|
cve-2026-100251
|
|
Wormhole.app SSRF
|
Wormhole App
|
Wormhole
|
2026-10-01T19:44:16.396Z |
2026-10-11T17:05:29.805Z |
|
cve-2026-93832
|
4.8 (v4.0)
4.4 (v3.1)
|
A component of one of the Motorola system applica…
|
Motorola
|
Setup App
|
2026-10-01T19:44:12.321Z |
2026-10-01T19:52:06.748Z |
|
cve-2026-102671
|
|
Joyland AI WebView accepts invalid SSL certificates
|
Joyland
|
Joyland.ai
|
2026-10-01T19:43:44.950Z |
2026-10-11T17:05:29.924Z |
|
cve-2026-102670
|
|
Joyland AI enables HTTP
|
Joyland
|
Joyland.ai
|
2026-10-01T19:43:27.462Z |
2026-10-11T17:05:30.134Z |
|
cve-2026-102669
|
|
Joyland AI hostname checking disabled
|
Joyland
|
Joyland.ai
|
2026-10-01T19:43:07.283Z |
2026-10-11T17:05:30.781Z |
|
cve-2026-54049
|
|
Sakai Conversations has a Stored XSS Issue
|
sakaiproject
|
sakai
|
2026-10-01T19:42:50.422Z |
2026-10-06T02:08:38.936Z |
|
cve-2026-102668
|
|
Joyland AI accepts TLS certificates without validation
|
Joyland
|
Joyland.ai
|
2026-10-01T19:42:45.753Z |
2026-10-07T15:52:15.252Z |
|
cve-2026-102667
|
|
Joyland AI WebView command injection
|
Joyland
|
Joyland.ai
|
2026-10-01T19:42:24.250Z |
2026-10-07T15:52:15.403Z |
|
cve-2026-82358
|
|
RT-Labs AB C-Open CANopen SDO Server Write Protection Bypass
|
RT-Labs AB
|
C-Open
|
2026-10-01T19:42:16.559Z |
2026-10-07T15:52:15.539Z |
|
cve-2026-102666
|
|
Joyland AI hard-coded credentials for push notifications
|
Joyland
|
Joyland.ai
|
2026-10-01T19:41:54.776Z |
2026-10-07T15:52:15.669Z |
|
cve-2026-82357
|
|
RT-Labs AB C-Open CANopen NULL pointer dereference
|
RT-Labs AB
|
C-Open
|
2026-10-01T19:41:47.996Z |
2026-10-07T15:52:15.802Z |
|
cve-2026-71542
|
|
GetSimple CMS: Stored Cross-Site Scripting (XSS) via t…
|
GetSimpleCMS-CE
|
GetSimpleCMS-CE
|
2026-10-01T19:40:04.001Z |
2026-10-01T19:51:29.324Z |
|
cve-2026-71426
|
|
GetSimple CMS: Authenticated Stored Local File Inclusi…
|
GetSimpleCMS-CE
|
GetSimpleCMS-CE
|
2026-10-01T19:39:29.439Z |
2026-10-01T19:52:46.391Z |
|
cve-2026-70650
|
|
GetSimple CMS: Authenticated Stored XSS in backup view…
|
GetSimpleCMS-CE
|
GetSimpleCMS-CE
|
2026-10-01T19:39:00.958Z |
2026-10-05T20:54:32.693Z |
|
cve-2026-56662
|
|
GetSimple CMS: Missing CSRF protection in UpdateCE all…
|
GetSimpleCMS-CE
|
GetSimpleCMS-CE
|
2026-10-01T19:38:30.623Z |
2026-10-06T02:07:29.187Z |
|
cve-2026-56661
|
|
GetSimple CMS: Server-Side Request Forgery in the Upda…
|
GetSimpleCMS-CE
|
GetSimpleCMS-CE
|
2026-10-01T19:38:08.498Z |
2026-10-01T19:50:54.335Z |
|
cve-2026-56660
|
|
GetSimple CMS: CSRF, SSRF, and Unrestricted Zip Extraction
|
GetSimpleCMS-CE
|
GetSimpleCMS-CE
|
2026-10-01T19:37:46.187Z |
2026-10-01T19:54:11.631Z |
|
cve-2026-53953
|
|
GetSimple CMS: Predictable Password Reset Password All…
|
GetSimpleCMS-CE
|
GetSimpleCMS-CE
|
2026-10-01T19:36:17.930Z |
2026-10-05T20:58:22.799Z |
|
cve-2026-104286
|
9.8 (v3.1)
|
An improper limitation of a pathname to a restric…
|
Fortinet
|
FortiMail
|
2026-10-01T19:17:38.938Z |
2026-10-28T17:10:14.979Z |
|
cve-2026-27872
|
5.6 (v4.0)
|
EasyIO FG
|
Johnson Controls
|
Easy IO FG
|
2026-10-01T18:57:16.163Z |
2026-10-01T21:38:28.271Z |
|
cve-2026-84682
|
7.7 (v4.0)
|
TDDPv2 setProductVer Command Injection in Archer AX90
|
TP-Link Systems Inc.
|
Archer AX90 v1
|
2026-10-01T18:48:42.953Z |
2026-10-23T16:43:53.663Z |
|
cve-2026-55232
|
|
Vvveb: Server-side request forgery in Vvveb via IPv6 b…
|
givanz
|
Vvveb
|
2026-10-01T18:43:19.102Z |
2026-10-06T02:06:14.962Z |
|
cve-2026-55230
|
|
Vvveb: Stored XSS in Vvveb via sanitizeHTML() filter b…
|
givanz
|
Vvveb
|
2026-10-01T18:42:50.082Z |
2026-10-01T19:23:19.200Z |
|
cve-2026-55231
|
|
Vvveb: Path traversal in Vvveb via sanitizeFileName() …
|
givanz
|
Vvveb
|
2026-10-01T18:42:39.182Z |
2026-10-01T18:59:51.696Z |
|
cve-2026-15911
|
7.4 (v3.1)
|
Confluent Kafka Python Improper TLS Certificate Validation
|
confluent
|
confluent-kafka
|
2026-10-01T18:29:42.297Z |
2026-10-06T02:01:13.972Z |
|
cve-2026-104059
|
7 (v4.0)
8.1 (v3.1)
|
Lektor 3.3.14 CSRF via Admin API Endpoints
|
lektor
|
lektor
|
2026-10-01T18:17:39.168Z |
2026-10-13T11:20:53.724Z |
|
cve-2026-8618
|
7.7 (v4.0)
|
Pre-Authentication Stack-based Buffer Overflow Remote …
|
TP-Link Systems Inc.
|
Deco M9 Plus V2
|
2026-10-01T18:16:32.107Z |
2026-10-01T18:36:18.919Z |
|
cve-2026-104058
|
6.3 (v4.0)
5.3 (v3.1)
|
Podgrab Missing Authentication on WebSocket /ws Endpoint
|
akhilrex
|
podgrab
|
2026-10-01T18:12:05.779Z |
2026-10-13T11:20:53.067Z |
|
cve-2026-104057
|
8.7 (v4.0)
7.5 (v3.1)
|
Podgrab Unauthenticated DoS via Concurrent Map Access …
|
akhilrex
|
podgrab
|
2026-10-01T18:04:01.135Z |
2026-10-13T11:20:52.409Z |
|
cve-2026-104056
|
N/A
|
CVE-2026-104056
|
Authlib
|
Authlib
|
2026-10-01T18:03:27.484Z |
2026-10-05T18:21:14.480Z |