CVEs published in October 2026
17,265 vulnerabilities, 1,627 critical, 21 exploited.
- python software foundation cpythonLenient parsing of integers for response body and chunk framing2.0 Low
- mlflowMLflow CrewAI autologging records LLM provider API keys in logged trace spans6.5 Medium
- sunhillo surelineSunhillo SureLine Authentication Bypass via Session Cookie9.1 Critical
- sunhillo surelineSunhillo SureLine OS Command Injection via networkDiag.cgi8.7 High
- sunhillo surelineSunhillo SureLine Path Traversal via radarUpdater.cgi8.7 High
- mlflowMLflow: Arbitrary file read on unauthenticated MLflow servers via prompt model version source7.5 High
- follow-redirectsfollow-redirects: Cross-realm sensitiveHeaders arrays are discarded and custom credentials can follow redirects5.9 Medium
- ckeditor ckeditor5CKEditor: Cross-site scripting (XSS) in the engine package8.1 High
- ckeditor ckeditor5CKEditor: Cross-site scripting (XSS) in the engine package3.1 Low
- modelcontextprotocol python-sdkModel Context Protocol Python SDK: Client fetched server-chosen $ref URLs while validating tool results against output schemas6.5 Medium
- modelcontextprotocol python-sdkModel Context Protocol Python SDK: HTTP client transports followed cross-origin redirects carrying custom headers and bodies5.9 Medium
- membershipworksMembershipWorks WordPress Plugin < 6.17 Information Disclosure via WordPress REST API8.7 High
- modelcontextprotocol python-sdkModel Context Protocol Python SDK: Server bearer-token authentication accepts tokens issued for a different resource server6.8 Medium
- ctfer-io terraform-provider-ctfdCTFer.io's CTFd Terraform Provider allows a local or remote attacker to read team passwords in state as non sensitive values7.1 High
- mozilla thunderbirdMatrix homeserver could redirect the chat session to a local file or network share7.5 High
- mozilla thunderbirdRequest forgery via news: links8.8 High
- mozilla thunderbirdRSS feed could redirect its subscription to a local file or network share5.7 Medium
- mozilla thunderbirdCalendar discovery accepted local file and remote network share locations9.1 Critical
- mozilla thunderbirdBypass of remote UNC path restriction in mailbox: URLs8.1 High
- mozilla thunderbirdContent of other messages could be included when replying to a crafted message7.5 High
- mozilla thunderbirdDisplaying a message could load an attacker-chosen URL through an OpenPGP key attachment6.5 Medium
- misp misp-guardMISP Guard Incomplete Tag Validation Allows Non-Allowed Taxonomy Tags to Bypass Feed Policy Enforcement6.1 Medium
- aws aws-api-mcp-serverAWS API MCP Server OAuth Token Audience Validation Bypass7.3 High
- strapi open source and enterprise headless cmsCVE-2026-1181716.5 Medium
- strapi open source and enterprise headless cmsCVE-2026-1181726.1 Medium
- strapi open source and enterprise headless cmsCVE-2026-1181709.1 Critical
- asterisk, asterisk certified-asterisk +1 moreAsterisk: ARI setChannelVar bypasses live_dangerously and permits FILE() writes8.1 High
- asterisk, asterisk certified-asterisk +1 moreAsterisk: Stack buffer overflow in res_xmpp XMPP namespace prefix handling7.1 High
- gtsteffaniak filebrowserFileBrowser Quantum: Symlink following escapes user scope allowing arbitrary file read outside the served directory8.6 High
- reduxjs redux-devtoolsreduxjs redux-devtools Remotedev Server evalAction code injection4.8 Medium
- sysadminsmedia homeboxHomebox generic notifier SSRF via HTTP redirect after URL validation6.4 Medium
- tp-link systems inc. re305 v3Unauthenticated Wireless Regulatory Region Configuration in TP-Link RE3055.3 Medium
- tp-link systems inc. re305 v3Command Injection in tmpServer Allows Local Privilege Escalation in TP-Link RE3056.9 Medium
- tp-link systems inc. re305 v3Improper Authentication in TP-Link TDDP v2 Allows Root Command Execution in TP-Link RE3058.7 High
- tp-link systems inc. re305 v3Administrator Password Reset Through the Verification-Code Interface in TP-Link RE3056.1 Medium
- tp-link systems inc. archer c7 v5, re305 v3 +1 moreHardcoded AES-128 Key and Fixed IV in Configuration Backup Encryption in TP-Link RE305 and Archer C76.9 Medium
- chatgptnextweb nextchatCVE-2026-1181326.1 Medium
- tanium serverTanium addressed an information disclosure vulnerability in Tanium Server.4.3 Medium
- tanium serverTanium addressed an insufficient logging vulnerability in Tanium Server.2.7 Low
- tanium certificate managerTanium addressed an unauthorized code execution vulnerability in Certificate Manager.8.8 High
- tanium enforceTanium addressed an uncontrolled resource consumption vulnerability in Enforce.4.3 Medium
- tanium enforceTanium addressed an uncontrolled resource consumption vulnerability in Enforce.7.5 High
- tanium reputationTanium addressed an insertion of sensitive information into log file vulnerability in Reputation.6.6 Medium
- tanium end-user-cx, endpoint configuration toolset solution +1 moreTanium addressed a local privilege escalation vulnerability in End-User Notifications.7.8 High
- tanium complyTanium addressed an improper access controls vulnerability in Comply.4.3 Medium
- tanium endpoint configuration toolset solution, threat-response-cx +1 moreTanium addressed an improper link resolution before file access vulnerability in Threat Response Client Extension.6.3 Medium
- tanium threat responseTanium addressed an unauthorized code execution vulnerability in Threat Response.8.8 High
- tanium end-user-cx, endpoint configuration toolset solution +1 moreTanium addressed a local privilege escalation vulnerability in End-User Notifications.7.8 High
- tanium complyTanium addressed an improper access controls vulnerability in Comply.6.0 Medium
- tanium provisionTanium addressed a denial of service vulnerability in Provision.7.5 High
- Show moreLoading…