CVEs published in October 2026
17,265 vulnerabilities, 1,627 critical, 21 exploited.
- watchguard fireware osFireware OS Improper Authentication in AuthPoint MFA Verification Allows Session Hijacking5.6 Medium
- watchguard fireware osFireware OS NULL Pointer Dereference in Management Interface Allows Unauthenticated Denial of Service8.7 High
- watchguard fireware osFireware OS Missing Authentication in FireCluster State Sync Allows BOVPN Tunnel Denial of Service6.0 Medium
- watchguard fireware osFireware OS Stack Buffer Overflow in WireGuard Configuration Allows Remote Code Execution9.5 Critical
- tidewave-ai tidewaveHost filesystem path disclosure via DNS rebinding2.3 Low
- dexmal dexboticDexmal Dexbotic gr00tsonic Checkpoint Loader gr00tsonic_arch.py load_pretrained_gr00t path traversal5.3 Medium
strands-agentsPyPIStrands Agents: Local Privilege Escalation via Symlink Attack in Default Session File Storage7.1 Highstrands-agentsPyPIStrands Agents: Default FileSessionManager storage is world-readable on shared systems5.7 MediumlitellmPyPILiteLLM: internal_user_viewer arbitrary local file read via `vertex_ai_credentials`8.1 HighlitellmPyPILiteLLM vulnerable to reflected XSS in /sso/debug/callback6.8 Medium- crownpku rasa nlu chicrownpku Rasa_NLU_Chi Model Persistor persistor.py Persistor._decompress path traversal5.3 Medium
- maz1987in 3dviewer-nextcloud3Dviewer-Nextcloud: Share password not enforced when streaming 3D models from a public link share7.5 High
- teamviewer full client, portable, remote control +2 moreInteger Overflow in TeamViewer Remote Control Screen Decompression Leading to Heap-Based Buffer Overflow8.8 High
- teamviewer remote - patch managementLocal Privilege Escalation via Race Condition in TeamViewer Patch Management for Windows7.3 High
- nagios host, teamviewer full client +1 moreLocal Privilege Escalation during Advanced Asset Management Installation in TeamViewer Client for Windows7.3 High
- teamviewer remote management - monitoringLocal Privilege Escalation via DLL Hijacking in TeamViewer Monitoring for Windows7.3 High
- nagios host, teamviewer full client +1 moreLocal Privilege Escalation via DLL Sideloading in TeamViewer Patch Management for Windows7.8 High
- teamviewer remote management - monitoringLocal Privilege Escalation via IPC Broker Impersonation in TeamViewer Remote Management Monitoring for Windows7.8 High
- nagios host, teamviewer full client, remote management - monitoring +2 moreLocal privilege escalation via improper IPC access control in TeamViewer Remote Management Monitoring7.8 High
- nagios host, teamviewer full client +1 morePrivilege Escalation via Insecure Package Handling in TeamViewer Full Client and Host for macOS7.8 High
- teamviewer full clientOut-of-bounds Write in TeamViewer Full Client for Linux and macOS Allows Remote Code Execution8.8 High
- a2aproject a2a-javaa2aproject a2a-java TaskManager.saveTaskEvent race condition5.3 Medium
- a2aproject a2a-javaa2aproject a2a-java Push Notification Config Store JpaDatabasePushNotificationConfigStore.java InMemoryPushNotificationConfigStore.setInfo resource consumption5.3 Medium
- getgrav gravGrav from 1.7.53.3 before 1.7.53.6 Clockwork Profiler Authorization Bypass via Loopback Fallback8.7 High
- a2aproject a2a-javaa2aproject a2a-java ChildQueue queue.offer resource consumption5.3 Medium
- kgs software tia viewerStored XSS in KGS Software tia Viewer5.1 Medium
- mozilla firefoxFrame poisoning in the Layout component9.1 Critical
- mozilla firefox, thunderbird +1 moreInvalid pointer in the JavaScript: GC component8.8 High
- mozilla firefox, thunderbird +1 moreOther issue in the SVG component8.8 High
- mozilla firefox, thunderbird +1 moreUse-after-free in the Graphics: Text component8.8 High
- mozilla firefox, thunderbird +1 moreSandbox escape due to use-after-free in the Graphics: WebRender component8.8 High
- mozilla firefox, thunderbird +1 moreSandbox escape due to use-after-free in the Disability Access APIs component8.8 High
- mozilla firefox, thunderbird +1 moreSandbox escape due to use-after-free in the XPCOM component8.8 High
- mozilla firefox, thunderbird +1 moreUse-after-free in the Layout component8.8 High
- mozilla firefox, thunderbird +1 moreRace condition, use-after-free in the DOM: File component8.8 High
- mozilla firefoxSpoofing issue in the Downloads component in Firefox for Android8.8 High
- mozilla firefox, thunderbird +1 moreUse-after-free in the SVG component8.8 High
- mozilla firefox, thunderbird +1 moreUse-after-free in the DOM: Core & HTML component8.8 High
- mozilla firefox, thunderbird +1 moreUse-after-free in the DOM: Core & HTML component8.8 High
- mozilla firefox, thunderbird +1 moreUse-after-free in the JavaScript Engine: JIT component8.8 High
- mozilla firefox, thunderbird +1 moreUse-after-free in the Layout: Images, Video, and HTML Frames component8.8 High
- mozilla firefox, thunderbird +1 moreUse-after-free in the DOM: Animation component8.8 High
- mozilla firefox, thunderbird +1 moreFrame poisoning in the CSS Parsing and Computation component8.8 High
- mozilla firefox, thunderbird +1 moreUse-after-free in the Disability Access APIs component8.8 High
- mozilla firefox, thunderbird +1 moreInteger overflow, use-after-free in the Graphics: Text component8.8 High
- mozilla firefox, thunderbird +1 morePrivilege escalation in the DOM: Navigation component8.8 High
- mozilla firefox, thunderbird +1 moreUse-after-free in the JavaScript: GC component8.8 High
- mozilla firefox, thunderbird +1 morePrivilege escalation due to use-after-free in the WebRTC: Signaling component8.8 High
- mozilla firefox, thunderbird +1 moreUse-after-free in the WebRTC: Signaling component8.8 High
- mozilla firefox, thunderbird +1 moreIncorrect boundary conditions in the CSS Transitions and Animations component8.1 High
- Show moreLoading…