CVEs published in October 2026
17,265 vulnerabilities, 1,627 critical, 21 exploited.
- scribusScribus before 1.6.7 and 1.7.x before 1.7.4 Heap Buffer Overflow via PICT Pixmap Loader8.5 High
- scribusScribus before 1.6.7 and 1.7.x before 1.7.4 Heap Out-of-Bounds Write via PSD Image Loader8.5 High
- liquid web / stellarwp the events calendarWordPress The Events Calendar plugin <= 6.18.2 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- crocoblock jetformbuilderWordPress JetFormBuilder plugin <= 3.6.7.1 - Content Injection vulnerability5.3 Medium
- webba appointment booking bookingWordPress Webba Booking plugin <= 6.5.4 - Broken Access Control vulnerability5.4 Medium
- tenda w18eCVE-2026-1182387.2 High
- liquid web / stellarwp the events calendarWordPress The Events Calendar plugin <= 6.18.2 - Broken Access Control vulnerability5.3 Medium
- crocoblock jetformbuilderWordPress JetFormBuilder plugin <= 3.6.7.1 - Broken Access Control vulnerability5.3 Medium
- collaboraonline onlineCollabora Online: Read-only session authorization bypass permits live document edits4.3 Medium
- collaboraonline onlineCollabora Online: Reflected HTML injection through host_session_id4.7 Medium
- google cloud application integrationUnsafe Java Deserialization in Application Integration SubWorkflow tasks allows Remote Code Execution9.4 Critical
github.com/charmbracelet/soft-serveGocharmbracelet/soft-serve: Race in `SetPrivate` leaves a private repository readable by unauthenticated users5.9 Medium- socfortress copilotSOCFortress CoPilot: Authentication Bypass and Missing Authorization on Velociraptor Sigma Exclusion Rules (Detection Suppression)7.5 High
github.com/charmbracelet/soft-serveGocharmbracelet/soft-serve HTTP responses disclose the existence and names of private repositories5.3 Medium- arraytics timeticsWordPress Timetics plugin <= 1.0.65 - Broken Access Control vulnerability5.3 Medium
- liquid web / stellarwp the events calendarWordPress The Events Calendar plugin <= 6.18.2 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- creative themes blocksy companionWordPress Blocksy Companion plugin <= 2.1.60 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- socfortress copilotSOCFortress CoPilot: Arbitrary Host File Write as Root via Path Traversal in the ScoutSuite GCP Report Upload (RCE)10.0 Critical
- huajian123 ng-antd-adminng-antd-admin: Hardcoded JWT Secret allows Authentication Bypass in ng-antd-admin9.8 Critical
- chamilo chamilo-lmsChamilo LMS: Conditional PHP execution through vendored QuickForm eval6.6 Medium
- chamilo chamilo-lmsChamilo LMS: CSRF in destructive skill-management AJAX actions6.5 Medium
- chamilo chamilo-lmsChamilo LMS: Database-backed PHP object injection in career deserialization7.5 High
- chamilo chamilo-lmsChamilo LMS: Stored XSS in public user-profile fields8.9 High
- socfortress copilotSOCFortress CoPilot: Unauthenticated Exposure of ScoutSuite Reports and Uploaded GCP Service-Account Key via Static Mount9.3 Critical
- socfortress copilotSOCFortress CoPilot: Hardcoded Default Header Secret - Unauthenticated Active-Response Invocation and Alert Injection9.4 Critical
- netsweeperNetsweeper < 4.0.11 / 4.1.5 Reflected XSS via view_server_log.php5.1 Medium
- dedecmsDedeCMS < 5.7 File Inclusion via plus/carbuyaction.php8.7 High
- socfortress copilotSOCFortress CoPilot: Stored comment and SOC-field XSS permits privileged account takeover9.9 Critical
- qt frameworkOut-of-bounds write vulnerability in the assimp scene import plugin of Qt3D impacts Qt Framework4.3 Medium
- manageengine sharepoint manager plusImproper Access Control in Multi-Factor Authentication (MFA) Functionality in ManageEngine SharePoint Manager Plus7.9 High
- socfortress copilotSOCFortress CoPilot: Cross-Tenant Arbitrary Object-Store Write via the Data-Store Upload Endpoint (customer_user)8.5 High
- givanz vvvebVvveb: Authenticated IDOR on admin/auth-token Allows Admin Privilege Escalation via API Token Theft9.0 Critical
- givanz vvvebVvveb: Authentication Bypass via PHP Array Injection leading to full Account Takeover9.8 Critical
- mgdaaslab wharttestWHartTest 2.2.0 through 2.8.1 Missing Authorization via task_center Scheduled-Task APIs5.3 Medium
- wannabespace tameryTamery (Conar) 0.26.1 before 0.99.0 Authorization Bypass via chatsMessages.update5.3 Medium
- wannabespace tameryTamery (Conar) 0.32.0 before 0.99.0 Broken Authorization via connectionsResources.create5.3 Medium
- songloft-org songloftSongloft 2.9.0 before 2.13.6 Hardcoded Admin Credentials in Embedded Backend8.7 High
- star7th showdocShowDoc through 3.9.5 Authorization Bypass via paramDescLib deleteEntries2.3 Low
- yincongcyincong musebotMuseBot before 2.0.0 Authentication Bypass via Hard-Coded Session Key9.3 Critical
- blossom-editor blossomBlossom through 1.17.1 Authorization Bypass via Folder Endpoints5.3 Medium
- powerdns-adminPowerDNS-Admin through 2026.08.1 Authorization Bypass via /domain/<domain_name>/update5.3 Medium
- zyx0814 filepressFilePress through 3.0.1 Missing Authorization in PicHome Library Folder Operations2.3 Low
- coreshopCoreShop through 1.5.5 SQL Injection via order Parameter in Agent/GetGoodsPageList8.7 High
- coreshopCoreShop through 1.5.5 SQL Injection via order Parameter in GetGoodsPageList8.7 High
- devlive-community datacapDataCap through 2025.1.1 Privilege Escalation via allocationRole Missing Authorization8.7 High
- admpub ngingNging through 5.3.5 Directory Listing Disclosure via /user/autocomplete_path5.3 Medium
- hulaspark hula-serverHuLa-Server through 3.0.7 IDOR via /user/friend/page Friend List Disclosure5.3 Medium
- hulaspark hula-serverHuLa-Server through 3.0.7 IDOR via /feed/del Moment Deletion5.3 Medium
- hulaspark hula-serverHuLa-Server through 3.0.7 IDOR via /privacy Endpoint in PrivacyController5.3 Medium
- orchardcms orchardOrchard CMS 1.10.3 through 1.11 Improper Authorization via Media Library Folder Permission Check7.1 High
- Show moreLoading…