CVEs published in October 2026
17,265 vulnerabilities, 1,627 critical, 21 exploited.
- gopacketgopacket: SCTP chunk sub-decoder out-of-bounds panics on crafted segments5.9 Medium
- openstack keystonemiddlewareIn OpenStack keystonemiddleware before 13.0.2, by supplying a custom X-Service-Token header in a...8.3 High
buildahSUSESecurity update for buildahNo score- saad iqbal apiexperts square for woocommerceWordPress APIExperts Square for WooCommerce plugin <= 4.7.5 - Cross Site Request Forgery (CSRF) vulnerability5.4 Medium
- jordy meow ai engineWordPress AI Engine plugin <= 3.8.8 - Cross Site Request Forgery (CSRF) vulnerability8.8 High
- schollz croccroc: Overwrite-confirmation bypass via a crafted "croc-stdin-" filename on receive4.2 Medium
- aws aws-nitro-enclaves-sdk-cUnvalidated parent-supplied AWS Region in AWS aws-nitro-enclaves-sdk-c allows impersonation of the enclave's AWS KMS endpoint8.2 High
- suse rancherAuthorization bypass on the local cluster shell endpoint allows an unauthorized Rancher user to obtain a shell pod on the management cluster6.3 Medium
- liquid web / stellarwp event ticketsWordPress Event Tickets plugin <= 5.30.2 - Broken Access Control vulnerability4.3 Medium
- bplugins media player addons for elementor – media player widget for wpWordPress Media Player Addons for Elementor – Media Player widget for WP plugin <= 1.1.10 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- aws kmstool-enclaveUse-after-free in the SetClient command handler of kmstool-enclave in AWS aws-nitro-enclaves-sdk-c8.7 High
- liquid web / stellarwp the events calendarWordPress The Events Calendar plugin <= 6.18.2 - Broken Access Control vulnerability5.4 Medium
- bytebase dbhubDBHub: MySQL and MariaDB comment interpretation bypasses read-only SQL validation6.1 Medium
- zuke-build zukezuke setup and zuke import follow symbolic links planted at scaffold names, allowing writes outside the target directory5.5 Medium
- zuke-build zukeZuke: Resolved secret() values are written to GITHUB_STEP_SUMMARY in the clear, disclosing them to anyone who can view the workflow run7.5 High
- suse rancherCluster identity takeover in Fleet cluster registration allows access to another cluster's Fleet namespace7.9 High
- zuke-build zukeZuke: githubWorkflow adopts any workflow run whose title matches its marker, so anyone who can dispatch the workflow can satisfy or block a release gate7.1 High
- zuke-build zukeZuke: Argument injection on Windows: batch shims are launched through cmd.exe, which re-parses the command line7.0 High
- zuke-build zukeZuke: Command-form registry descriptors bypass the MCP launch policy8.0 High
- best practical solutions request trackerStored XSS via crafted URLs in HTML ticket content in Request Tracker5.3 Medium
- best practical solutions rt for incident responseStored XSS via related ticket subject on RTIR Split and Create Incident forms5.3 Medium
- wp email newsletter team - fluentcrm fluent crmWordPress Fluent CRM plugin <= 3.2.6 - Broken Access Control vulnerability5.4 Medium
- best practical solutions rt for incident responseStored XSS via HTML scrubber rule in RTIR5.3 Medium
- blenderBlender before 4.5.15 and 5.x before 5.2.3 Heap Out-of-Bounds Access via read_struct()8.5 High
- blenderBlender before 4.5.15 and 5.x before 5.2.3 Out-of-Bounds Read via blo_bhead_id Accessors6.9 Medium
- blenderBlender before 4.5.15 and 5.x before 5.2.3 Out-of-Bounds Read via GLOB Block6.8 Medium
- blenderBlender before 4.5.15 and 5.x before 5.2.3 Heap Buffer Overflow via Thumbnail Extraction8.5 High
- blenderBlender before 4.5.15 and 5.x before 5.2.3 Heap Buffer Overflow via Point Cache8.5 High
- up9inc pybars4, wbond pybars3 +1 morepybars3 through 0.9.7 and pybars4 through 0.9.13 Code Injection via Bracketed Path Segments9.3 Critical
- nocodbNocoDB before 2026.08.0 Clickjacking via Missing Frame-Control Headers5.3 Medium
- joedolson my calendar - accessible event managerMy Calendar 3.8.8 before 3.8.11 Unauthenticated Shortcode Injection via mcs Parameter6.9 Medium
- pipeshub-aiPipesHub before 0.10.0 SSRF via Image URLs in Indexed Documents5.3 Medium
- pipeshub-aiPipesHub before 0.10.0 Rate Limit Bypass via Spoofed X-Forwarded-For Header6.9 Medium
- pipeshub-aiPipesHub 0.3.0 before 0.10.0 Connector Deletion via Crawling-Manager Schedule Route7.1 High
- goniszewski grimoireGrimoire before 1.0.0 Unauthenticated SSRF via /api/fetch-metadata6.9 Medium
- colinin abp-next-adminabp-next-admin 10.4.0 through 10.7.0 Cross-Tenant File Disclosure via Blob Download-By-Name7.1 High
- sonicjs-org sonicjsSonicJS through 3.0.0 Missing Authorization in Content Write API7.1 High
- internlm lmdeployLMDeploy 0.9.0 through 0.18.0 Unauthenticated RCE via /update_weights Pickle Deserialization9.3 Critical
- towfiqi serpbearSerpBear before 3.1.1 Missing Authentication via POST /api/notify6.9 Medium
- bastillebsd bastilleBastille through 1.4.4 Jail Escape via Symlink Following in cp, rcp, jcp5.3 Medium
- xinnan-tech xiaozhi-esp32-serverxiaozhi-esp32-server through 0.9.8 Authentication Bypass via Spoofed Device-ID Header6.3 Medium
- wpgraphqlWPGraphQL before 2.24.1 Missing Authorization via createComment Mutation6.9 Medium
- wpgraphqlWPGraphQL before 2.24.1 Email Flooding via Aliased sendPasswordResetEmail Mutations6.9 Medium
- wpgraphqlWPGraphQL before 2.24.2 Object Existence Disclosure via Media and Comment Mutations6.9 Medium
- unknown wpgraphql smart cache, wpgraphql smart cache +1 moreWPGraphQL Smart Cache before 2.3.3 Unbounded Persisted Query Storage DoS6.9 Medium
- scribusScribus before 1.6.7 and 1.7.x before 1.7.4 Out-of-Bounds Memory Access via SVM Import Plugin8.5 High
- scribusScribus before 1.6.7 and 1.7.x before 1.7.4 Heap Buffer Overflow via PICT 4-bit Pixel Unpacking8.5 High
- scribusScribus before 1.6.7 and 1.7.x before 1.7.4 Heap Out-of-Bounds Write via Micrografx Draw Import8.5 High
- scribusScribus before 1.6.7 and 1.7.x before 1.7.4 Heap Overflow via TIFF Tile Buffer Handling8.5 High
- scribusScribus before 1.6.7 and 1.7.x before 1.7.4 Out-of-Bounds Read via PICT Planar Image Data6.9 Medium
- Show moreLoading…