CVEs published in October 2026
17,265 vulnerabilities, 1,627 critical, 21 exploited.
- apache software foundation kafkaApache Kafka: Denial of service via unbounded memory allocation when decoding compressed record batches6.5 Medium
- apache software foundation kafkaApache Kafka: Unauthorized principal can read arbitrary broker files via IncrementalAlterConfigs6.5 Medium
- apache software foundation kafkaApache Kafka: Kafka Connect configuration provider values exposed via validation REST API endpoint8.1 High
- apache software foundation kafkaApache Kafka: Connect Admin REST API Authentication Bypass via Unapplied REST Extensions8.8 High
- apache software foundation kafkaApache Kafka: Denial of service in Kafka Streams and client deserializers via unbounded memory allocation7.5 High
- apache software foundation kafkaApache Kafka: Kafka Streams StreamThread hang from integer overflow in stream-time punctuation9.1 Critical
- apache software foundation kafkaApache Kafka: Broker OutOfMemoryError via tagged-field allocation amplification in flexible protocol request parsing9.1 Critical
- apache software foundation kafkaApache Kafka: Broker OutOfMemoryError via array allocation amplification in code-generated protocol readers9.1 Critical
- apache software foundation kafkaApache Kafka: PushTelemetry (KIP-714) metrics payloads are decompressed without a size limit, allowing a broker out-of-memory denial of service6.5 Medium
- juniper networks session smart conductor, session smart router +1 moreSession Smart Router and Session Smart Conductor: Improper validation of a field causes privilege escalation when updating the YANG configuration8.8 High
- apache software foundation kafkaApache Kafka: Broker silently skips JWT signature verification for SASL/OAUTHBEARER when the JWKS endpoint URL is not configured9.1 Critical
- juniper networks session smart routerSession Smart Router: A malicious DHCP server causes information disclosure and a service crash during DHCP option parsing7.1 High
- apache software foundation kafkaApache Kafka: Broker does not enforce JWT issuer and audience validation for SASL/OAUTHBEARER by default5.9 Medium
- apache software foundation kafkaApache Kafka: Incorrect boolean operator in FetchSnapshot RPC handler allows authenticated network clients to crash the KRaft controller via a malformed request.6.5 Medium
- juniper networks session smart routerSession Smart Router: Integer overflow causes denial of service during TLS certificate inspection7.5 High
- juniper networks session smart routerSession Smart Router: An attacker obtains administrative privileges when an unauthenticated internal endpoint is accessed9.8 Critical
- juniper networks session smart routerSession Smart Router: An attacker-controlled input causes remote code execution when parsing DHCP options8.8 High
- juniper networks session smart conductor, session smart router +1 moreSession Smart Router and Session Smart Conductor: Unsanitized input allows arbitrary file read, overwrite, or deletion via the PKI management8.8 High
- juniper networks session smart conductorSession Smart Conductor: An unauthenticated attacker causes arbitrary command execution during key management.9.8 Critical
- juniper networks session smart conductor, session smart router +1 moreSession Smart Router and Session Smart Conductor: Unsanitized input causes HTTP response splitting5.8 Medium
- juniper networks session smart conductorSession Smart Conductor: Insecure file permissions cause unauthorized access to sensitive routing credentials6.8 Medium
- juniper networks session smart conductor, session smart router +1 moreSession Smart Router and Session Smart Conductor: Unvalidated input causes arbitrary file deletion and command execution when deleting audit rules8.8 High
- juniper networks session smart conductor, session smart router +1 moreSession Smart Router and Session Smart Conductor: Lack of integrity verification in cache files causes arbitrary code execution and privilege escalation8.8 High
- juniper networks session smart conductor, session smart router +1 moreSession Smart Router and Session Smart Conductor: An attacker can overwrite arbitrary files as root8.8 High
- juniper networks session smart conductor, session smart router +1 moreSession Smart Router and Session Smart Conductor: Crafted directory names cause arbitrary filesystem unmounting during service cleanup5.5 Medium
- juniper networks session smart routerSession Smart Router: An incomplete operator causes the use of incorrect encryption keys during security policy updates.3.7 Low
- juniper networks session smart routerSession Smart Router: An attacker can cause an out-of-bounds read during VRRP packet processing4.3 Medium
- juniper networks session smart routerSession Smart Router: A SACK option causes out-of-bounds memory access and TCP payload corruption when TCP sequence stitching is enabled4.8 Medium
- juniper networks session smart routerSession Smart Router: An attacker-controlled TCP option causes an out-of-bounds write when using the TCP proxy feature5.3 Medium
- juniper networks session smart conductor, session smart router +1 moreSession Smart Router and Session Smart Conductor: A malformed HTTP URI causes a service crash during HTTP application identification5.3 Medium
- mongodb laravel mongodbLaravel MongoDB `whereDoesntHave` misses deny records for numeric string IDs7.7 High
- fogprojectFOG: Authenticated low-privileged API user can modify Storage Nodes and reach root command execution8.8 High
- n-romanovich usb-testUSB Test: Heap-based Buffer Overflow in getSectorSize via untrusted DISK_GEOMETRY.BytesPerSector leads to RCE/DoS7.0 High
- simulationcraft simcSimulationCraft: Heap-Based Buffer Overflow / Out-of-Bounds Write in SimulationCraft's gem_id Array7.5 High
epiphanyopenSUSEepiphany-51.1-1.1 on GA mediaNo score- yosemitecrew yosemite-crewYosemiteCrew: Missing organization authorization on service and PMS library/template routes8.3 High
- xibosignage xibo-cmsXibo: IDOR (Broken Object-Level Authorization) on GET /layout/status/{id} Allows Arbitrary Layout Metadata Disclosure5.4 Medium
- aws aws-sdk-pandasUnverified ownership of the default Athena query result location in AWS SDK for pandas5.9 Medium
- xibosignage xibo-cmsXibo: Missing Authorization on POST /displaygroup/criteria/{displayGroupId} Allows Arbitrary Scheduling Criteria Injection to Player Devices4.3 Medium
- gfi usa, llc kerioconnectGFI KerioConnect KOFF < 10.0.9p2 Privilege Escalation8.5 High
- xibosignage xibo-cmsXibo: Missing Object-Level Authorization on /notification/export/{id} Allows Authenticated Users to Download Arbitrary Attachments6.5 Medium
- gfi usa, llc kerioconnectGFI KerioConnect < 10.0.9p2 XSS via Link Auto-Formatter5.1 Medium
- saturday drive ninja formsNinja Forms WordPress Plugin < 3.15.4 Server-Side Validation Bypass via List Fields5.1 Medium
- openvpn ovpn-dco-winOpenVPN ovpn-dco-win 0.6.5 through 2.8.13 allows unprivileged local users to cause a denial of...5.7 Medium
- stepasyuk filter everything — wordpress & woocommerce filtersWordPress Filter Everything — WordPress & WooCommerce Filters plugin <= 1.9.7 - PHP Object Injection vulnerability7.2 High
- ultimate member memberWordPress Ultimate Member plugin <= 2.13.1 - PHP Object Injection vulnerability9.8 Critical
- advanced ads gmbh ads – trackingWordPress Advanced Ads – Tracking plugin < 4.0.0 - SQL Injection vulnerability8.5 High
- crossi72 phoenix media renameWordPress Phoenix Media Rename plugin <= 3.13.5 - PHP Object Injection vulnerability8.8 High
- dokan, inc. dokanWordPress Dokan plugin <= 5.3.1 - PHP Object Injection vulnerability7.2 High
- mtrudel banditHTTP/2 request bodies made of 1-byte DATA frames amplify memory use in Bandit8.7 High
- Show moreLoading…