CVEs published in October 2026
17,265 vulnerabilities, 1,627 critical, 21 exploited.
- tencentblueking bk-cmdbBlueKing CMDB through 3.14.6 Missing Authorization via /api/v3/hosts/search/asstdetail5.3 Medium
- dromara ruoyi-vue-plusRuoYi-Vue-Plus through 6.0.0 Data-Scope Bypass via /system/user/list/dept/{deptId}5.3 Medium
- open web analytics web analytics, openwebanalytics open web analytics +1 moreOpen Web Analytics before 1.14.1 Cross-Site Data Disclosure via REST Report API5.3 Medium
- easysoft zentaopmsZenTao PMS through 22.6 Missing Authorization via doc.ajaxGetDoc7.1 High
- blossom-editor blossomBlossom through 1.17.1 Authorization Bypass via Picture Delete and Star Endpoints5.3 Medium
- manageengine sharepoint manager plusStored Cross-Site Scripting (XSS) in SharePoint Manager Plus Chart Feature8.5 High
- basecamp once-campfireCampfire vulnerable to SSRF via incomplete private-network denylist in the link-unfurl guard3.1 Low
- themeum kirkiKirki WordPress Plugin < 6.2.5 reCAPTCHA Bypass via Missing Token6.9 Medium
- themeum kirkiKirki WordPress Plugin < 6.4.1 Broken Object-Level Access Control via Page API7.2 High
- red hat build of apache camel 4 for quarkus 3, data grid 8, fuse 7 +2 more +4 moreOrg.infinispan/infinispan-query: infinispan: deeply nested ickle queries can trigger a stackoverflowerror4.3 Medium
- dell openmanage enterpriseDell OpenManage Enterprise, versions prior to 4.8.0, contains an Use of Hard-coded Cryptographic...7.3 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +3 more +5 moreGimp: gimp: stack buffer overflow in psd image resource header loader7.8 High
- dell openmanage enterpriseDell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of...8.8 High
- dell openmanage enterpriseOpenManage Enterprise, versions prior to 4.8.0, contains an Improper Resource Locking...4.7 Medium
- crypttech crypto and informatics technologies industry and trade inc. vatos dlpClear Text Storage of Password in Crypttech's Vatos DLP7.1 High
- dell openmanage enterpriseDell OpenManage Enterprise, versions prior to 4.8.0, contains an Incorrect Permission Assignment...5.5 Medium
- dell openmanage enterpriseDell OpenManage Enterprise, versions prior to 4.8.0, contains an Authentication Bypass by...7.1 High
- dell openmanage enterpriseDell OpenManage Enterprise, versions prior to 4.8.0, contains a Missing Authentication for...5.4 Medium
- gnome epiphanyepiphany: TLS certificate warning bypass via race in tlsErrorPage message handler6.8 Medium
- dell openmanage enterpriseDell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of...6.8 Medium
- espressif esp-protocolsespressif/mdns has Uncontrolled Recursion in mDNS Name Decompression6.5 Medium
- kyz libmspacklibmspack through 0.11alpha Uninitialized Memory Disclosure via MS-ZIP Decompressor Window6.3 Medium
- sshock afflibAFFLIB through 3.7.22 Heap Out-of-Bounds Write in af_get_page6.9 Medium
- simsong tcpflowtcpflow < 1.7.0 Out-of-Bounds Read via TCP Demultiplexer Payload Length6.3 Medium
- looplj axonhubAxonHub through 1.0.0-beta11 Privilege Escalation via Service Account API Key Scopes5.3 Medium
- iluobei miaomiaowuMiaomiaowu before 0.9.3 Cross-User Proxy Provider Config Disclosure via external_subscription_id5.3 Medium
- aidotnet opendeepwikiOpenDeepWiki through 2.0.6 Hard-coded JWT Signing Key Admin Token Forgery9.3 Critical
- hdinnovations unit3dUNIT3D through 9.2.0 Private Playlist Disclosure via Playlist Zip Download5.3 Medium
- project-monai monaiMONAI 1.6.0 before 1.6.1 Code Execution via Auto3DSeg algo_from_json()8.5 High
- arcadedata arcadedbArcadeDB before 26.10.2 Improper Session Revocation in Wire-Protocol Connections7.6 High
- arcadedata arcadedbArcadeDB from 21.12.1 before 26.10.2 GraphQL Schema Replacement via Read-Only Query Endpoint5.3 Medium
- arcadedata arcadedbArcadeDB 26.8.1 before 26.10.2 SSRF via ALTER DATABASE LOAD CSV Block List7.1 High
- traefikTraefik 3.2.0 before 3.7.15 FastProxy Data Race Denial of Service8.2 High
- traefikTraefik 3.7.11 before 3.7.15 Cross-Namespace Authorization Bypass via auth-tls-secret2.1 Low
- traefikTraefik 3.7.0-ea.1 before 3.7.15 mTLS Bypass via Ingress NGINX Provider7.0 High
- parse-community parse-serverParse Server 9.7.0 before 9.10.5-alpha.10 Installation Update Misdirection via Installation ID6.3 Medium
- parse-community parse-serverParse Server 9.7.0 before 9.10.5-alpha.7 Protected Field Exposure in Save Responses2.3 Low
- parse-community parse-serverParse Server 9.0.0 before 9.10.5-alpha.9 Prototype Pollution Denial of Service6.0 Medium
- No product listedCallBackery versions before 0.62.0 for Perl allow session cookie forgery via a signing secret generated with rand()7.5 High
- No product listedCallBackery versions before 0.62.0 for Perl accept session cookies of any age sent in the X-Session-Cookie header5.3 Medium
- No product listedCallBackery versions before 0.62.0 for Perl leave a world-readable dump of the configuration database in /tmp when taking a configuration backup5.5 Medium
- No product listedCallBackery versions before 0.62.0 for Perl encrypt configuration backups with the padded password as the AES key7.5 High
- No product listedCallBackery versions before 0.62.0 for Perl allow OS command execution via sqlite3 shell commands in a restored configuration backup8.4 High
- No product listedCallBackery versions before 0.62.0 for Perl allow denial of service via the request path interpolated as a regular expression under CGI, FastCGI and PSGI7.5 High
- No product listedCallBackery versions before 0.62.0 for Perl allow log injection via newlines in the login name9.8 Critical
- No product listedCallBackery versions before 0.62.0 for Perl accept unintended values in form fields checked by createRxValidator9.1 Critical
- No product listedCallBackery versions before 0.62.0 for Perl send users their own password hash and the admin-only user note via getUserConfig4.9 Medium
- No product listedCallBackery versions before 0.62.0 for Perl store user passwords as unsalted HMAC-SHA1 hashes7.5 High
- No product listedBusiness::GoCardless versions before 1.01 for Perl complete redirect flows without checking the session token, letting a leaked redirect flow ID create payments against another customer's mandate6.1 Medium
- No product listedBusiness::GoCardless versions before 1.01 for Perl accept forged webhooks when a configured webhook secret is undef or empty7.5 High
- Show moreLoading…