CVEs published in October 2026
17,265 vulnerabilities, 1,627 critical, 21 exploited.
- c97net cart engine, kemana directory, qengine cms +2 moreC97net qEngine CMS through 6.0.0, Kemana Directory through 1.5.6, Cart Engine through 3.0.0 Local File Inclusion via admin/task.php7.1 High
- c97net cart engine, kemana directory, qengine cms +2 moreC97net qEngine CMS through 6.0.0, Kemana Directory through 1.5.6, Cart Engine through 3.0.0 Database Backup Exposure via /admin/backup8.2 High
- linksys wag200gLinksys WAG200G through 1.01.06 Stored XSS via policy_name Parameter4.8 Medium
- linksys wag200gLinksys WAG200G through 1.01.06 Admin Password Change Without Current Password7.0 High
- linksys wag200gLinksys WAG200G through 1.01.06 OS Command Injection via timer_interval in setup.cgi8.6 High
- a2ui-project a2uia2ui-project a2ui Error data-context.ts DataContext.dispatchExpressionError information exposure5.3 Medium
- artbees jupiter x coreJupiter X Core <= 4.61.0 - Unauthenticated Authentication Bypass via Twitter/X Social Login oauth_verifier Parameter9.8 Critical
- a2ui-project a2uia2ui-project a2ui data-context Resolver data-context.ts resource consumption5.3 Medium
- fasterxml jackson-databindjackson-databind: PolymorphicTypeValidator bypass via generic type arguments and array element types allows arbitrary class instantiation (incomplete fix for CVE-2026-54512)9.8 Critical
- fasterxml jackson-dataformat-protobufjackson-dataformat-protobuf: integer overflow in ProtobufParser._readStringKey() allows OutOfMemoryError from an 8-byte payload7.5 High
- fasterxml jackson-dataformat-smilejackson-dataformat-smile: unbounded eager byte[] allocation for raw binary in the async parser allows OutOfMemoryError denial of service7.5 High
- samba, red hat enterprise linux 10, enterprise linux 6 +5 more +7 moreSamba: access control bypass via vfs_ceph_rgw case-insensitive open8.1 High
- musl -libc muslmusl libc before 1.2.7, when an untrusted regular expression is used with regcomp, has multiple...8.1 High
msgpackUbuntuAn uncontrolled recursion in the MessagePack\BufferUnpacker::unpack() component of rybakit...7.5 High- No product listedAn integer overflow in the MessagePack\BufferUnpacker component of rybakit/msgpack v0.11.0 allows...7.5 High
libsolvopenSUSElibsolv-demo-0.7.41-1.1 on GA mediaNo scorelibsolvopenSUSElibsolv-demo-0.7.41-1.1 on GA mediaNo score- fasterxml jackson-dataformat-protobufjackson-dataformat-protobuf: signed integer overflow in string-length paths allows unbounded array allocation and OutOfMemoryError7.5 High
- jeremyckahn chitchatterjeremyckahn Chitchatter PostMessage Bootstrap.tsx isConfigMessageEvent improper authentication5.3 Medium
- google chromeUse after free in Animation in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to...8.8 High
- google chromeUse after free in WTF in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to...8.8 High
- google chromeMemory corruption in Skia in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to...4.3 Medium
- google chromeImproper input validation in SVG in Google Chrome prior to 156.0.8078.73 allowed a remote...8.8 High
- google chromeMemory corruption in Paint in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to...9.6 Critical
- google chromeImproper input validation in UI in Google Chrome on on Android prior to 156.0.8078.73 allowed a...9.6 Critical
- google chromeUse after free in FileSystem in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to...8.8 High
- google chromeUse after free in Modularization in Google Chrome prior to 156.0.8078.73 allowed a remote...8.8 High
- google chromeUse after free in Browser in Google Chrome on on Windows prior to 156.0.8078.73 allowed a remote...8.8 High
- google chromeImproper input validation in UI in Google Chrome on on Android prior to 156.0.8078.73 allowed a...8.8 High
- google chromeOut of bounds write in Editing in Google Chrome prior to 156.0.8078.73 allowed a remote attacker...9.6 Critical
- google chromeImproper input validation in Metrics in Google Chrome on on Mac prior to 156.0.8078.73 allowed a...8.8 High
- google chromeImproper input validation in Views in Google Chrome on on Windows prior to 156.0.8078.73 allowed...9.6 Critical
- google chromeUse after free in SVG in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to...9.6 Critical
- google chromeUse after free in Compositing in Google Chrome prior to 156.0.8078.73 allowed a remote attacker...8.8 High
- google chromeUse after free in PDFium in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to...8.8 High
- google chromeImproper input validation in V8 in Google Chrome prior to 156.0.8078.73 allowed a remote attacker...9.6 Critical
- google chromeUse after free in Video in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to...8.8 High
- google chromeImproper input validation in SVG in Google Chrome prior to 156.0.8078.73 allowed a remote...8.8 High
- google chromeImproper input validation in ReadingList in Google Chrome prior to 156.0.8078.73 allowed a remote...8.8 High
- google chromeUse after free in ImageCapture in Google Chrome prior to 156.0.8078.73 allowed a remote attacker...8.8 High
- google chromeImproper input validation in Compositing in Google Chrome prior to 156.0.8078.73 allowed a remote...9.6 Critical
- google chromeMemory corruption in Media in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to...8.8 High
- google chromeMemory corruption in V8 in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to...8.8 High
- google chromeUse after free in Paint in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to...8.8 High
- google chromeMemory corruption in Payments in Google Chrome prior to 156.0.8078.73 allowed a remote attacker...8.8 High
- google chromeMemory corruption in Media in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to...8.8 High
- google chromeMemory corruption in WebAudio in Google Chrome prior to 156.0.8078.73 allowed a remote attacker...8.8 High
- google chromeImproper input validation in Headless in Google Chrome prior to 156.0.8078.73 allowed a remote...8.8 High
- google chromeMissing authorization in Video in Google Chrome prior to 156.0.8078.73 allowed a remote attacker...9.3 Critical
- google chromeImproper input validation in WebRTC in Google Chrome prior to 156.0.8078.73 allowed a remote...8.8 High
- Show moreLoading…