CVEs published in October 2026
17,265 vulnerabilities, 1,627 critical, 21 exploited.
- hitachi energy tro600 series firmwareTRO600 contains a vulnerability that allows an authenticated attacker to bypass network access...7.7 High
- eclipse foundation keypontML-KEM key-pair lookup can bind an unrelated or attacker-planted public key, exposing encapsulated shared secrets5.5 Medium
- hitachi energy coretec 4, coretec 5 +1 moreAn OS command vulnerability exists in CoreTec product that allows authenticated users with...7.7 High
- eclipse foundation iofogiofogctl command injection via Controller provisioning response5.5 Medium
- dell powerprotect data domainDell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release...6.3 Medium
- kulga software and telecommunications limited company news softwareReflected XSS in Kulga Software's Kulga News Software6.1 Medium
- dell powerprotect data domainDell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release...6.7 Medium
- eclipse foundation iofogEclipse ioFog Operator disables TLS certificate verification when sending Controller and OIDC credentials9.1 Critical
- eaton easysoftEaton easySoft improperly validates TLS certificates presented by easyE4 devices. A network...5.9 Medium
- hwk-fr advanced custom fields: extendedAdvanced Custom Fields: Extended <= 0.9.2.6 - Missing Authorization to Unauthenticated Arbitrary Attachment Deletion via Email Action Dynamic File Field4.8 Medium
- wplakeorg advanced views – display framework – gutenberg/elementor/shortcodeAdvanced Views <= 3.9.6 - Unauthenticated Stored Cross-Site Scripting via Comment Content7.2 High
- dell powerprotect data domainDell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release...6.5 Medium
- @fastify/express@fastify/express vulnerable to path-scoped middleware bypass via absolute-form request targets9.1 Critical
- dell powerprotect data domainDell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release...4.9 Medium
- eaton easye4Eaton easyE4 uses an insufficiently strong password policy. An attacker who obtains a password...7.5 High
- dell powerprotect data domainDell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through LTS 2026, LTS2024 release...4.9 Medium
- @fastify/session@fastify/session vulnerable to session revocation bypass via a logout race condition3.7 Low
- dell powerprotect data domain, data domain operating system +1 moreDell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release...5.8 Medium
- dj-extensions.com dj-helpfularticles extension for joomlaJoomla Extension - dj-extensions.com - Unauthenticated Stored XSS in DJ-HelpfulArticles < 1.3.08.7 High
- eaton easye4Eaton easyE4 uses a static nonce during authentication, which could allow an unauthenticated...7.5 High
- pumukitUnrestricted Upload of File in PuMuKIT application8.8 High
- darylldoyle svg-sanitizersvg-sanitizer 0.11.0 before 1.1.0 Uncaught LogicException DoS via sanitize()6.9 Medium
- darylldoyle svg-sanitizersvg-sanitizer before 1.1.0 Quadratic CPU-Exhaustion DoS via PHP-Tag Stripping Loop8.7 High
- darylldoyle svg-sanitizerdarylldoyle svg-sanitizer before 1.0.0 CSS Injection and Remote Reference Bypass5.1 Medium
- opnsense coreREDAXO before 5.21.3 CSRF Token Bypass via users/users Privilege Escalation8.6 High
- opnsense coreREDAXO before 5.21.3 Reflected XSS via opener_link in Media Pool5.1 Medium
- opnsense coreREDAXO before 5.21.3 CSRF in Article History Plugin5.1 Medium
- opnsense coreREDAXO 5.18.0 before 5.21.4 Stored XSS via Unsanitized Mediapool SVG Uploads2.1 Low
- opnsense coreREDAXO Core 5.3.0 before 5.21.4 Authentication Bypass via History Plugin9.3 Critical
- opnsense coreREDAXO before 5.21.4 Stored XSS via Media and Link Input Widgets5.1 Medium
- opnsense coreREDAXO before 5.21.4 Broken Access Control in Slice Operations7.1 High
- opnsense coreREDAXO before 5.21.4 Missing Authorization in Media Pool Bulk Move7.1 High
- opnsense coreREDAXO before 5.21.4 Missing Authorization in Version and History Previews7.1 High
- opnsense coreREDAXO before 5.21.5 Privilege Escalation via Backup Export of Authentication Tables7.7 High
- opnsense coreREDAXO before 5.21.5 CSRF via Safe Mode Toggle Parameter5.1 Medium
- opnsense coreREDAXO before 5.21.5 Insufficient Session Expiration on Password Change2.3 Low
- opnsense coreREDAXO core before 5.21.5 Missing Authorization in rex_api_package API6.1 Medium
- octopus deploy serverIn affected versions of Octopus Server, a user holding the System Manager role could escalate...8.6 High
- octopus deploy serverIn affected versions of Octopus Server, creating a user invitation writes the invitation code to...7.7 High
- octopus deploy serverIn affected versions of Octopus Server, OIDC token issuer validation was performed inconsistently...8.7 High
- flarum framework, nextcloud flow, vaadin +2 morePush Endpoint Returns Permissive CORS Headers2.3 Low
- semanticmediawiki, semantic-mediawiki semantic mediawiki +1 moreSemanticMediaWiki 3.1.0 before 7.3.1 Reflected XSS via Special:Search smw Profile5.3 Medium
- semanticmediawiki, semantic-mediawiki semantic mediawiki +1 moreSemanticMediaWiki 2.5.0 before 7.3.1 Stored XSS via Special:Browse Code Property5.3 Medium
- semanticmediawiki, semantic-mediawiki semantic mediawiki +1 moreSemanticMediaWiki 3.2.0 before 7.3.1 Stored XSS via Special:Browse Group Heading4.8 Medium
- semantic-mediawiki semantic mediawiki, semanticmediawiki +1 moreSemantic MediaWiki 3.0.0 before 7.3.1 Stored XSS via Special:Browse Keyword Property5.3 Medium
- semantic-mediawiki semantic mediawiki, semanticmediawiki +1 moreSemantic MediaWiki before 7.3.1 Stored XSS via External Identifier in Special:Browse5.3 Medium
- semantic-mediawiki semantic mediawiki, semanticmediawiki +1 moreSemantic MediaWiki before 7.3.1 Reflected XSS via Special:SMWAdmin id Parameter5.3 Medium
- semanticmediawiki, semantic-mediawiki semantic mediawiki +1 moreSemanticMediaWiki 5.0.0 before 7.3.1 Stored XSS via Tooltip Module data-* Attributes5.3 Medium
- semantic-mediawiki semantic mediawiki, semanticmediawiki +1 moreSemantic MediaWiki 3.1.0 before 7.3.1 Stored XSS via Schema Descriptions4.8 Medium
- semantic-mediawiki semantic mediawiki, semanticmediawiki +1 moreSemantic MediaWiki 4.2.0 before 7.3.1 Stored XSS via FacetedSearch Exploration Labels4.8 Medium
- Show moreLoading…