|
cve-2026-84900
|
6.8 (v4.0)
|
HP ThinPro 8.1 SP10 and ThinPro 9 SP3 Security Updates
|
HP Inc
|
ThinPro 8.1
|
2026-10-05T20:28:48.572Z |
2026-10-06T13:57:48.597Z |
|
cve-2026-77226
|
9.2 (v4.0)
8.1 (v3.1)
|
Camunda 7.24.0 < 7.24.15 Incorrect Authorization via S…
|
Camunda
|
Camunda 7
|
2026-10-05T20:26:01.427Z |
2026-10-07T17:08:06.546Z |
|
cve-2026-105698
|
|
Langflow: Cross-user flow access and vertex execution …
|
langflow-ai
|
langflow
|
2026-10-05T20:20:27.287Z |
2026-10-06T13:58:36.614Z |
|
cve-2026-105768
|
6.3 (v4.0)
|
apko /etc/passwd and /etc/group UID/GID truncation wri…
|
chainguard-dev
|
apko
|
2026-10-05T20:17:46.477Z |
2026-10-06T13:59:32.353Z |
|
cve-2026-105697
|
|
Langflow: OS command injection (RCE) via arbitrary com…
|
langflow-ai
|
langflow
|
2026-10-05T20:16:58.291Z |
2026-10-09T19:55:07.117Z |
|
cve-2026-93326
|
6 (v4.0)
|
Crafted Git build source can bypass certain policy val…
|
moby
|
BuildKit
|
2026-10-05T20:13:27.383Z |
2026-10-06T13:48:34.715Z |
|
cve-2026-105696
|
|
Penpot: Share-link page-scope escalation: a share-link…
|
penpot
|
penpot
|
2026-10-05T20:05:30.908Z |
2026-10-06T16:45:27.145Z |
|
cve-2026-105695
|
|
Penpot: Missing authorization in chunked-upload assemb…
|
penpot
|
penpot
|
2026-10-05T20:04:22.743Z |
2026-10-05T20:40:42.567Z |
|
cve-2026-105694
|
|
Penpot: Stored XSS via Unsanitised SVG Uploads
|
penpot
|
penpot
|
2026-10-05T20:02:03.834Z |
2026-10-08T02:25:00.547Z |
|
cve-2026-105693
|
|
Penpot: Anonymous share-link token disclosure & page-s…
|
penpot
|
penpot
|
2026-10-05T19:56:47.826Z |
2026-10-06T13:46:48.161Z |
|
cve-2026-71297
|
5.4 (v3.1)
|
Maestro: maestro: grpc broker has no auth interceptor …
|
Red Hat
|
Multicluster Engine for Kubernetes
|
2026-10-05T19:55:49.523Z |
2026-10-06T14:49:48.215Z |
|
cve-2026-105692
|
|
Penpot: IDOR in Share-Link Deletion Allows Any File Ed…
|
penpot
|
penpot
|
2026-10-05T19:55:36.410Z |
2026-10-06T14:50:12.248Z |
|
cve-2026-105691
|
|
Penpot: Authenticated OS Command Injection in Penpot S…
|
penpot
|
penpot
|
2026-10-05T19:53:54.552Z |
2026-10-06T16:47:15.701Z |
|
cve-2026-105690
|
|
Penpot: Server-side session not invalidated on logout;…
|
penpot
|
penpot
|
2026-10-05T19:52:08.973Z |
2026-10-05T20:42:46.327Z |
|
cve-2026-105689
|
|
Penpot: SSRF guard bypass via IPv6 transition addresse…
|
penpot
|
penpot
|
2026-10-05T19:51:04.208Z |
2026-10-08T02:23:53.207Z |
|
cve-2026-105688
|
|
Penpot: Team admin can escalate to owner via team invi…
|
penpot
|
penpot
|
2026-10-05T19:50:01.439Z |
2026-10-06T13:45:35.634Z |
|
cve-2026-105687
|
|
Penpot: A team admin (non-owner) can remove the team o…
|
penpot
|
penpot
|
2026-10-05T19:49:04.308Z |
2026-10-06T14:50:36.034Z |
|
cve-2026-105767
|
2.1 (v4.0)
3.3 (v3.1)
|
Chainguard Academy (edu) integrate-platform-docs compo…
|
Chainguard
|
Chainguard Academy (edu)
|
2026-10-05T19:48:47.712Z |
2026-10-06T14:14:31.450Z |
|
cve-2026-105686
|
|
Penpot: Repeated chunk index causes temporary-storage …
|
penpot
|
penpot
|
2026-10-05T19:47:56.283Z |
2026-10-06T16:49:35.404Z |
|
cve-2026-105766
|
2.3 (v4.0)
3.1 (v3.1)
|
Chainguard Academy (edu) Nginx directory redirect down…
|
Chainguard
|
Chainguard Academy (edu)
|
2026-10-05T19:45:50.015Z |
2026-10-06T13:44:09.303Z |
|
cve-2026-105392
|
|
Lybbn Django-Vue-Lyadmin JWT Signing settings.py hard-…
|
Lybbn
|
Django-Vue-Lyadmin
|
2026-10-05T19:45:12.468Z |
2026-10-06T17:21:01.014Z |
|
cve-2026-105684
|
|
Penpot: Share-link page-scope escape — comment RPCs le…
|
penpot
|
penpot
|
2026-10-05T19:44:07.526Z |
2026-10-05T20:32:28.848Z |
|
cve-2026-105683
|
|
Ghost: Path Traversal Vulnerability in Ghost ImageSize…
|
TryGhost
|
Ghost
|
2026-10-05T19:31:28.855Z |
2026-10-08T02:22:24.684Z |
|
cve-2026-105389
|
|
feelec-yishu feelcrm-os UploadTicketFile Endpoint Uplo…
|
feelec-yishu
|
feelcrm-os
|
2026-10-05T19:30:12.153Z |
2026-10-07T21:45:38.153Z |
|
cve-2026-105682
|
|
Ghost: Server-Side Request Forgery in Webhook Trigger
|
TryGhost
|
Ghost
|
2026-10-05T19:29:22.093Z |
2026-10-06T13:42:38.251Z |
|
cve-2026-105681
|
|
Ghost: Authorization Bypass in Comments Feature
|
TryGhost
|
Ghost
|
2026-10-05T19:27:11.677Z |
2026-10-06T14:51:00.582Z |
|
cve-2026-105680
|
|
Ghost: Authorization Issue Allowed Author Role to Dele…
|
TryGhost
|
Ghost
|
2026-10-05T19:24:51.756Z |
2026-10-06T16:51:07.157Z |
|
cve-2026-105679
|
|
Ghost: Stored XSS via File Uploads on Local Storage
|
TryGhost
|
Ghost
|
2026-10-05T19:22:40.737Z |
2026-10-05T19:51:20.951Z |
|
cve-2026-105678
|
|
Ghost: Editors Could Promote Staff Users to Their Own Role
|
TryGhost
|
Ghost
|
2026-10-05T19:20:36.210Z |
2026-10-07T21:44:35.429Z |
|
cve-2026-94201
|
8.2 (v4.0)
|
Filtering an :atom attribute with unsafe_to_atom? can …
|
ash-project
|
ash
|
2026-10-05T19:19:51.326Z |
2026-10-06T13:41:22.142Z |