|
cve-2026-77937
|
8.6 (v4.0)
8.1 (v3.1)
|
Letta through 0.16.8 Cross-Tenant Impersonation via us…
|
letta-ai
|
letta
|
2026-10-20T00:46:14.829Z |
2026-10-20T13:48:37.840Z |
|
cve-2026-77938
|
7.1 (v4.0)
6.5 (v3.1)
|
Letta through 0.16.8 Credential Exposure via Tool Sand…
|
letta-ai
|
letta
|
2026-10-20T00:46:15.564Z |
2026-10-20T13:47:53.481Z |
|
cve-2026-93878
|
|
DiviGear Carousel <= 5.2.0 - Authenticated (Subscriber…
|
Divigear
|
DiviGear Carousel
|
2026-10-20T06:54:42.377Z |
2026-10-20T13:46:41.730Z |
|
cve-2026-112786
|
5.3 (v4.0)
5.4 (v3.1)
|
OpenCATS before 0.10.0 Missing Authorization via Impor…
|
opencats
|
OpenCATS
|
2026-10-20T10:41:34.689Z |
2026-10-20T13:44:48.249Z |
|
cve-2026-113352
|
7.7 (v4.0)
7.5 (v3.1)
|
uTox through 0.18.1 Path Traversal via Auto-Accepted F…
|
uTox
|
uTox
|
2026-10-20T10:41:38.136Z |
2026-10-20T13:43:42.347Z |
|
cve-2026-113357
|
5.1 (v4.0)
3.5 (v3.1)
|
@e2e-dev/github before 0.4.1 CI Report Hijacking via P…
|
tester-army
|
@e2e-dev/github
|
2026-10-20T10:41:41.607Z |
2026-10-20T13:42:52.211Z |
|
cve-2026-113383
|
|
Optimal IdM OptimalCloud Login cross site scripting
|
Optimal IdM
|
OptimalCloud
|
2026-10-20T10:45:12.816Z |
2026-10-20T13:42:01.165Z |
|
cve-2026-113389
|
|
DrayTek Vigor2960 CGI Process mainfunction.cgi set_tab…
|
DrayTek
|
Vigor2960
|
2026-10-20T12:00:14.778Z |
2026-10-20T13:41:08.841Z |
|
cve-2026-113393
|
|
DrayTek Vigor2960 commonupload mainfunction.cgi unrest…
|
DrayTek
|
Vigor2960
|
2026-10-20T13:15:17.265Z |
2026-10-20T13:40:05.782Z |
|
cve-2026-77935
|
8.7 (v4.0)
8.3 (v3.1)
|
Coze Studio through 0.5.1 Cross-Space Workflow IDOR vi…
|
coze-dev
|
coze-studio
|
2026-10-20T00:46:13.474Z |
2026-10-20T13:29:43.391Z |
|
cve-2026-113381
|
|
Osclass Item Model Item.php findUserItems sql injection
|
n/a
|
Osclass
|
2026-10-20T09:45:06.205Z |
2026-10-20T13:28:23.121Z |
|
cve-2026-112784
|
5.3 (v4.0)
4.3 (v3.1)
|
OpenCATS before 0.10.0 Missing Authorization via ajax/…
|
opencats
|
OpenCATS
|
2026-10-20T10:41:33.303Z |
2026-10-20T13:27:10.134Z |
|
cve-2026-113350
|
5.1 (v4.0)
5.4 (v3.1)
|
react-admin before 5.15.5 Stored XSS via UrlField and …
|
marmelab
|
react-admin
|
2026-10-20T10:41:36.780Z |
2026-10-20T13:26:16.586Z |
|
cve-2026-113355
|
4.8 (v4.0)
4.8 (v3.1)
|
Chatwoot before 4.14.0 Stored XSS via Help Center Vide…
|
chatwoot
|
chatwoot
|
2026-10-20T10:41:40.212Z |
2026-10-20T13:25:35.524Z |
|
cve-2026-113385
|
|
LeeDrOiD Labs Shortcutter 2 App ToggleGeneric.java Cla…
|
LeeDrOiD Labs
|
Shortcutter 2 App
|
2026-10-20T11:15:14.699Z |
2026-10-20T13:24:51.599Z |
|
cve-2026-80726
|
N/A
|
{'rejectedReasons': [{'lang': 'en', 'value': 'This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.'}], 'providerMetadata': {'orgId': '416baaa9-dc9f-4396-8d5f-8c081fb06d67', 'shortName': 'Linux', 'dateUpdated': '2026-10-20T13:15:30.500Z'}, 'x_generator': {'engine': 'cvelib 1.8.0'}}
|
N/A
|
N/A
|
2026-09-03T08:21:45.923Z |
2026-10-20T13:15:30.500Z |
|
cve-2026-18551
|
6.5 (v3.1)
|
Mattermost guest account privilege escalation via memb…
|
Mattermost
|
Mattermost
|
2026-10-16T06:56:51.996Z |
2026-10-20T13:11:28.823Z |
|
cve-2026-79985
|
7.4 (v3.1)
|
Apache Camel: camel-smb resolved the remote path of a …
|
Apache Software Foundation
|
Apache Camel
|
2026-10-19T10:16:14.300Z |
2026-10-20T13:10:15.042Z |
|
cve-2026-79984
|
7.4 (v3.1)
|
Apache Camel: camel-mina-sftp resolved the remote path…
|
Apache Software Foundation
|
Apache Camel
|
2026-10-19T10:15:38.348Z |
2026-10-20T13:09:38.995Z |
|
cve-2026-79983
|
7.4 (v3.1)
|
Apache Camel: camel-ftp resolved the remote path of a …
|
Apache Software Foundation
|
Apache Camel
|
2026-10-19T10:08:43.054Z |
2026-10-20T13:09:03.529Z |
|
cve-2026-78165
|
8.8 (v3.1)
|
Apache Camel: Camel-Spring-Redis Unfiltered Java Deser…
|
Apache Software Foundation
|
Apache Camel
|
2026-10-19T10:08:06.783Z |
2026-10-20T13:08:03.518Z |
|
cve-2026-81452
|
7 (v3.1)
|
Dell Alienware Command Center (AWCC), versions pr…
|
Dell
|
Alienware Command Center (AWCC)
|
2026-10-16T17:39:55.070Z |
2026-10-20T13:05:49.759Z |
|
cve-2026-102917
|
7.8 (v3.1)
|
IBM i is Affected By An Improper Privilege Management …
|
IBM
|
i
|
2026-10-16T18:37:54.693Z |
2026-10-20T13:05:49.605Z |
|
cve-2026-108743
|
|
Apache Kylin: spark job OS command injection
|
Apache Software Foundation
|
Apache Kylin
|
2026-10-16T19:44:37.833Z |
2026-10-20T12:58:48.518Z |
|
cve-2026-12665
|
8.1 (v3.1)
|
IBM MQ Buffer Overflow
|
IBM
|
MQ Operator
|
2026-10-19T16:40:12.974Z |
2026-10-20T12:58:19.535Z |
|
cve-2026-12148
|
7.5 (v3.1)
|
IBM MQ Deserialization of Untrusted Data
|
IBM
|
MQ Operator
|
2026-10-19T16:40:55.117Z |
2026-10-20T12:58:09.900Z |
|
cve-2026-10574
|
8.8 (v3.1)
|
IBM MQ Buffer Overflow
|
IBM
|
MQ Operator
|
2026-10-19T16:41:34.104Z |
2026-10-20T12:57:57.696Z |
|
cve-2026-10572
|
8.8 (v3.1)
|
IBM MQ Buffer Overflow
|
IBM
|
MQ Operator
|
2026-10-19T16:41:42.171Z |
2026-10-20T12:57:47.471Z |
|
cve-2025-49300
|
2.7 (v3.1)
|
WordPress Traveler Option Tree plugin <= 2.8 - Sensiti…
|
Shinetheme
|
Traveler Option Tree
|
2025-12-16T08:12:44.867Z |
2026-10-20T11:14:51.224Z |
|
cve-2026-111283
|
9.5 (v4.0)
9 (v3.1)
|
BMC Helix Network Management 26.3.00 before 26.3.01 Au…
|
BMC Helix
|
BMC Helix Network Management
|
2026-10-15T21:43:26.742Z |
2026-10-20T10:46:34.636Z |