 CVE-2026-118769 · CVSS 9.2
Botan is a C++ cryptography library. From 2.1.0 until 3.13.0, the Botan C API function botan_block_cipher_block_size...
#CVE #Critical #Vulnerability
2 critical vulnerabilities
🔴 CVE-2026-103093 · CVSS 9.4
ServiceNow has remediated a sandbox escape security issue that was identified in the ServiceNow AI Platform. This...
🔴 CVE-2026-118769 · CVSS 9.2
Botan is a C++ cryptography library. From 2.1.0 until 3.13.0, the Botan C API function botan_block_cipher_block_size...
#CVE #Critical #Vulnerability
cvefeed.io
CVE-2026-103093 - Sandbox Escape via Table Rotation in ServiceNow AI Platform
ServiceNow has remediated a sandbox escape security issue that was identified in the ServiceNow AI Platform. This vulnerability could enable an authenticated user with the admin role to bypass Rhino sandbox restrictions and execute arbitrary code on the underlying…
🔴 CVE Digest — 29 Oct 2026
3 critical vulnerabilities
🔴 CVE-2026-61707 · CVSS 9.0
SOCFortress CoPilot focuses on providing a single pane of glass for all your security operations needs. Prior to...
🔴 CVE-2026-61645 · CVSS 9.1
Docat is a tool for hosting versioned static documentation. In the affected implementation, an arbitrary file upload...
🔴 CVE-2026-107058 · CVSS 9.8
An issue in Shelter versionCode 445 allows attackers to register their own auth_key and execute a takeover of another...
#CVE #Critical #Vulnerability
3 critical vulnerabilities
🔴 CVE-2026-61707 · CVSS 9.0
SOCFortress CoPilot focuses on providing a single pane of glass for all your security operations needs. Prior to...
🔴 CVE-2026-61645 · CVSS 9.1
Docat is a tool for hosting versioned static documentation. In the affected implementation, an arbitrary file upload...
🔴 CVE-2026-107058 · CVSS 9.8
An issue in Shelter versionCode 445 allows attackers to register their own auth_key and execute a takeover of another...
#CVE #Critical #Vulnerability
cvefeed.io
CVE-2026-61707 - SOCFortress CoPilot: Stored case-report template injection permits backend code execution
SOCFortress CoPilot focuses on providing a single pane of glass for all your security operations needs. Prior to 0.1.76, in the reported deployment, case-report templates uploaded by `customer_user`, the lowest-privilege portal role, are later executed by…
🔴 CVE Digest — 30 Oct 2026
1 critical vulnerability
🔴 CVE-2023-22793 · CVSS 9.3
A vulnerability allowing an unauthenticated attacker to perform remote code execution (RCE) on servers running the...
#CVE #Critical #Vulnerability
1 critical vulnerability
🔴 CVE-2023-22793 · CVSS 9.3
A vulnerability allowing an unauthenticated attacker to perform remote code execution (RCE) on servers running the...
#CVE #Critical #Vulnerability
cvefeed.io
CVE-2023-22793 - Veeam Management Pack for Microsoft System Center Remote Code Execution Vulnerability
A vulnerability allowing an unauthenticated attacker to perform remote code execution (RCE) on servers running the Veeam Virtualization Extensions service of Veeam Management Pack for Microsoft System Center.
🔴 CVE Digest — 30 Oct 2026
2 critical vulnerabilities
🔴 CVE-2026-82104 · CVSS 9.4
In Teltonika Networks RUTOS devices running versions from 7.22 through 7.24.2 and TSWOS devices running versions 1.9...
🔴 CVE-2026-103039 · CVSS 9.8
The Gravity Forms plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including,...
#CVE #Critical #Vulnerability
2 critical vulnerabilities
🔴 CVE-2026-82104 · CVSS 9.4
In Teltonika Networks RUTOS devices running versions from 7.22 through 7.24.2 and TSWOS devices running versions 1.9...
🔴 CVE-2026-103039 · CVSS 9.8
The Gravity Forms plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including,...
#CVE #Critical #Vulnerability
cvefeed.io
CVE-2026-82104 - API permission bypass via logic bug
In Teltonika Networks RUTOS devices running versions from 7.22 through 7.24.2 and TSWOS devices running versions 1.9 through 1.10, a vulnerability exists whereby an unauthenticated user can directly call LUA functions, bypassing validations that might be…
🔴 CVE Digest — 30 Oct 2026
2 critical vulnerabilities
🔴 CVE-2026-116366 · CVSS 9.5
An issue has been discovered in ClickHouse Server that, under certain conditions, could allow an unauthenticated user...
🔴 CVE-2025-31704 · CVSS 9.8
A vulnerability has been found in the Dahua Intelligent Connection Center. A remote attacker could send a specially...
#CVE #Critical #Vulnerability
2 critical vulnerabilities
🔴 CVE-2026-116366 · CVSS 9.5
An issue has been discovered in ClickHouse Server that, under certain conditions, could allow an unauthenticated user...
🔴 CVE-2025-31704 · CVSS 9.8
A vulnerability has been found in the Dahua Intelligent Connection Center. A remote attacker could send a specially...
#CVE #Critical #Vulnerability
🔴 CVE Digest — 30 Oct 2026
2 critical vulnerabilities
🔴 CVE-2026-119597 · CVSS 9.8
OpenDeepWiki through 2.0.6 contains a hard-coded JWT signing key vulnerability that allows unauthenticated attackers to...
🔴 CVE-2026-119568 · CVSS 9.1
vsftpd through 3.0.5 contains an authentication bypass vulnerability in ssl_data_accept() that allows unauthenticated...
#CVE #Critical #Vulnerability
2 critical vulnerabilities
🔴 CVE-2026-119597 · CVSS 9.8
OpenDeepWiki through 2.0.6 contains a hard-coded JWT signing key vulnerability that allows unauthenticated attackers to...
🔴 CVE-2026-119568 · CVSS 9.1
vsftpd through 3.0.5 contains an authentication bypass vulnerability in ssl_data_accept() that allows unauthenticated...
#CVE #Critical #Vulnerability
cvefeed.io
CVE-2026-119597 - OpenDeepWiki through 2.0.6 Hard-coded JWT Signing Key Admin Token Forgery
OpenDeepWiki through 2.0.6 contains a hard-coded JWT signing key vulnerability that allows unauthenticated attackers to forge administrator tokens using the publicly known Jwt:SecretKey in appsettings.json. Attackers can mint HS256 bearer tokens with an Admin…
🔴 CVE Digest — 30 Oct 2026
10 critical vulnerabilities
🔴 CVE-2026-93327 · CVSS 9.4
A Deserialization of Untrusted Data vulnerability in the SubWorkflow task in Google Cloud Application Integration...
🔴 CVE-2026-61738 · CVSS 10.0
SOCFortress CoPilot focuses on providing a single pane of glass for all your security operations needs. Prior to...
🔴 CVE-2026-61737 · CVSS 9.8
ng-antd-admin is an Angular and NestJS administration system template. Prior to 22.0, a hardcoded default `JWT` secret...
🔴 CVE-2026-61730 · CVSS 9.3
SOCFortress CoPilot focuses on providing a single pane of glass for all your security operations needs. In affected...
🔴 CVE-2026-61729 · CVSS 9.4
SOCFortress CoPilot focuses on providing a single pane of glass for all your security operations needs. Prior to...
🔴 CVE-2026-61728 · CVSS 9.9
SOCFortress CoPilot focuses on providing a single pane of glass for all your security operations needs. In affected...
🔴 CVE-2026-119660 · CVSS 9.8
MuseBot before 2.0.0 contains an authentication bypass vulnerability that allows unauthenticated attackers to forge...
🔴 CVE-2026-112905 · CVSS 9.0
Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores. Prior to...
🔴 CVE-2026-110799 · CVSS 9.8
Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores. Prior to...
🔴 CVE-2026-119706 · CVSS 9.8
InternLM LMDeploy 0.9.0 through 0.18.0 contains an unauthenticated remote code execution vulnerability that allows...
#CVE #Critical #Vulnerability
10 critical vulnerabilities
🔴 CVE-2026-93327 · CVSS 9.4
A Deserialization of Untrusted Data vulnerability in the SubWorkflow task in Google Cloud Application Integration...
🔴 CVE-2026-61738 · CVSS 10.0
SOCFortress CoPilot focuses on providing a single pane of glass for all your security operations needs. Prior to...
🔴 CVE-2026-61737 · CVSS 9.8
ng-antd-admin is an Angular and NestJS administration system template. Prior to 22.0, a hardcoded default `JWT` secret...
🔴 CVE-2026-61730 · CVSS 9.3
SOCFortress CoPilot focuses on providing a single pane of glass for all your security operations needs. In affected...
🔴 CVE-2026-61729 · CVSS 9.4
SOCFortress CoPilot focuses on providing a single pane of glass for all your security operations needs. Prior to...
🔴 CVE-2026-61728 · CVSS 9.9
SOCFortress CoPilot focuses on providing a single pane of glass for all your security operations needs. In affected...
🔴 CVE-2026-119660 · CVSS 9.8
MuseBot before 2.0.0 contains an authentication bypass vulnerability that allows unauthenticated attackers to forge...
🔴 CVE-2026-112905 · CVSS 9.0
Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores. Prior to...
🔴 CVE-2026-110799 · CVSS 9.8
Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores. Prior to...
🔴 CVE-2026-119706 · CVSS 9.8
InternLM LMDeploy 0.9.0 through 0.18.0 contains an unauthenticated remote code execution vulnerability that allows...
#CVE #Critical #Vulnerability
cvefeed.io
CVE-2026-93327 - Unsafe Java Deserialization in Application Integration SubWorkflow tasks allows Remote Code Execution
A Deserialization of Untrusted Data vulnerability in the SubWorkflow task in Google Cloud Application Integration versions prior to 2026-09-11 on Google Cloud Platform allows an authenticated attacker to execute arbitrary code using a maliciously crafted…
🔴 CVE Digest — 30 Oct 2026
3 critical vulnerabilities
🔴 CVE-2026-118697 · CVSS 9.0
In JetBrains Toolbox App before 3.9.1 and 3.8.2; IntelliJ IDEA before 2026.3 and 2026.2.4, the jetbrainsd daemon...
🔴 CVE-2026-61826 · CVSS 10.0
Bazarr is a companion application to Sonarr and Radarr. Prior to 1.5.7-beta.14, the `api_ns_plex` namespace in...
🔴 CVE-2026-112816 · CVSS 10.0
Improper certificate validation in the HTTPS listener in Canonical LXD 4.0.14, 5.0.10, 5.21.8, 6.9 before 4.0.15,...
#CVE #Critical #Vulnerability
3 critical vulnerabilities
🔴 CVE-2026-118697 · CVSS 9.0
In JetBrains Toolbox App before 3.9.1 and 3.8.2; IntelliJ IDEA before 2026.3 and 2026.2.4, the jetbrainsd daemon...
🔴 CVE-2026-61826 · CVSS 10.0
Bazarr is a companion application to Sonarr and Radarr. Prior to 1.5.7-beta.14, the `api_ns_plex` namespace in...
🔴 CVE-2026-112816 · CVSS 10.0
Improper certificate validation in the HTTPS listener in Canonical LXD 4.0.14, 5.0.10, 5.21.8, 6.9 before 4.0.15,...
#CVE #Critical #Vulnerability
cvefeed.io
CVE-2026-118697 - JetBrains Toolbox and IntelliJ IDEA Improper Certificate Validation Vulnerability
In JetBrains Toolbox App before 3.9.1 and 3.8.2; IntelliJ IDEA before 2026.3 and 2026.2.4, the jetbrainsd daemon trusted compromised intermediate certificates
🔴 CVE Digest — 30 Oct 2026
7 critical vulnerabilities
🔴 CVE-2026-61620 · CVSS 9.8
HoneySQL turns Clojure data structures into SQL. From 2.0.0 until 2.7.1392, applications that pass user input or other...
🔴 CVE-2026-116241 · CVSS 9.9
pgAdmin 4's Import/Export Data tool wraps a user's query export in a psql \copy (...) TO command and checks that the...
🔴 CVE-2026-55598 · CVSS 9.1
PinePods is a complete, self-hosted podcast management system written in Rust. Prior to 0.9.0, an authenticated user...
🔴 CVE-2026-90888 · CVSS 9.8
Unauthenticated PHP Object Injection in LeadSnap
🔴 CVE-2026-39738 · CVSS 9.8
Unauthenticated PHP Object Injection in FunnelKit Automations
🔴 CVE-2026-39732 · CVSS 9.3
Unauthenticated SQL Injection in Transliterator
🔴 CVE-2026-119526 · CVSS 9.8
Deserialization of Untrusted Data vulnerability in ThemeREX Royal Event allows Object Injection.
This issue affects...
#CVE #Critical #Vulnerability
7 critical vulnerabilities
🔴 CVE-2026-61620 · CVSS 9.8
HoneySQL turns Clojure data structures into SQL. From 2.0.0 until 2.7.1392, applications that pass user input or other...
🔴 CVE-2026-116241 · CVSS 9.9
pgAdmin 4's Import/Export Data tool wraps a user's query export in a psql \copy (...) TO command and checks that the...
🔴 CVE-2026-55598 · CVSS 9.1
PinePods is a complete, self-hosted podcast management system written in Rust. Prior to 0.9.0, an authenticated user...
🔴 CVE-2026-90888 · CVSS 9.8
Unauthenticated PHP Object Injection in LeadSnap
🔴 CVE-2026-39738 · CVSS 9.8
Unauthenticated PHP Object Injection in FunnelKit Automations
🔴 CVE-2026-39732 · CVSS 9.3
Unauthenticated SQL Injection in Transliterator
🔴 CVE-2026-119526 · CVSS 9.8
Deserialization of Untrusted Data vulnerability in ThemeREX Royal Event allows Object Injection.
This issue affects...
#CVE #Critical #Vulnerability
cvefeed.io
CVE-2026-61620 - HoneySQL unchecked entity names can lead to SQL injection results
HoneySQL turns Clojure data structures into SQL. From 2.0.0 until 2.7.1392, applications that pass user input or other arbitrary data into the HoneySQL `DSL` by calling `keyword` or `symbol` on that input can produce SQL strings that facilitate SQL injection…
👍1
🔴 CVE Digest — 30 Oct 2026
6 critical vulnerabilities
🔴 CVE-2026-62863 · CVSS 9.6
MoLing is a computer-use and browser-use based MCP server. Prior to 0.5.0, when MoLing runs in SSE mode using `-l`, its...
🔴 CVE-2026-62853 · CVSS 9.9
ThingLinks is an enterprise IoT platform. Prior to 1.4.0, the `/groovyScriptTest/registerScript` endpoint accepts...
🔴 CVE-2026-62849 · CVSS 9.1
ThingLinks is an enterprise IoT platform. Prior to 1.4.0, an unauthenticated SQL injection vulnerability in the...
🔴 CVE-2026-117666 · CVSS 9.1
Improper Validation of Certificate with Host Mismatch vulnerability in deadtrickster ssl_verify_fun allows an adversary...
🔴 CVE-2026-78403 · CVSS 9.8
Stack-based buffer overflow and missing
authorization vulnerability in Thales Sentinel Keys Server on Windows...
🔴 CVE-2026-61850 · CVSS 9.3
Kargo manages and automates the promotion of software artifacts. From 0.6.0 until 1.8.14, 1.9.9, and 1.10.8, two...
#CVE #Critical #Vulnerability
6 critical vulnerabilities
🔴 CVE-2026-62863 · CVSS 9.6
MoLing is a computer-use and browser-use based MCP server. Prior to 0.5.0, when MoLing runs in SSE mode using `-l`, its...
🔴 CVE-2026-62853 · CVSS 9.9
ThingLinks is an enterprise IoT platform. Prior to 1.4.0, the `/groovyScriptTest/registerScript` endpoint accepts...
🔴 CVE-2026-62849 · CVSS 9.1
ThingLinks is an enterprise IoT platform. Prior to 1.4.0, an unauthenticated SQL injection vulnerability in the...
🔴 CVE-2026-117666 · CVSS 9.1
Improper Validation of Certificate with Host Mismatch vulnerability in deadtrickster ssl_verify_fun allows an adversary...
🔴 CVE-2026-78403 · CVSS 9.8
Stack-based buffer overflow and missing
authorization vulnerability in Thales Sentinel Keys Server on Windows...
🔴 CVE-2026-61850 · CVSS 9.3
Kargo manages and automates the promotion of software artifacts. From 0.6.0 until 1.8.14, 1.9.9, and 1.10.8, two...
#CVE #Critical #Vulnerability
cvefeed.io
CVE-2026-62863 - MoLing: unauthenticated SSE and wildcard CORS expose tool sessions
MoLing is a computer-use and browser-use based MCP server. Prior to 0.5.0, when MoLing runs in SSE mode using `-l`, its `/sse` and `/message` HTTP endpoints do not authenticate requests and the `mcp-go` dependency sets `Access-Control-Allow-Origin: *`. A…
🔴 CVE Digest — 31 Oct 2026
2 critical vulnerabilities
🔴 CVE-2026-117656 · CVSS 9.3
Acceptance of Extraneous Untrusted Data With Trusted Data vulnerability in the Sign in with Apple strategy in pow-auth...
🔴 CVE-2026-63377 · CVSS 9.8
TAKO AI Agent for Okta is a local-first AI agent that helps Okta administrators query tenant data using natural...
#CVE #Critical #Vulnerability
2 critical vulnerabilities
🔴 CVE-2026-117656 · CVSS 9.3
Acceptance of Extraneous Untrusted Data With Trusted Data vulnerability in the Sign in with Apple strategy in pow-auth...
🔴 CVE-2026-63377 · CVSS 9.8
TAKO AI Agent for Okta is a local-first AI agent that helps Okta administrators query tenant data using natural...
#CVE #Critical #Vulnerability
cvefeed.io
CVE-2026-117656 - Unverified Sign in with Apple callback parameter can override verified ID token claims
Acceptance of Extraneous Untrusted Data With Trusted Data vulnerability in the Sign in with Apple strategy in pow-auth Assent allows an unauthenticated remote attacker to impersonate another user via the user parameter of the authorization callback. Apple…
🔴 CVE Digest — 31 Oct 2026
5 critical vulnerabilities
🔴 CVE-2026-116512 · CVSS 9.8
The Project Manager – AI Powered Project Management, Task Management, Kanban Board & Time Tracker plugin for WordPress...
🔴 CVE-2026-119096 · CVSS 9.8
The Uncanny Toolkit for LearnDash plugin for WordPress is vulnerable to Authentication Bypass in versions up to, and...
🔴 CVE-2026-89270 · CVSS 9.1
The Popup Builder – Create highly converting, mobile friendly marketing popups. plugin for WordPress is vulnerable to...
🔴 CVE-2026-116557 · CVSS 9.1
The WP Booking System - Booking Calendar plugin for WordPress is vulnerable to unauthorized modification of data due to...
🔴 CVE-2026-109220 · CVSS 9.8
The PDF Invoice for WooCommerce + Drag and Drop Template Builder plugin for WordPress is vulnerable to PHP Object...
#CVE #Critical #Vulnerability
5 critical vulnerabilities
🔴 CVE-2026-116512 · CVSS 9.8
The Project Manager – AI Powered Project Management, Task Management, Kanban Board & Time Tracker plugin for WordPress...
🔴 CVE-2026-119096 · CVSS 9.8
The Uncanny Toolkit for LearnDash plugin for WordPress is vulnerable to Authentication Bypass in versions up to, and...
🔴 CVE-2026-89270 · CVSS 9.1
The Popup Builder – Create highly converting, mobile friendly marketing popups. plugin for WordPress is vulnerable to...
🔴 CVE-2026-116557 · CVSS 9.1
The WP Booking System - Booking Calendar plugin for WordPress is vulnerable to unauthorized modification of data due to...
🔴 CVE-2026-109220 · CVSS 9.8
The PDF Invoice for WooCommerce + Drag and Drop Template Builder plugin for WordPress is vulnerable to PHP Object...
#CVE #Critical #Vulnerability
cvefeed.io
CVE-2026-116512 - Project Manager <= 4.1.1 - Unauthenticated Remote Code Execution via 'id' Parameter Function Injection
The Project Manager – AI Powered Project Management, Task Management, Kanban Board & Time Tracker plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 4.1.1 via the 'id' parameter parameter. This is due to unsanitized…
🔴 CVE Digest — 31 Oct 2026
2 critical vulnerabilities
🔴 CVE-2026-118235 · CVSS 9.8
The SimpleForm – Form Maker to Chat Apps with Quiz, Poll and Multi Lead Notifications plugin for WordPress is...
🔴 CVE-2026-103882 · CVSS 9.1
The Acadlix LMS – AI Quiz Maker, Online Exam & Course Plugin for WordPress plugin for WordPress is vulnerable to...
#CVE #Critical #Vulnerability
2 critical vulnerabilities
🔴 CVE-2026-118235 · CVSS 9.8
The SimpleForm – Form Maker to Chat Apps with Quiz, Poll and Multi Lead Notifications plugin for WordPress is...
🔴 CVE-2026-103882 · CVSS 9.1
The Acadlix LMS – AI Quiz Maker, Online Exam & Course Plugin for WordPress plugin for WordPress is vulnerable to...
#CVE #Critical #Vulnerability
cvefeed.io
CVE-2026-118235 - SimpleForm <= 3.10.2 - Unauthenticated Arbitrary File Upload via Trailing-Dot Filename via Unknown File Key in…
The SimpleForm – Form Maker to Chat Apps with Quiz, Poll and Multi Lead Notifications plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 3.10.2 via the handle_upload function. This is due to missing server-side…
🔴 CVE Digest — 31 Oct 2026
2 critical vulnerabilities
🔴 CVE-2026-120209 · CVSS 9.8
AJ-Report through 1.7.1 signs share tokens with a hard-coded JWT secret, allowing attackers to forge valid Share-Tokens...
🔴 CVE-2026-120201 · CVSS 9.8
Jpom 2.10.0 through 2.11.12 contains an authentication bypass vulnerability that allows unauthenticated attackers to...
#CVE #Critical #Vulnerability
2 critical vulnerabilities
🔴 CVE-2026-120209 · CVSS 9.8
AJ-Report through 1.7.1 signs share tokens with a hard-coded JWT secret, allowing attackers to forge valid Share-Tokens...
🔴 CVE-2026-120201 · CVSS 9.8
Jpom 2.10.0 through 2.11.12 contains an authentication bypass vulnerability that allows unauthenticated attackers to...
#CVE #Critical #Vulnerability
cvefeed.io
CVE-2026-120209 - AJ-Report through 1.7.1 Authentication Bypass leading to RCE via Share-Token
AJ-Report through 1.7.1 signs share tokens with a hard-coded JWT secret, allowing attackers to forge valid Share-Tokens offline. Attackers can mint a token with reportCode 'dataSet' to access the testTransform endpoint, which passes scripts to GroovyClassLoader…
🔴 CVE Digest — 31 Oct 2026
1 critical vulnerability
🔴 CVE-2026-118636 · CVSS 9.8
**UNSUPPORTED WHEN ASSIGNED**
JavaNativeMessageDecoder in the MINA 3.0 codec module calls...
#CVE #Critical #Vulnerability
1 critical vulnerability
🔴 CVE-2026-118636 · CVSS 9.8
**UNSUPPORTED WHEN ASSIGNED**
JavaNativeMessageDecoder in the MINA 3.0 codec module calls...
#CVE #Critical #Vulnerability
cvefeed.io
CVE-2026-118636 - Apache MINA: Unsafe Deserialization (CWE-502) in JavaNativeMessageDecoder
**UNSUPPORTED WHEN ASSIGNED** JavaNativeMessageDecoder in the MINA 3.0 codec module calls ObjectInputStream.readObject() on frame bytes with no class filter, so an application that puts it in front of an untrusted peer is open to gadget-chain RCE. As the…