CVEs published in October 2026
17,265 vulnerabilities, 1,627 critical, 21 exploited.
- oray pugongying x5 proOray Pugongying X5 Pro Ser2net crlf injection9.4 Critical
- ndemic creations plague inc evolvedNdemic Creations Plague Inc Evolved Workshop Scenario Loader deserialization5.3 Medium
- ash-project ashAn upsert on the primary key in Ash ignores attribute multitenancy, so one tenant can read, overwrite and take over another tenant's records7.6 High
- ffxiv-teamcraft ffxiv teamcraftffxiv-teamcraft FFXIV Teamcraft Renderer-Process IPC Bridge preload.ts clipboard.readText cross site scripting5.1 Medium
- unknown eurobank woocommerce payment gatewayEurobank WooCommerce Payment Gateway <= 2.1.1 - Unauthenticated Order Payment Forgery via Unverified Callback5.3 Medium
- stellarwp givewpGiveWP < 4.19.0.1 - Unauthenticated Donation Amount Restriction Bypass via Currency5.3 Medium
- 777genius agent-teams-ai777genius agent-teams-ai Local HTTP Service HttpServer.ts doStart missing authentication4.8 Medium
- edimax br-6208acEdimax BR-6208AC Virtual Server cross site scripting4.8 Medium
- fr0tt benotesfr0tt benotes Bookmark Metadata Endpoint PostController.php getUrlInfo server-side request forgery5.3 Medium
- fuji electric co., ltd. / hakko electronics co., ltd. v-sftV-SFT provided by FUJI ELECTRIC CO., LTD. contains an out-of-bounds read vulnerability in...8.4 High
- fuji electric co., ltd. / hakko electronics co., ltd. v-sftV-SFT provided by FUJI ELECTRIC CO., LTD. contains an out-of-bounds read vulnerability in...8.4 High
- fuji electric co., ltd. / hakko electronics co., ltd. v-sftV-SFT provided by FUJI ELECTRIC CO., LTD. contains an out-of-bounds read vulnerability in...8.4 High
- fuji electric co., ltd. / hakko electronics co., ltd. v-sftV-SFT provided by FUJI ELECTRIC CO., LTD. contains an out-of-bounds read vulnerability in...8.4 High
- fuji electric co., ltd. / hakko electronics co., ltd. v-sftV-SFT provided by FUJI ELECTRIC CO., LTD. contains an out-of-bounds read vulnerability in...8.4 High
- fuji electric co., ltd. / hakko electronics co., ltd. v-sftV-SFT provided by FUJI ELECTRIC CO., LTD. contains an out-of-bounds write vulnerability. Opening...8.4 High
- fuji electric co., ltd. / hakko electronics co., ltd. v-sftV-SFT provided by FUJI ELECTRIC CO., LTD. contains a stack-based buffer overflow vulnerability....8.4 High
- icret easyimageicret EasyImage del.php privileges management6.9 Medium
- unknown mintpay for woocommerceMintpay <= 2.2.3 - Unauthenticated Order Payment Completion and Cancellation via Callback Forgery6.5 Medium
- unknown opay payment gateway for woocommerceOPay Payment Gateway for WooCommerce <= 2.5.5 - Unauthenticated Payment Confirmation Forgery via Empty Default Secret Key5.3 Medium
- unknown online payments with ik pay gatewayiKhokha Payment Gateway < 3.0.4 - Unauthenticated Order Payment Forgery via Callback5.3 Medium
- unknown payment gatewaynexi Alpha Bank for WooCommerce <= 2.2.0 - Unauthenticated Payment Confirmation Forgery via Empty Shared Secret5.3 Medium
- unknown ccavenue payment gateway for woocommerceCCAvenue Payment Gateway for WooCommerce <= 3.1 - Unauthenticated Order Payment Completion via Webhook Forgery5.3 Medium
- gnome libgsfGNOME libgsf OLE2 gsf-infile-msole.c ole_info_read_metabat heap-based overflow5.3 Medium
predis/predisRootGHSA-v32q-pmmw-cf38 in predis/predis - Patched by RootNo score- nocodbNocoDB signup validatePassword excessive authentication6.3 Medium
- nocodbNocoDB Sign-in Endpoint AuthService.validateUser information disclosure6.3 Medium
- nocodbNocoDB Registration users.service.ts race condition6.3 Medium
- nocodbNocoDB PublicApiLimiterGuard signup UserRefreshToken.deleteAllUserToken allocation of resources6.3 Medium
- nocodbNocoDB Password-Reset Flow users.service.ts race condition5.1 Medium
- ministry of land, infrastructure, transport and tourism, japan electronic delivery item inspection support systemElectronic delivery item Inspection Support System provided by Japan's Ministry of Land,...8.5 High
- z.ai zcodeZ.ai Zcode Sed Command Filter os command injection5.3 Medium
- halo-dev halohalo-dev halo View Name Resolver DefaultViewNameResolver.java path traversal6.9 Medium
- yoosee gm8135s cameraYoosee GM8135S Camera Secure Boot signature verification9.3 Critical
- yoosee gm8135s cameraYoosee GM8135S Camera WiFi Configuration wpa_supplicantX.conf initialization2.3 Low
- yoosee gm8135s cameraYoosee GM8135S Camera Live UDP H.264 Video Stream npc cleartext transmission6.3 Medium
- No product listedGouGuOA Api.php chunkUpload unrestricted upload5.3 Medium
- hashenudara edoc-doctor-appointment-systemHashenUdara edoc-doctor-appointment-system add-new.php sql injection6.9 Medium
- 2k games civilization v, 2k sid meiers civilization v +1 more2K Games Civilization V Lua Sandbox loadstring type confusion5.3 Medium
- giantappman livewallpaperGiantappMan LiveWallPaper SignalR Hub UploadFile missing authentication6.9 Medium
- continuedev continuecontinuedev Continue MCP Server Transport ConfigHandler.ts MCPManagerSingleton.setConnections os command injection5.3 Medium
- openbq-org openbbopenbq-org OpenBB Local API Server api_settings.py access control5.3 Medium
- datafeedr product sets pluginDatafeedr Product Sets Plugin AJAX Handlers ajax.php dfrps_ajax_delete_saved_search authorization5.3 Medium
- No product listedHeyCyan App FileProvider access control6.9 Medium
- No product listedHeyCyan App Network Security Configuration AndroidManifest.xml cleartext transmission6.3 Medium
- sony neural network librariesSony Neural Network Libraries NNP Converter utils.py func_set_nnabla_version_decorate code injection5.3 Medium
- sony neural network librariesSony Neural Network Libraries Encode Param encode_decode_param.py load_param_in_txt code injection5.3 Medium
- quantgeekdev docker-mcpQuantGeekDev docker-mcp docker_executor.py _build_windows_command os command injection5.3 Medium
- itsourcecode online cake ordering systemitsourcecode Online Cake Ordering System deletetransac.php sql injection5.3 Medium
- No product listedgougucms User Level Level.php add cross site scripting4.8 Medium
- No product listedXovis AG APS-R-POE, APS-R-POE-PP, APS-R, APS-R-POE-USB, and APS-B 2.10.1.1 and earlier contains...8.8 High
- Show moreLoading…