CVEs published in October 2026
17,265 vulnerabilities, 1,627 critical, 21 exploited.
- drupal commerce stripeCommerce Stripe - Moderately critical - Cross site scripting - SA-CONTRIB-2026-2655.1 Medium
- drupal commerce stripeCommerce Stripe - Moderately critical - Improper verification of cryptographic signature - SA-CONTRIB-2026-2645.3 Medium
- drupal commerce stripeCommerce Stripe - Critical - Cross-site request forgery - SA-CONTRIB-2026-2637.3 High
- drupal commerce shippingCommerce Shipping - Less critical - Access bypass - SA-CONTRIB-2026-2622.7 Low
- drupal commerce shippingCommerce Shipping - Moderately critical - Access bypass - SA-CONTRIB-2026-2616.5 Medium
- drupal commerce licenseCommerce License - Moderately critical - Access bypass - SA-CONTRIB-2026-2606.3 Medium
- drupal commerce coreCommerce Core - Moderately critical - Information disclosure - SA-CONTRIB-2026-2593.7 Low
- drupal commerce coreCommerce Core - Moderately critical - Cross-site request forgery - SA-CONTRIB-2026-2585.3 Medium
- drupal commerce coreCommerce Core - Moderately critical - Access bypass - SA-CONTRIB-2026-2572.7 Low
- drupal commerce coreCommerce Core - Less critical - Access bypass - SA-CONTRIB-2026-2564.3 Medium
- drupal commerce coreCommerce Core - Moderately critical - Information disclosure - SA-CONTRIB-2026-2555.3 Medium
- drupal commerce coreCommerce Core - Highly critical - Access bypass - SA-CONTRIB-2026-2546.5 Medium
- ultralyticsUltralytics Google Drive Download Path Traversal Remote Code Execution Vulnerability8.8 High
- ultralyticsUltralytics parse_model Code Injection Remote Code Execution Vulnerability7.8 High
- ultralyticsUltralytics load_dataset_cache_file Deserialization of Untrusted Data Remote Code Execution Vulnerability7.8 High
- ultralyticsUltralytics parse_model Code Injection Remote Code Execution Vulnerability7.8 High
- ultralyticsUltralytics torch_safe_load Command Injection Remote Code Execution Vulnerability7.8 High
- ultralyticsUltralytics check_det_dataset Code Injection Remote Code Execution Vulnerability7.8 High
- ultralyticsUltralytics torch_load Deserialization of Untrusted Data Remote Code Execution Vulnerability7.8 High
- mongodb java driverNoSQL injection via mismatched BSON size prefix in raw document splice to the wire protocol6.9 Medium
- alpine ilx-f511Alpine iLX-F511 Bluetooth OBEX Packet Handling Heap-based Buffer Overflow Remote Code Execution Vulnerability6.8 Medium
- alpine ilx-f511Alpine iLX-F511 Android Auto Service Stack-based Buffer Overflow Remote Code Execution Vulnerability8.8 High
- alpine ilx-f511Alpine iLX-F511 Android Auto Connection Handler Stack-based Buffer Overflow Remote Code Execution Vulnerability6.8 Medium
- alpine ilx-f511Alpine iLX-F511 libanwbtstack.so prh_rfcomm_cc_process_test Out-Of-Bounds Read Information Disclosure Vulnerability3.5 Low
- alpine ilx-f511Alpine iLX-F511 diagapp Command Injection Vulnerability6.8 Medium
- grafana enterprise, oss +1 moreSSO settings authorization bypass8.9 High
- alpine ilx-f511Alpine iLX-F511 Framework Service Exposed Dangerous Function Remote Code Execution Vulnerability8.8 High
- alpine ilx-f511Alpine iLX-F511 prh_sdp_service_search_decode Stack-based Buffer Overflow Remote Code Execution Vulnerability8.0 High
- grafana oss, enterprise +1 moreServer-side expression parser denial of service6.5 Medium
- alpine ilx-f511Alpine iLX-F511 Framework Service Stack-based Buffer Overflow Remote Code Execution Vulnerability6.8 Medium
- alpine ilx-f511Alpine iLX-F511 vCard Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability8.0 High
- alpine ilx-f511Alpine iLX-F511 Fiv.System Exposed Dangerous Method Local Privilege Escalation Vulnerability7.8 High
- alpine ilx-f511Alpine iLX-F511 SSH Hard-Coded Credentials Remote Code Execution Vulnerability6.3 Medium
- grafana enterprise, oss +1 moreAzure Monitor access token disclosure via SSRF7.7 High
- grafana enterprise, oss +1 moreAlerting contact point authorization bypass via schema downgrade7.7 High
- jenkins project jenkinsJenkins 2.587 and earlier, LTS 2.580.1 and earlier improperly identifies file paths attempting...4.3 Medium
- jenkins project jenkinsA missing permission check in Jenkins 2.587 and earlier, LTS 2.580.1 and earlier allows attackers...4.3 Medium
- jenkinsJenkins 2.587 and earlier, LTS 2.580.1 and earlier does not consistently enforce the restriction...8.8 High
- jenkinsJenkins 2.587 and earlier, LTS 2.580.1 and earlier does not escape the text shown in the tooltips...5.4 Medium
- jenkinsJenkins 2.587 and earlier, LTS 2.580.1 and earlier allows agents to send exceptions implementing...6.1 Medium
- jenkinsJenkins 2.587 and earlier, LTS 2.580.1 and earlier computes on the agent the URL of the link...6.1 Medium
- jenkinsJenkins 2.587 and earlier, LTS 2.580.1 and earlier allows attackers with Overall/Read permission...8.8 High
- jenkinsJenkins 2.587 and earlier, LTS 2.580.1 and earlier allows requests authenticated using HTTP Basic...8.1 High
- jenkinsIn Jenkins 2.587 and earlier, LTS 2.580.1 and earlier, the HTTP endpoint for creating the first...8.1 High
- jenkinsJenkins 2.587 and earlier, LTS 2.580.1 and earlier checks for symbolic links in the path of an...8.1 High
- jenkinsJenkins 2.587 and earlier, LTS 2.580.1 and earlier provides an HTTP endpoint that loads agents by...8.8 High
- jenkinsJenkins 2.587 and earlier, LTS 2.580.1 and earlier follows symbolic links when copying the...6.5 Medium
- jenkinsJenkins 2.587 and earlier, LTS 2.580.1 and earlier converts the launch commands in older agent...8.8 High
- jenkinsJenkins 2.587 and earlier, LTS 2.580.1 and earlier does not restrict item types in collections...5.4 Medium
- jenkinsJenkins 2.587 and earlier, LTS 2.580.1 and earlier does not apply its deserialization filter to...8.8 High
- Show moreLoading…