CVEs published in October 2026
17,265 vulnerabilities, 1,627 critical, 21 exploited.
- tanium enforceTanium addressed a denial of service vulnerability in Enforce.6.5 Medium
- tanium endpoint configuration toolset solution, performance-cx +1 moreTanium addressed an uncontrolled resource consumption vulnerability in Performance Client Extension.5.5 Medium
- tanium enforceTanium addressed an improper access controls vulnerability in Enforce.4.3 Medium
- tanium enforceTanium addressed an improper output sanitization vulnerability in Enforce.7.1 High
- tanium complyTanium addressed an improper output sanitization vulnerability in Comply.7.1 High
- tanium serverTanium addressed an incorrect privilege assignment vulnerability in Tanium Server.6.6 Medium
- tanium endpoint configuration toolset solution, threat-response-cx +1 moreTanium addressed an information disclosure vulnerability in Threat Response Client Extension.3.6 Low
- tanium cx-stream, endpoint configuration toolset solution +1 moreTanium addressed an improper certificate validation vulnerability in Stream Client Extension.6.5 Medium
- tanium enforceTanium addressed a denial of service vulnerability in Enforce.5.3 Medium
- tanium endpoint configuration toolset solution, threat-response-cx +1 moreTanium addressed a use-after-free vulnerability in Threat Response Client Extension.2.5 Low
- tanium endpoint configuration toolset solution, index-cx +1 moreTanium addressed a heap-based buffer overflow vulnerability in Index.7.8 High
- m1k1o nekoNeko: Authorization bypass in legacy WebRTC input handling5.4 Medium
- tanium enforceTanium addressed a compression bomb vulnerability in Enforce.7.5 High
- tanium serverTanium addressed a denial of service vulnerability in Tanium Server.5.3 Medium
- tanium end-user-cx, endpoint configuration toolset solution +1 moreTanium addressed a local privilege escalation vulnerability in End-User Notifications.7.8 High
- tanium endpoint configuration toolset solution, threat-response-cx +1 moreTanium addressed an infinite loop vulnerability in Threat Response Client Extension.3.3 Low
- tanium provisionTanium addressed a SQL injection vulnerability in Provision.6.5 Medium
- tanium patchTanium addressed a SQL injection vulnerability in Patch.6.5 Medium
- oretnom23 php-travel-agency-systemoretnom23 php-travel-agency-system Contact Form contact_insert.php sql injection6.9 Medium
- tanium threat responseTanium addressed an insertion of sensitive information into log file vulnerability in Threat Response.4.2 Medium
- dani-garcia vaultwardenVaultwarden: Icon endpoint SSRF fix bypass via second-stage favicon IP literal URLs5.8 Medium
- gnupgCVE-2026-1181319.8 Critical
- openwisp openwisp-controllerOpenWISP Controller CA CRL REST API does not scope requests to managed organizations5.3 Medium
- grafana enterprise, oss +1 moreCVE-2026-16491 CVE Record6.5 Medium
- oretnom23 php-travel-agency-systemoretnom23 php-travel-agency-system traceapplication.php sql injection6.9 Medium
- runatlantis atlantisAtlantis: OS command injection through PR-controlled Terraform workspace enables RCE during plan8.8 High
hydra-corePyPIHydra legacy target blacklist permits unsafe PyYAML loading7.8 High- adobe campaign classicAdobe Campaign Classic (ACC) | Incorrect Authorization (CWE-863)9.9 Critical
- adobe campaign classicAdobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78)9.9 Critical
- adobe campaign classicAdobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)9.9 Critical
- adobe campaign classicAdobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)10.0 Critical
- adobe campaign classicAdobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)9.1 Critical
- adobe campaign classicAdobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)9.1 Critical
- adobe campaign classicAdobe Campaign Classic (ACC) | Improper Control of Generation of Code ('Code Injection') (CWE-94)9.9 Critical
- adobe campaign classicAdobe Campaign Classic (ACC) | Cross-site Scripting (Reflected XSS) (CWE-79)9.3 Critical
- oretnom23 php-travel-agency-systemoretnom23 php-travel-agency-system Admin Record Pages customer_detail.php sql injection6.9 Medium
- asterisk, asterisk certified-asterisk +1 moreAsterisk: Possible RED T.140 Generation Accumulation OOB Write2.3 Low
- asterisk, asterisk certified-asterisk +1 moreAsterisk: Stack Buffer Overflow in H.323 ooTrace() via Unbounded vsprintf into Fixed 2048-byte Buffer7.5 High
- the epics community epics baseAccess of resource using incompatible type ('type confusion') in EPICS Base8.7 High
- hclsoftware notes clienteMudhra Compromised Certificate vulnerability impacts HCL Notes Client9.1 Critical
- asterisk, asterisk certified-asterisk +1 moreAsterisk: chan_unistim DIALPAGE digit handling can overflow phone_number and crash Asterisk5.9 Medium
- the epics community epics baseImproper handling of length parameter inconsistency in EPICS Base8.7 High
- the epics community epics baseInteger overflow or wraparound in EPICS Base8.8 High
- the epics community epics baseInteger overflow or wraparound in EPICS Base9.3 Critical
- asterisk, asterisk certified-asterisk +1 moreAsterisk: Possible RED T.140 Heap Buffer Overflow2.3 Low
- tinymceTinyMCE Cross-Site Scripting (XSS) vulnerability using media plugin `data-mce-object` serialization8.5 High
- oretnom23 php-travel-agency-systemoretnom23 php-travel-agency-system Admin Search Pages customer_search.php sql injection6.9 Medium
- sebhildebrandt systeminformationsysteminformation: Prototype pollution in `networkStats()` via the interface name6.5 Medium
- asterisk, asterisk certified-asterisk +1 moreAsterisk: Buffer over-read in Asterisk PJSIP MWI body parser6.5 Medium
i18nextRoot,@rootio/i18nextRoot +1 moreAIKIDO-2026-227399 in i18next - Patched by RootNo score- Show moreLoading…