CVEs published in October 2026
17,265 vulnerabilities, 1,627 critical, 21 exploited.
- apereo foundation openequellaUnauthenticated IDOR Enables Disclosure of Other Users’ last-known details6.9 Medium
- apereo foundation openequellaXML External Entity (XXE) Injection in Metadata Field Allows Arbitrary File Read7.1 High
- apereo foundation openequellaXML External Entity (XXE) Vulnerability in SOAP Interface Allows External Entity Expansion6.1 Medium
- apereo foundation openequellaUnrestricted Command Execution via system.execute9.4 Critical
- apereo foundation openequellaStored XSS via Pre-Login Notice Image Upload Serves Attacker HTML from Application Origin4.8 Medium
- samsung mobile bixbyImproper input validation in Bixby prior to version 4.0.85.6 allows privileged local attackers to...8.3 High
- apple container, containerization +1 moreAn attacker who controls the registry, a mirror, or the network path to it may be able to serve arbitrary image content in response to a pull by digest, so that a user runs an image other than the one…5.6 Medium
- nipy nibabelnipy nibabel Header volumeutils.py array_from_file memory allocation6.9 Medium
- No product listedThe WIFI4 N300 router (Model: T1 Pro) v1.0.0 by U-speed contains an insecure access control flaw...9.8 Critical
- No product listedOpenBMB XAgent v1.0.0 contains directory traversal vulnerability in main-upload_file-the...9.8 Critical
- No product listedTransformerOptimus SuperAGI v0.0.14 is vulnerable to Incorrect Access Control in...8.8 High
- No product listedSuperAGI v0.0.14 contains an improper access control vulnerability in...8.1 High
- No product listedSuperAGI up to v0.0.14 contains an improper access control vulnerability. The agent controller...6.5 Medium
- No product listedDB-GPT v0.7.5 and 0.8.0 contains directory traversal in use_example_file (packages/dbgpt-app/src...9.1 Critical
- No product listedmodelscope agent-zero 1.7, 1.8, 1.9, and 1.10 is vulnerable to Directory Traversal in python...7.5 High
- No product listedAn issue in IDrive IDrive Backup for Windows Version 7.0.1.1 and below affected, remediated in...7.8 High
- No product listedAn issue in IDrive IDrive Backup for Windows Version 7.0.1.1 and below affected, remediated in...7.8 High
- No product listedInsecure permissions in Tailscale versionCode 297862600 allows unauthorized attackers to make...9.1 Critical
- No product listedAn issue in Nextcloud versionCode 30390190 allows attackers to force victim users to logout of...7.5 High
- No product listedAn issue in Shelter versionCode 445 allows attackers to register their own auth_key and execute a...9.8 Critical
- No product listedAn issue in AndBible versionCode 1111 allows attackers to execute arbitrary code via uploading a...9.8 Critical
- No product listedInsecure permissions in the io.file.importer.ImportActivity component of OpenTracks versionCode...9.1 Critical
- No product listedInsecure permissions in the autosave component of AppML neutriNote CE versionCode 1387 allows...7.5 High
- No product listedInsecure permissions in foobnix Librera PDF Reader versionCode 7222 allows unauthorized attackers...9.1 Critical
- No product listedInsecure permissions in the AIDL interface of ProjectMAXS MAXS Module FileRead versionCode 27...7.5 High
- No product listedInsecure permissions in klassm AndFHEM v2.4.1 (versionCode 241, the verified build) allows...7.5 High
retroarchUbuntuAn issue in libretro RetroArch v1.22.2 allows attackers to force another user into loading...9.8 Critical- No product listedAn issue in Forkyz versionCode 8500000 allows attackers to arbitrarily change another user's...7.5 High
- No product listedAn issue in the WebView rendering path component of MotionCreative Motion UI versionCode 101...9.8 Critical
- No product listedInsecure permissions in mendhak GPSLogger versionCode 137 allows unauthorized attackers to...7.5 High
- No product listedA Server-Side Request Forgery (SSRF) in the url/title/author/coverUrl component of FocusPodcast...5.3 Medium
- No product listedInsecure permissions in the CitrineContentProvider component of Citrine v3.1.0 (versionCode 62)...9.1 Critical
- No product listedInsecure permissions in ProjectMAXS MAXS Main v0.5.19 (versionCode 19) allows unauthorized...7.5 High
- No product listedInsecure permissions in Code Catcher versionCode 131 allow unauthorized attackers to arbitrarily...9.1 Critical
- No product listedInsecure permissions in USP Ultimate Screenshot Painter versionCode 240213.009 allows...7.5 High
- No product listedInsecure permissions in the FeatureActionActivity component of Oasis Feng Island versionCode...7.5 High
- No product listedInsecure permissions in MBasov OMN-Go versionCode 26080824 allows unauthorized attackers to...9.1 Critical
- No product listedInsecure permissions in the ActivityMain component of M66B/Marcel Bokhorst NetGuard no-root...7.5 High
- No product listedInsecure permissions in Yet Another UPnP Controller versionCode 50200 allows unauthorized...9.1 Critical
- No product listedInsecure permissions in the NotificationHelper component of NoNonsense Notes versionCode 72600...7.5 High
- No product listedInsecure permissions in Mission Control / AIMSICD versionCode 2026080501 allows unauthorized...5.1 Medium
- No product listedInsecure permissions in the object/Page.java component of MBasov OMN Outline notes Markdown...6.5 Medium
- No product listedInsecure permissions in LeafPad / Leaf Note v1.21 (versionCode 21) allows unauthorized attackers...9.1 Critical
- No product listedInsecure permissions in the MirakelInternalContentProvider component of Mirakel v3.0 (versionCode...6.5 Medium
- No product listedInsecure permissions in Bulk Share : Location Sender v2.1.0 (versionCode 5) allows unauthorized...9.1 Critical
- No product listedInsecure permissions in craftxbox YubiClip XOR fork v1.0.1 (versionCode 10003) allows...7.5 High
- No product listedInsecure permissions in rubenalfon Pile v1.1.3 allows unauthorized attackers to invoke an...9.1 Critical
- No product listedInsecure permissions in wbpxre150 Shopping List v11.0 (versionCode 11) allows unauthorized...9.1 Critical
- No product listedInsecure permissions in lz233 Tarnhelm v1.8.2 (versionCode 20250630) allows unauthorized...9.1 Critical
- No product listedInsecure permissions in Share to Clipboard v1.14.1 (versionCode 32) allows unauthorized attackers...7.5 High
- Show moreLoading…