|
cve-2026-108728
|
7.1 (v4.0)
6.5 (v3.1)
|
Flyte 2.0.1 through 2.0.51 Cleartext Secret Exposure v…
|
flyteorg
|
flyte
|
2026-10-11T12:19:36.569Z |
2026-10-18T11:53:06.664Z |
|
cve-2026-108733
|
5.3 (v4.0)
4.3 (v3.1)
|
Frappe HR (hrms) before 16.11.0 Missing Authorization …
|
frappe
|
hrms
|
2026-10-11T12:19:40.218Z |
2026-10-18T11:53:06.514Z |
|
cve-2026-108738
|
2.3 (v4.0)
4.2 (v3.1)
|
Traccar 5.7 through 6.16.0 Login CSRF via OpenID Conne…
|
Traccar
|
Traccar
|
2026-10-11T12:19:43.602Z |
2026-10-18T11:53:06.374Z |
|
cve-2026-108744
|
7.3 (v4.0)
7 (v3.1)
|
pbi-cli 3.10.1 through 3.12.0 OS Command Injection via…
|
MinaSaad1
|
pbi-cli
|
2026-10-11T12:19:46.798Z |
2026-10-18T11:53:06.203Z |
|
cve-2026-108754
|
4.8 (v4.0)
3.3 (v3.1)
|
GPT-Load through 1.4.11 Cleartext Proxy Key Logging vi…
|
tbphp
|
gpt-load
|
2026-10-11T12:19:53.343Z |
2026-10-18T11:53:06.056Z |
|
cve-2026-108759
|
7.6 (v4.0)
6.8 (v3.1)
|
mistral.rs 0.9.0 through 0.9.4 Sandbox Escape via Syml…
|
EricLBuehler
|
mistral.rs
|
2026-10-11T12:19:56.496Z |
2026-10-18T11:53:05.908Z |
|
cve-2026-108839
|
2.3 (v4.0)
4.2 (v3.1)
|
thClaws through 0.141.0 Symlink Following File Write v…
|
thClaws
|
thClaws
|
2026-10-11T13:26:00.141Z |
2026-10-18T11:53:05.751Z |
|
cve-2026-108854
|
5.3 (v4.0)
5.4 (v3.1)
|
Wanwu before 0.6.3 IDOR AppKey Deletion via DELETE /v1…
|
UnicomAI
|
Wanwu
|
2026-10-11T13:26:03.304Z |
2026-10-18T11:53:05.593Z |
|
cve-2026-108859
|
8.7 (v4.0)
7.5 (v3.1)
|
mcp-go through 1.2.1 Denial of Service via Unbounded P…
|
mark3labs
|
mcp-go
|
2026-10-11T13:26:06.450Z |
2026-10-18T11:53:05.441Z |
|
cve-2026-108864
|
2.3 (v4.0)
4.2 (v3.1)
|
iFlytek Astron Agent through 1.1.2 Authorization Bypas…
|
iflytek
|
astron-agent
|
2026-10-11T13:26:10.083Z |
2026-10-18T11:53:05.294Z |
|
cve-2026-108869
|
5.3 (v4.0)
4.3 (v3.1)
|
JeecgBoot through 3.9.5 Missing Authorization via /sys…
|
jeecgboot
|
JeecgBoot
|
2026-10-11T14:33:33.998Z |
2026-10-18T11:53:05.139Z |
|
cve-2026-109261
|
6.3 (v4.0)
3.7 (v3.1)
|
ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 M…
|
ImageMagick
|
ImageMagick
|
2026-10-12T16:04:31.299Z |
2026-10-18T11:53:04.981Z |
|
cve-2026-109271
|
6.3 (v4.0)
3.7 (v3.1)
|
ImageMagick 7.1.2-30 before 7.1.2-32 Use After Free in…
|
ImageMagick
|
ImageMagick
|
2026-10-12T16:04:38.129Z |
2026-10-18T11:53:04.678Z |
|
cve-2026-109276
|
6.9 (v4.0)
5.3 (v3.1)
|
ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 T…
|
ImageMagick
|
ImageMagick
|
2026-10-12T16:04:41.501Z |
2026-10-18T11:53:04.537Z |
|
cve-2026-109311
|
7.1 (v4.0)
6.5 (v3.1)
|
vLLM before 0.29.0 Heap Overflow DoS via IAMF Audio Tr…
|
vllm-project
|
vllm
|
2026-10-12T16:05:06.956Z |
2026-10-18T11:51:50.426Z |
|
cve-2026-109251
|
6 (v4.0)
5.3 (v3.1)
|
FreeRDP before 3.32.0 Out-of-Bounds Write via MS-RDPEG…
|
FreeRDP
|
FreeRDP
|
2026-10-12T16:04:24.223Z |
2026-10-18T11:49:17.915Z |
|
cve-2026-109246
|
7.1 (v4.0)
6.5 (v3.1)
|
FreeRDP before 3.32.0 Shadow Server Divide-by-Zero via…
|
FreeRDP
|
FreeRDP
|
2026-10-12T16:04:21.002Z |
2026-10-18T11:48:32.027Z |
|
cve-2026-109227
|
8.7 (v4.0)
7.5 (v3.1)
|
SGLang through 0.5.21 Memory Exhaustion DoS via Qwen-V…
|
sgl-project
|
sglang
|
2026-10-12T14:04:31.362Z |
2026-10-18T11:46:21.400Z |
|
cve-2026-109281
|
4.8 (v4.0)
4.4 (v3.1)
|
ImageMagick 7.1.0-21 before 7.1.2-32 Heap Buffer Over-…
|
ImageMagick
|
ImageMagick
|
2026-10-12T16:04:44.689Z |
2026-10-18T11:42:56.574Z |
|
cve-2026-111909
|
7.2 (v4.0)
8.1 (v3.1)
|
phpMyFAQ before 4.1.9 Missing Authorization Allows Sup…
|
thorsten
|
phpMyFAQ
|
2026-10-17T18:46:27.466Z |
2026-10-18T11:42:56.427Z |
|
cve-2026-111926
|
4.8 (v4.0)
3.3 (v3.1)
|
Coder from 2.10.0 before 2.34.8 Information Disclosure…
|
coder
|
coder
|
2026-10-17T18:46:38.631Z |
2026-10-18T11:42:56.278Z |
|
cve-2026-111931
|
5.3 (v4.0)
4.3 (v3.1)
|
Coder 2.0.0 before 2.34.8 Open Redirect via Workspace …
|
coder
|
coder
|
2026-10-17T18:46:42.064Z |
2026-10-18T11:42:56.130Z |
|
cve-2026-110383
|
7.5 (v3.1)
|
WordPress Electronic Signature Add-on for Fluent Forms…
|
WP E-Signature
|
Electronic Signature Add-on for Fluent Forms
|
2026-10-18T11:00:29.114Z |
2026-10-18T11:42:55.982Z |
|
cve-2026-109895
|
7.1 (v3.1)
|
WordPress Booktics plugin <= 1.0.29 - Cross Site Scrip…
|
Arraytics
|
Booktics
|
2026-10-18T11:00:29.573Z |
2026-10-18T11:42:55.835Z |
|
cve-2026-110895
|
8.5 (v3.1)
|
WordPress Support Genix plugin <= 1.4.54 - SQL Injecti…
|
DevItems
|
Support Genix
|
2026-10-18T11:00:30.914Z |
2026-10-18T11:42:55.685Z |
|
cve-2026-109256
|
6 (v4.0)
5.3 (v3.1)
|
FreeRDP 3.10.0 through 3.32.2 Heap Buffer Overflow in …
|
FreeRDP
|
FreeRDP
|
2026-10-12T16:04:27.495Z |
2026-10-18T11:38:15.143Z |
|
cve-2026-107763
|
|
Fastcache by Host.it <= 1.7.5 - Missing Authorization …
|
hostspa
|
Fastcache by Host.it
|
2026-10-17T02:31:04.849Z |
2026-10-18T11:22:48.291Z |
|
cve-2026-107762
|
|
Kirki <= 6.3.2 - Insecure Direct Object Reference to U…
|
themeum
|
Kirki – Freeform Page Builder, Website Builder & Customizer
|
2026-10-17T02:31:05.352Z |
2026-10-18T11:22:48.151Z |
|
cve-2026-104734
|
|
Kirki <= 6.3.2 - Authenticated (Administrator+) PHP Ob…
|
themeum
|
Kirki – Freeform Page Builder, Website Builder & Customizer
|
2026-10-17T02:31:05.687Z |
2026-10-18T11:22:47.982Z |
|
cve-2026-110653
|
|
Appointment Booking Plugin <= 5.7.4 - Unauthenticated …
|
latepoint
|
Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress
|
2026-10-17T02:31:06.697Z |
2026-10-18T11:22:47.841Z |