Recent vulnerabilities


ID CVSS Description Vendor Product Published Updated
cve-2026-55083 DHIS2: Unsafe Java Deserialization - Remote Code Execu… dhis2
dhis2-core
2026-10-01T18:00:05.332Z 2026-10-01T18:30:36.526Z
cve-2026-102369 8.7 (v4.0) Unauthenticated Remote Code Execution via MacTool Comm… TP-Link Systems Inc.
Tapo C200 v5
2026-10-01T17:42:25.482Z 2026-10-01T18:08:05.015Z
cve-2026-78578 7.1 (v4.0) Unauthenticated do Method Onboarding Connect Allows Wi… TP-Link Systems Inc.
Tapo C200 v5
2026-10-01T17:42:05.535Z 2026-10-01T18:08:30.649Z
cve-2026-78577 5.3 (v4.0) Unauthenticated Onboarding Scan Information Disclosure… TP-Link Systems Inc.
Tapo C200 v5
2026-10-01T17:41:49.774Z 2026-10-01T18:08:59.956Z
cve-2026-9032 7.1 (v4.0) Unauthenticated Onboarding Connect NULL Pointer Derefe… TP-Link Systems Inc.
Tapo C200 V5
2026-10-01T17:41:31.004Z 2026-10-06T18:02:10.874Z
cve-2026-103923 KaTeX: Existing prototype pollution can bypass trust r… KaTeX
KaTeX
2026-10-01T17:37:47.953Z 2026-10-06T01:59:30.896Z
cve-2026-68496 7.5 (v3.1) jackson-dataformats-binary: Smile parser does not enfo… FasterXML
jackson-dataformats-binary
2026-10-01T17:36:57.760Z 2026-10-01T18:15:54.459Z
cve-2026-68495 7.5 (v3.1) jackson-dataformats-binary: CBOR parser does not enfor… FasterXML
jackson-dataformats-binary
2026-10-01T17:36:22.482Z 2026-10-01T18:16:39.815Z
cve-2026-104018 8.8 (v3.1) VxWorks 7 improper privilege management Wind River Systems Inc
VxWorks 7
2026-10-01T17:35:20.063Z 2026-10-02T03:55:35.132Z
cve-2026-97662 8.2 (v3.1) 6.9 (v4.0) Argument injection in the diff scan operation in AWS s… AWS
security-agent-mcp-server
2026-10-01T17:34:03.924Z 2026-10-09T16:31:43.908Z
cve-2026-102294 8.5 (v4.0) Authenticated OS Command Injection in TL-WR841N IPv6 W… TP-Link System Inc.
TL-WR841N v14
2026-10-01T17:30:19.919Z 2026-10-02T03:55:34.100Z
cve-2026-103922 Capacitor Android and iOS: remote content can be loade… ionic-team
capacitor
2026-10-01T17:27:05.758Z 2026-10-01T18:01:54.381Z
cve-2026-103884 6.5 (v3.1) Keycloak-services: keycloak-services: path traversal i… Red Hat
Red Hat build of Keycloak 26.6
2026-10-01T17:16:21.093Z 2026-11-06T17:34:35.718Z
cve-2026-56098 4.3 (v3.1) Rubygem-katello: improper authorization logic allows r… Red Hat
Red Hat Satellite 6.16 for RHEL 8
2026-10-01T17:14:56.199Z 2026-10-07T06:12:11.001Z
cve-2026-56097 6.5 (v3.1) Rubygem-katello: sql injection in registry proxy via labels Red Hat
Red Hat Satellite 6.16 for RHEL 8
2026-10-01T17:14:50.454Z 2026-11-03T18:19:36.979Z
cve-2026-12542 5.3 (v3.1) Foreman: command injection in foreman-tail Red Hat
Red Hat Satellite 6.16 for RHEL 8
2026-10-01T17:14:49.985Z 2026-11-02T18:49:01.393Z
cve-2026-12545 6.7 (v3.1) Rubygem-hammer_cli: command injection via insecure edi… Red Hat
Red Hat Satellite 6.16 for RHEL 8
2026-10-01T17:14:49.943Z 2026-11-02T18:49:01.503Z
cve-2023-54404 N/A {'providerMetadata': {'orgId': '83251b91-4cc7-4094-a5c7-464a1b83ea10', 'shortName': 'VulnCheck', 'dateUpdated': '2026-10-28T21:17:22.423Z'}, 'rejectedReasons': [{'lang': 'en', 'value': 'This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. The described memory use only grows in proportion to input already allocated by JSON.parse before Zod runs, is reachable only without an application request-size limit, and reflects expected validator behavior rather than a defect in Zod.', 'supportingMedia': [{'type': 'text/html', 'base64': False, 'value': 'This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. The described memory use only grows in proportion to input already allocated by JSON.parse before Zod runs, is reachable only without an application request-size limit, and reflects expected validator behavior rather than a defect in Zod.'}]}], 'x_generator': {'engine': 'vulncheck'}} N/A N/A 2026-10-01T17:11:13.762Z 2026-10-28T21:17:22.423Z
cve-2026-73976 djehuty: Unauthenticated SPARQL injection in the searc… 4TUResearchData
djehuty
2026-10-01T17:08:11.924Z 2026-10-01T17:58:15.800Z
cve-2026-21833 3.7 (v3.1) HCL AION is susceptible to a Missing "Content-Security… HCL Software
AION
2026-10-01T16:54:24.057Z 2026-10-01T18:03:33.734Z
cve-2026-73975 djehuty: Authenticated SPARQL injection in session edi… 4TUResearchData
djehuty
2026-10-01T16:41:18.845Z 2026-10-06T01:54:19.561Z
cve-2026-77387 geopy: Regular Expression Denial of Service (ReDoS) in… geopy
geopy
2026-10-01T16:38:54.176Z 2026-10-01T17:50:39.404Z
cve-2026-103921 GraphQL Tools: TLS Certificate Validation Disabled in … ardatan
graphql-tools
2026-10-01T16:32:37.865Z 2026-10-01T18:04:28.083Z
cve-2026-96658 8.8 (v3.1) Foreman: foreman: arbitrary code execution via safemod… Red Hat
Red Hat Satellite 6.16 for RHEL 8
2026-10-01T16:23:23.688Z 2026-11-02T18:02:52.712Z
cve-2026-96659 9.1 (v3.1) Foreman: excessive permissions for viewer role on preview Red Hat
Red Hat Satellite 6.16 for RHEL 8
2026-10-01T16:23:23.666Z 2026-10-16T12:18:17.723Z
cve-2026-12544 7.7 (v3.1) Foreman: ssti and insecure deserialization in foreman-… Red Hat
Red Hat Satellite 6.16 for RHEL 8
2026-10-01T16:22:15.366Z 2026-10-07T06:12:07.645Z
cve-2026-12541 8.2 (v3.1) Foreman: command injection in foreman-rake database tasks Red Hat
Red Hat Satellite 6.16 for RHEL 8
2026-10-01T16:22:09.928Z 2026-11-02T18:01:34.330Z
cve-2026-101890 5.1 (v4.0) 5.4 (v3.1) Prime Mover < 2.2.1 Stored XSS via Package Metadata Codexonics
Prime Mover
2026-10-01T16:22:08.087Z 2026-10-01T21:44:58.019Z
cve-2026-12540 8.2 (v3.1) Foreman: command injection in foreman-rake errors:fetc… Red Hat
Red Hat Satellite 6.16 for RHEL 8
2026-10-01T16:22:02.990Z 2026-11-02T18:01:27.517Z
cve-2026-12423 7.5 (v3.1) Foreman: unauthenticated information disclosure via pr… Red Hat
Red Hat Satellite 6.16 for RHEL 8
2026-10-01T16:21:52.891Z 2026-11-02T18:01:13.633Z
ID CVSS Description Vendor Product Published Updated
ID Description Package Published Updated
ID Description Type
ID Description Updated
ID Description Updated
ID Description Updated
ID Description