|
cve-2026-108657
|
8.6 (v4.0)
8.1 (v3.1)
|
JeecgBoot through 3.9.5 Missing Authorization via /sys…
|
jeecgboot
|
JeecgBoot
|
2026-10-10T21:49:43.999Z |
2026-10-18T12:03:16.580Z |
|
cve-2026-108662
|
5.3 (v4.0)
5.4 (v3.1)
|
JeecgBoot through 3.9.5 Missing Authorization via /sys…
|
jeecgboot
|
JeecgBoot
|
2026-10-10T21:49:47.338Z |
2026-10-18T12:03:16.440Z |
|
cve-2026-108667
|
5.3 (v4.0)
4.3 (v3.1)
|
JeecgBoot through 3.9.5 Missing Authorization via /air…
|
jeecgboot
|
JeecgBoot
|
2026-10-10T21:49:50.599Z |
2026-10-18T12:03:16.282Z |
|
cve-2026-109199
|
8.7 (v4.0)
8.8 (v3.1)
|
LogicalDOC Community Edition through 9.3 Code Injectio…
|
LogicalDOC
|
LogicalDOC Community Edition
|
2026-10-12T13:39:42.546Z |
2026-10-18T12:03:16.134Z |
|
cve-2026-109204
|
5.3 (v4.0)
6.3 (v3.1)
|
LogicalDOC Community Edition through 9.3 Forced Passwo…
|
LogicalDOC
|
LogicalDOC Community Edition
|
2026-10-12T13:39:45.921Z |
2026-10-18T12:03:15.988Z |
|
cve-2026-109393
|
5.3 (v4.0)
6.3 (v3.1)
|
QloApps through 1.7.0 Insecure Direct Object Reference…
|
Webkul
|
QloApps
|
2026-10-12T15:16:40.590Z |
2026-10-18T12:03:15.837Z |
|
cve-2026-109399
|
9.2 (v4.0)
8.1 (v3.1)
|
SWUpdate through 2026.05.1 CMS Signature Verification …
|
sbabic
|
swupdate
|
2026-10-12T15:16:44.440Z |
2026-10-18T12:03:15.694Z |
|
cve-2026-109241
|
2.3 (v4.0)
3.1 (v3.1)
|
FreeRDP before 3.32.0 NULL Dereference in Video Redire…
|
FreeRDP
|
FreeRDP
|
2026-10-12T16:04:17.685Z |
2026-10-18T12:03:15.542Z |
|
cve-2026-109301
|
8.2 (v4.0)
5.9 (v3.1)
|
Parse Server before 8.6.95 and 9.0.0 before 9.10.2-alp…
|
parse-community
|
parse-server
|
2026-10-12T16:04:58.887Z |
2026-10-18T11:53:10.067Z |
|
cve-2026-109306
|
6 (v4.0)
5.9 (v3.1)
|
Craft CMS 5.0.0 before 5.10.14 Missing Authorization v…
|
craftcms
|
cms
|
2026-10-12T16:05:03.382Z |
2026-10-18T11:53:09.921Z |
|
cve-2026-109316
|
6.9 (v4.0)
6.5 (v3.1)
|
Grav Data Manager 1.4.0 through 1.4.5 Unauthenticated …
|
getgrav
|
grav-plugin-data-manager
|
2026-10-12T16:05:10.145Z |
2026-10-18T11:53:09.767Z |
|
cve-2026-108165
|
5.3 (v4.0)
4.3 (v3.1)
|
Immich through 3.3.1 Missing Authorization in Partner …
|
immich-app
|
immich
|
2026-10-10T13:55:15.503Z |
2026-10-18T11:53:09.614Z |
|
cve-2026-108547
|
7.1 (v4.0)
6.5 (v3.1)
|
AstronRPA through 1.1.6 Cross-Tenant Shared Variable D…
|
iflytek
|
astron-rpa
|
2026-10-10T14:35:03.098Z |
2026-10-18T11:53:09.444Z |
|
cve-2026-108553
|
7.7 (v4.0)
7.5 (v3.1)
|
OpenRefine through 3.10.1 CSRF to RCE via get-rows Command
|
OpenRefine
|
OpenRefine
|
2026-10-10T14:49:38.768Z |
2026-10-18T11:53:09.288Z |
|
cve-2026-108581
|
7.1 (v4.0)
6.5 (v3.1)
|
Octop through 1.0.2b6 Missing Authorization Exposes Pr…
|
TencentCloud
|
Octop
|
2026-10-10T15:57:49.956Z |
2026-10-18T11:53:09.137Z |
|
cve-2026-108591
|
5.9 (v4.0)
4.4 (v3.1)
|
InnoShop 0.9.2 Local File Disclosure via AI Core MCP f…
|
innocommerce
|
InnoShop
|
2026-10-10T18:16:55.939Z |
2026-10-18T11:53:08.980Z |
|
cve-2026-108596
|
6 (v4.0)
5.3 (v3.1)
|
OpenLIT 2.1.0 Authorization Bypass via x-openlit-proje…
|
openlit
|
openlit
|
2026-10-10T18:58:13.358Z |
2026-10-18T11:53:08.823Z |
|
cve-2026-108602
|
5.3 (v4.0)
4.3 (v3.1)
|
Helicone through v2025.08.21-1 SSRF via Jawn Webhook S…
|
Helicone
|
helicone
|
2026-10-10T19:54:36.258Z |
2026-10-18T11:53:08.668Z |
|
cve-2026-108607
|
5.3 (v4.0)
4.3 (v3.1)
|
JeecgBoot through 3.9.5 IDOR via deleteVideoRecord use…
|
jeecgboot
|
JeecgBoot
|
2026-10-10T21:49:09.981Z |
2026-10-18T11:53:08.508Z |
|
cve-2026-108612
|
5.3 (v4.0)
5.4 (v3.1)
|
JeecgBoot through 3.9.5 Missing Authorization via /air…
|
jeecgboot
|
JeecgBoot
|
2026-10-10T21:49:13.201Z |
2026-10-18T11:53:08.351Z |
|
cve-2026-108617
|
5.3 (v4.0)
4.3 (v3.1)
|
JeecgBoot through 3.9.5 Missing Authorization via sysM…
|
jeecgboot
|
JeecgBoot
|
2026-10-10T21:49:16.574Z |
2026-10-18T11:53:08.189Z |
|
cve-2026-108672
|
5.3 (v4.0)
4.3 (v3.1)
|
JeecgBoot through 3.9.5 Authorization Bypass via /aira…
|
jeecgboot
|
JeecgBoot
|
2026-10-10T21:49:53.999Z |
2026-10-18T11:53:08.038Z |
|
cve-2026-108677
|
7.1 (v4.0)
6.5 (v3.1)
|
JeecgBoot through 3.9.5 Missing Authorization via /sys…
|
jeecgboot
|
JeecgBoot
|
2026-10-10T21:49:57.193Z |
2026-10-18T11:53:07.891Z |
|
cve-2026-108689
|
5.3 (v4.0)
5.4 (v3.1)
|
Wukong AICRM through 20260610 Authorization Bypass via…
|
WuKongOpenSource
|
Wukong AICRM
|
2026-10-11T01:12:24.286Z |
2026-10-18T11:53:07.738Z |
|
cve-2026-108702
|
5.3 (v4.0)
4.3 (v3.1)
|
CordysCRM through 1.9.3 Missing Authorization and Blin…
|
1Panel-dev
|
CordysCRM
|
2026-10-11T01:12:28.429Z |
2026-10-18T11:53:07.584Z |
|
cve-2026-108707
|
9.3 (v4.0)
9.8 (v3.1)
|
Wukong_HRM through commit 186115e Authentication Bypas…
|
WuKongOpenSource
|
Wukong_HRM
|
2026-10-11T01:12:31.801Z |
2026-10-18T11:53:07.433Z |
|
cve-2026-108694
|
7.1 (v4.0)
6.5 (v3.1)
|
ConvertX through 0.19.0 Arbitrary File Read via Pandoc…
|
C4illin
|
ConvertX
|
2026-10-11T01:35:44.264Z |
2026-10-18T11:53:07.284Z |
|
cve-2026-108713
|
5.3 (v4.0)
4.3 (v3.1)
|
SuiteCRM through 7.15.2 and 8.10.2 Missing Authorizati…
|
SuiteCRM
|
SuiteCRM
|
2026-10-11T12:19:26.741Z |
2026-10-18T11:53:07.131Z |
|
cve-2026-108718
|
8.6 (v4.0)
8.1 (v3.1)
|
Rill 0.77.0 through 0.90.5 OAuth Missing Authorization…
|
Rill Data
|
rill
|
2026-10-11T12:19:30.004Z |
2026-10-18T11:53:06.974Z |
|
cve-2026-108723
|
2 (v4.0)
2.5 (v3.1)
|
answer-me-with-html through 0.5.0 Symlink Following in…
|
QingYunA
|
answer-me-with-html
|
2026-10-11T12:19:33.297Z |
2026-10-18T11:53:06.818Z |