CVEs published in October 2026
17,265 vulnerabilities, 1,627 critical, 21 exploited.
- jgraph drawio-desktopdraw.io Desktop allows Windows executable search-path hijacking7.8 High
- axiom-crypto snark-verifierSNARK Verifier: noncanonical accumulator limb decoding6.9 Medium
- ladybirdLadybird: FinalizationRegistry::cleanup() heap use-after-free via reentrant unregister()8.8 High
- seancorfield honeysqlHoneySQL unchecked entity names can lead to SQL injection results9.8 Critical
- ladybirdLadybird: Missing origin-clean enforcement in CSSStyleSheet allows cross-origin CSS read and mutation7.1 High
- pgadmin 4, pgadmin.org pgadmin 4 +1 morepgAdmin 4: Materialized view refresh redirects its connection through a crafted database name7.1 High
- pgadmin 4, pgadmin.org pgadmin 4 +1 morepgAdmin 4: A user's other sessions survive a change of their password2.3 Low
- pgadmin 4, pgadmin.org pgadmin 4 +1 morepgAdmin 4: Files opened in a storage directory follow a symbolic link, hard link or FIFO planted after the containment check7.3 High
- pgadmin 4, pgadmin.org pgadmin 4 +1 morepgAdmin 4: Connection file paths and parameter keys escape the user's storage directory7.2 High
- pgadmin 4, pgadmin.org pgadmin 4 +1 morepgAdmin 4: Non-administrators can share a server with every user6.0 Medium
- pgadmin 4, pgadmin.org pgadmin 4 +1 morepgAdmin 4: libpq uses the pgAdmin service account's own password file and client certificate7.1 High
- pgadmin 4, pgadmin.org pgadmin 4 +1 morepgAdmin 4: Server passwords are left in pgAdmin's process environment7.0 High
- pgadmin 4, pgadmin.org pgadmin 4 +1 morepgAdmin 4: Connection services are not restricted in server mode7.1 High
- pgadmin 4, pgadmin.org pgadmin 4 +1 morepgAdmin 4: libpq uses the pgAdmin service account's Kerberos credentials7.1 High
- pgadmin 4, pgadmin.org pgadmin 4 +1 morepgAdmin 4: Utility binary path can point at a shared storage directory7.7 High
- pgadmin 4, pgadmin.org pgadmin 4 +1 morepgAdmin 4: SSH tunnels use the pgAdmin service account's own SSH identity7.1 High
- pgadmin 4, pgadmin.org pgadmin 4 +1 morepgAdmin 4: Import/Export Data query export runs a command through a backslash in a double-quoted identifier9.4 Critical
- pgadmin 4, pgadmin.org pgadmin 4 +1 morepgAdmin 4: File Manager and storage-path tools act on a different path from the one checked7.1 High
- pgadmin 4, pgadmin.org pgadmin 4 +1 morepgAdmin 4: An LDAP or Kerberos login is logged in to another account with the same username8.9 High
- pgadmin 4, pgadmin.org pgadmin 4 +1 morepgAdmin 4: The failed login limit can be bypassed, and Flask-Security's own views skip pgAdmin's login and password checks9.2 Critical
- lejamon go-xrplgo-xrpl: ParseMPTAmountBinary: positive MPT amount silently decoded as negative (int64 wrap)3.7 Low
- immich-app immichImmich: A regular user can create SharedLink for album/asset belonging to another user through CreateSharedLink API3.5 Low
- immich-app immichImmich: Partner "view-only" sharing leaks GPS coordinates of the sharer's archived assets via GET /api/map/markers4.3 Medium
- immich-app immichImmich: Unauthenticated filesystem path injection (arbitrary directory write + recursive delete) in the machine-learning service6.5 Medium
- delinea secret server (on-prem)Secret Server Authentication Bypass via Unauthenticated Pin Code Reset and Brute Force9.9 Critical
- delinea secret server (on-prem)Secret Server JWT issuance error8.7 High
- delinea secret server (on-prem)Secret Server device validation error9.4 Critical
- akuity kargoKargo: Privilege escalation via Project RBAC management in the Kargo API9.3 Critical
- madeofpendletonwool pinepodsPinePods: Authenticated SSRF via podcast RSS enclosure URL (server-side fetch of attacker-controlled URL, no host validation)9.1 Critical
- franklioxygen mytubeMyTube: Unauthenticated Media Access via Static Routes Bypassing Login8.7 High
- franklioxygen mytubeMyTube: Visitor Can Access Hidden Video Metadata and Content7.1 High
- kohler hotcrpHotCRP: comment-author search exposes anonymous commenter identities6.5 Medium
- osac-project osac-operatorOSAC operator: Kubeconfig credential-plugin execution and SSRF in console proxy8.6 High
- maxthon technology limited browser for androidMaxthon Browser for Android < 7.5.8.103 Fullscreen Address Bar Spoofing5.1 Medium
- thalesgroup sentinel keys serverUnauthenticated Stack Buffer Overflow in Sentinel Keys Server9.3 Critical
- thalesgroup sentinel keys serverStack Buffer Overflow in Sentinel Keys Server7.3 High
- wit synapps runtimeWIT SynApps Runtime 1.4.11 Browser-Mediated SSRF via Controller Onboarding5.3 Medium
- mtzanidakis praktorpraktor: Telegram upload traversal permits persistent agent instruction injection8.2 High
- wit synapps runtimeWIT SynApps Runtime 1.4.11 Reflected XSS via LINK Parameter5.1 Medium
- wit synapps runtimeWIT SynApps Runtime 1.4.11 Hardcoded OAuth Credentials Disclosure6.9 Medium
- pistacheio pistachePistache: DoS via stack exhaustion in REST router path normalization (regex_replace on long slash runs)5.9 Medium
- mouse07410 asn1casn1c: ASAN crash with decode of open types0.0 None
- adminneo-org adminneoAdminNeo: version-cache array injection causes persistent denial of service7.5 High
- nezhahq nezhaNezha 2.0.0 before 2.4.0 Startup NULL Pointer Dereference via Orphaned Service History6.0 Medium
- nodebbNodeBB 1.18.0 through 4.16.5 Authorization Bypass via /register/complete uid6.9 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreGst-plugins-base: gst-plugins-base: null-pointer dereference in mdvdsub subtitle parser via missing closing-brace check6.5 Medium
- red hat enterprise linux 10, enterprise linux 7, enterprise linux 8 +1 more +3 moreGst-plugins-bad: gst-plugins-bad: h.265 sps scc palette predictor array overflow via integer underflow in bounds computation6.5 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreGst-plugins-base: gst-plugins-bad: gst-plugins-base/gst-plugins-bad: integer overflow in av1 leb128 parser allows denial of service6.5 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +2 more +4 moreGst-plugins-bad: gst-plugins-bad: null pointer dereference in h.264 mvc sps cleanup during parse failure6.5 Medium
- stylemix masterstudy lmsWordPress MasterStudy LMS plugin <= 3.7.55 - PHP Object Injection vulnerability8.8 High
- Show moreLoading…