CVEs published in October 2026
17,265 vulnerabilities, 1,627 critical, 21 exploited.
- apple ipados, macos, safari +3 more +5 moreThis issue was addressed by removing the vulnerable code. This issue is fixed in Safari 27.2, iOS...10.0 Critical
- totolink a950rgTOTOLINK A950RG Cloud Upgrade upgrade.so setCloudUpgradeFW command injection9.4 Critical
- crossbario autobahn-pythonAutobahn Python: permessage-brotli inflates a whole frame before maxMessagePayloadSize is checked (incomplete fix of GHSA-hxp9-w8x3-p566)5.9 Medium
- tornadoweb tornadoTornado: Open redirect in RedirectHandler via protocol-relative URLs2.1 Low
- tornadoweb tornadoTornado: Quadratic CPU usage when parsing HTTP headers with line folding5.3 Medium
- sebhildebrandt systeminformationsysteminformation: Windows command injection in services() through Unicode quotation marks7.8 High
- turboderp exllamav2turboderp-org ExLlamaV2 GPTQ Index q_matrix.cu make_sequential out-of-bounds write4.8 Medium
- mem0ai mem0Mem0: Cross-tenant conversation leak via unescaped delimiter collision in session-scope key (_build_session_scope)6.3 Medium
- xpdfInfinite loop in Xpdf due to missing validation in JPEG 2000 decoder2.1 Low
- subhajitkhan online-clinic-management-systemsubhajitkhan online-clinic-management-system patientregistration.php cross site scripting5.1 Medium
- wolfvision cynap pro, cynap core pro, cynap receiver, cynap pure, cynap pure mini, cynap pure pro, cynap pure (next gen), cynap bridge, cynap videobar +1 more +3 moreStored Cross-Site Scripting in Web Interface5.1 Medium
- appsup-dart joseTiming side-channel in pure-Erlang X25519 scalar multiplication leaks the private key in jose5.9 Medium
- appsup-dart joseECDSA signature length is not validated in jose, allowing signature malleability5.1 Medium
- appsup-dart joseerlang-jose RSA JWK parsing attempts to factor an attacker-controlled modulus, enabling CPU-exhaustion denial of service6.9 Medium
- appsup-dart joseWeak PBKDF2 parameters for password-encrypted private-key export in jose7.4 High
- appsup-dart joseInfinite recursion (CPU denial-of-service) in JOSE.JWK.shared_secret/2 on mismatched key types5.9 Medium
- appsup-dart joseDecompression bomb via unbounded zlib:inflate in jose_jwe_zip:uncompress/26.9 Medium
- asterisk, asterisk certified-asterisk +1 moreAsterisk: Out-of-Bounds Read in Q.931 Information Element Parser (H.323 Addon)6.3 Medium
- appsup-dart joseBleichenbacher padding oracle in RSAES-PKCS1-v1_5 decryption in jose5.9 Medium
- appsup-dart joseAttacker-controlled AES-GCM authentication tag length allows tag forgery in jose5.9 Medium
- wolfvision cynap pro, cynap core pro, cynap receiver, cynap pure, cynap pure mini, cynap pure pro, cynap pure (next gen), cynap bridge, cynap videobar +1 more +3 moreUnauthorized Access to Internal Web Resources6.9 Medium
- asterisk, asterisk certified-asterisk +1 moreAsterisk: LDAP Filter Injection in res_config_ldap via SIP Username (Unauthenticated Information Disclosure)6.9 Medium
- wolfvision cynap pro, cynap core pro, cynap pure, cynap pure mini, cynap pure pro, cynap pure (next gen), cynap videobar +1 more +3 moreResource Exhaustion in MICE Service6.9 Medium
- a2aproject a2a-javaa2aproject a2a-java JSON-RPC Error getMessage information exposure5.3 Medium
- hugging face lerobotCVE-2026-115533No score
- tornadoweb tornadoTornado: Event loop blocking and excess memory use from chunked bodies with many small chunks5.3 Medium
- asterisk, asterisk certified-asterisk +1 moreAsterisk: Heap-use-after-free in Asterisk PJSIP TCP/SDP handling when TCP connection closes during SDP processing7.1 High
- a2aproject a2a-goa2aproject a2a-go Push Notification agentexec.go CreateExecutor information exposure6.9 Medium
- asterisk, asterisk certified-asterisk +1 moreAsterisk: Reflected XSS in Phone Provisioning HTTP Error Pages2.3 Low
- danielgatis rembgRembg: Unauthenticated SAM model injection permits local-file disclosure through malicious ONNX graphs8.6 High
- a2aproject a2a-dotneta2aproject a2a-dotnet Parser A2AJsonRpcProcessor.cs A2AJsonRpcProcessor.ProcessRequestAsync information exposure5.3 Medium
- octoprintOctoPrint Flask Secret Key hard-coded key6.9 Medium
- a2aproject a2a-dotneta2aproject a2a-dotnet TaskProjection TaskProjection.ApplyStatus race condition5.3 Medium
- hashicorp toolingConsul-k8s vulnerable to a cross-namespace authorization bypass in component ACL binding rules9.9 Critical
- mozilla firefox for iosExternal protocol handler (tel:) address bar spoof5.4 Medium
- mozilla firefox for iosFacetime protocol handler enabled spoofing5.4 Medium
- bkwld decoyBKWLD Decoy Authorization Policy Policy.php privileges management5.3 Medium
- ggml-org llama.cppggml-org llama.cpp Mirostat Sampler llama-sampler.cpp assertion6.9 Medium
- hashicorp consul, consul enterprise +1 moreConsul vulnerable to an authorization bypass in health check registration6.4 Medium
- cheaper-inference omnirouteOmniRoute 3.8.50 before 3.8.52 Missing Authentication via /api/sync/tokens8.2 High
- esri arcgis serverBUG-000187164 - ArcGIS Server has a security vulnerability.6.1 Medium
- esri arcgis serverBUG-000187165 - ArcGIS Server has a security vulnerability.6.1 Medium
- esri arcgis serverBUG-000182936 - ArcGIS Server has a security vulnerability.5.3 Medium
- esri arcgis serverBUG-000186514 - ArcGIS Server has a security vulnerability.7.5 High
- esri arcgis serverBUG-000185167 - ArcGIS Server has a security vulnerability.6.1 Medium
- esri arcgis serverBUG-000187511 - ArcGIS Server has a security vulnerability.9.8 Critical
- hashicorp consul, consul enterprise +1 moreConsul vulnerable to a denial of service in HTTP APIs7.5 High
- faststone image viewerFastStone Image Viewer Box-Average Downsampler FUN_0062d96c out-of-bounds5.3 Medium
- backstageBackstage catalog rules can be bypassed for URL locations using encoded path segments6.5 Medium
- hashicorp consul, consul enterprise +1 moreConsul vulnerable to an authorization bypass in service mesh registration8.8 High
- Show moreLoading…