|
cve-2026-111636
|
9.2 (v4.0)
8.1 (v3.1)
|
OpenBMB StaffDeck through 0.5.6 Authentication Bypass …
|
OpenBMB
|
StaffDeck
|
2026-10-16T17:39:08.257Z |
2026-10-16T21:19:00.346Z |
|
cve-2026-111641
|
9.3 (v4.0)
9.8 (v3.1)
|
FastapiAdmin through 3.0 Authentication Bypass via Aut…
|
fastapiadmin
|
FastapiAdmin
|
2026-10-16T17:39:11.674Z |
2026-10-16T21:18:51.468Z |
|
cve-2026-111646
|
8.2 (v4.0)
5.9 (v3.1)
|
SurveyKing before 1.13.0 Unauthenticated File Download…
|
javahuang
|
SurveyKing
|
2026-10-16T17:39:15.125Z |
2026-10-16T21:18:43.318Z |
|
cve-2026-111651
|
7.1 (v4.0)
6.5 (v3.1)
|
Risesoft Digital-Infrastructure through 9.6.11 Cross-T…
|
risesoft-y9
|
Digital-Infrastructure
|
2026-10-16T17:39:18.666Z |
2026-10-16T21:18:33.584Z |
|
cve-2026-111656
|
5.3 (v4.0)
5.4 (v3.1)
|
ChatWiki through 2.9.6 Cross-Tenant IDOR via Form Filt…
|
zhimaAi
|
chatwiki
|
2026-10-16T17:39:22.093Z |
2026-10-16T21:18:25.806Z |
|
cve-2026-111661
|
6.9 (v4.0)
5.3 (v3.1)
|
waynboot-mall through 2.0.0 Missing Authentication via…
|
wayn111
|
waynboot-mall
|
2026-10-16T17:39:25.521Z |
2026-10-16T21:18:14.959Z |
|
cve-2026-111666
|
5.3 (v4.0)
4.3 (v3.1)
|
Steedos Platform through 3.0.15-beta.51 Cross-Tenant I…
|
steedos
|
steedos-platform
|
2026-10-16T17:39:28.959Z |
2026-10-16T21:18:06.427Z |
|
cve-2026-111671
|
7.1 (v4.0)
7.1 (v3.1)
|
Cube-studio through 2026.09.01 IDOR via Notebook and S…
|
data-infra
|
cube-studio
|
2026-10-16T17:39:32.472Z |
2026-10-16T21:17:54.276Z |
|
cve-2026-111676
|
5.3 (v4.0)
4.3 (v3.1)
|
Faveo Helpdesk through 2.0.3 Broken Access Control via…
|
faveosuite
|
faveo-helpdesk
|
2026-10-16T17:39:35.960Z |
2026-10-16T21:17:46.687Z |
|
cve-2026-111681
|
8.7 (v4.0)
8.8 (v3.1)
|
EFAK through 5.1.0 Privilege Escalation via /api/users…
|
smartloli
|
EFAK
|
2026-10-16T17:39:39.410Z |
2026-10-16T21:17:35.235Z |
|
cve-2026-111686
|
8.7 (v4.0)
7.5 (v3.1)
|
IceCMS through 4.1.5 SQL Injection via /WebArticle/fin…
|
Thecosy
|
IceCMS
|
2026-10-16T17:39:44.117Z |
2026-10-16T21:17:27.385Z |
|
cve-2026-111691
|
9.1 (v4.0)
7.4 (v3.1)
|
WIMOOR through commit ec86736 Authentication Bypass vi…
|
wimoor-erp
|
wimoor
|
2026-10-16T17:39:47.608Z |
2026-10-16T21:17:17.620Z |
|
cve-2026-111696
|
7.1 (v4.0)
6.5 (v3.1)
|
data-platform-open through commit efeacd3 Hardcoded AE…
|
shaiwz
|
data-platform-open
|
2026-10-16T17:39:50.964Z |
2026-10-16T21:17:09.657Z |
|
cve-2026-111701
|
8.3 (v4.0)
7 (v3.1)
|
OtterMind Nubase through 0.1.4 Missing Authentication …
|
OtterMind
|
Nubase
|
2026-10-16T17:39:54.414Z |
2026-10-16T21:16:58.942Z |
|
cve-2026-111706
|
8.7 (v4.0)
7.5 (v3.1)
|
99AI through 4.3.0 Unauthenticated Information Disclos…
|
vastxie
|
99AI
|
2026-10-16T17:39:57.886Z |
2026-10-16T21:16:51.203Z |
|
cve-2026-111711
|
9.3 (v4.0)
9.8 (v3.1)
|
Netcore NR256CN through 1.5.140116 Pre-Auth Stack Over…
|
Netcore
|
NR256CN
|
2026-10-16T17:40:01.282Z |
2026-10-16T21:16:42.070Z |
|
cve-2026-111716
|
5.3 (v4.0)
5.4 (v3.1)
|
Arkon through 0.9.2 Broken Access Control via Sources …
|
nduckmink
|
arkon
|
2026-10-16T17:40:04.869Z |
2026-10-16T21:16:33.552Z |
|
cve-2026-111721
|
5.3 (v4.0)
5.4 (v3.1)
|
Open WES through 1.0.0 Broken Access Control via Globa…
|
jingsewu
|
open-wes
|
2026-10-16T17:40:08.350Z |
2026-10-16T21:16:25.789Z |
|
cve-2026-17068
|
5.4 (v3.1)
|
IBM i is Affected By Improper Authorization and Access…
|
IBM
|
i
|
2026-10-16T18:39:45.465Z |
2026-10-16T21:16:16.013Z |
|
cve-2026-59963
|
|
Tandoor Recipes: Private recipe file and share-link au…
|
TandoorRecipes
|
recipes
|
2026-10-16T19:17:25.148Z |
2026-10-16T21:16:08.364Z |
|
cve-2026-107349
|
7.5 (v3.1)
|
Infinite loop on empty option name in startup options …
|
n/a
|
PgBouncer
|
2026-10-14T17:34:33.785Z |
2026-10-16T20:19:16.649Z |
|
cve-2026-108337
|
7.4 (v4.0)
|
Password Reset Code Accessible in User Listing API
|
Hitachi Vantara
|
Remot Ops Agent
|
2026-10-14T21:43:08.247Z |
2026-10-16T20:18:39.031Z |
|
cve-2026-110816
|
5.3 (v3.1)
6.3 (v4.0)
|
qs.stringify with arrayFormat comma throws TypeError o…
|
ljharb
|
qs
|
2026-10-14T22:05:24.015Z |
2026-10-16T20:17:48.588Z |
|
cve-2026-102631
|
5.9 (v4.0)
|
authd: Account takeover via username fallback in ident…
|
Canonical
|
authd
|
2026-10-15T16:42:19.368Z |
2026-10-16T20:16:49.275Z |
|
cve-2026-111688
|
5.3 (v4.0)
4.3 (v3.1)
|
Exrick XBoot through 3.3.4 Data-Scope Bypass via openD…
|
Exrick
|
xboot
|
2026-10-16T17:39:45.564Z |
2026-10-16T20:16:18.861Z |
|
cve-2026-79957
|
8.1 (v3.1)
|
ServiceNext Insecure Direct Object Reference via GetUsarios
|
ServiceNext
|
SerTec
|
2026-10-14T18:01:51.493Z |
2026-10-16T20:15:51.180Z |
|
cve-2026-103415
|
9.3 (v4.0)
|
When a TLS 1.3 client processes a HelloRetryReque…
|
Eclipse Foundation
|
NetX Duo
|
2026-10-14T17:36:17.620Z |
2026-10-16T20:12:39.252Z |
|
cve-2026-107348
|
5.9 (v3.1)
|
Integer overflow causes an infinite loop in message bu…
|
n/a
|
PgBouncer
|
2026-10-14T17:34:29.838Z |
2026-10-16T20:11:22.132Z |
|
cve-2026-103414
|
8.4 (v4.0)
|
The GUIX binary resource (theme) loader sizes its…
|
Eclipse Foundation
|
GUIX
|
2026-10-14T17:32:12.095Z |
2026-10-16T20:10:44.107Z |
|
cve-2026-105236
|
6.3 (v4.0)
|
TLS 1.2 session resumption in ssl crosses SNI virtual-…
|
Erlang
|
OTP
|
2026-10-14T16:55:51.495Z |
2026-10-16T20:09:49.566Z |