|
cve-2026-108966
|
|
SourceCodester Performance Indicator System product.ph…
|
SourceCodester
|
Performance Indicator System
|
2026-10-13T04:15:11.052Z |
2026-10-16T21:36:27.745Z |
|
cve-2026-102692
|
|
RIOT: Potential integer overflow in nanocoap Block2 ha…
|
RIOT-OS
|
RIOT
|
2026-10-16T16:48:35.776Z |
2026-10-16T21:20:02.887Z |
|
cve-2026-111606
|
8.6 (v4.0)
8.1 (v3.1)
|
Huly Platform through 0.7.432 Account Takeover via mer…
|
hcengineering
|
Huly Platform
|
2026-10-16T17:38:47.643Z |
2026-10-16T21:19:52.033Z |
|
cve-2026-111611
|
5.3 (v4.0)
5.4 (v3.1)
|
roncoo-education through 25.0.0-RELEASE IDOR via Order…
|
roncoo
|
roncoo-education
|
2026-10-16T17:38:51.139Z |
2026-10-16T21:19:45.346Z |
|
cve-2026-111616
|
6.9 (v4.0)
4.9 (v3.1)
|
Oqtane Framework through 10.2.6 Cross-Site Settings Di…
|
Oqtane
|
Oqtane Framework
|
2026-10-16T17:38:54.615Z |
2026-10-16T21:19:35.462Z |
|
cve-2026-111621
|
5.3 (v4.0)
4.3 (v3.1)
|
TDuck Survey Form through 5.3 Missing Authorization vi…
|
TDuckCloud
|
tduck-survey-form
|
2026-10-16T17:38:58.051Z |
2026-10-16T21:19:28.058Z |
|
cve-2026-111626
|
9.3 (v4.0)
9.8 (v3.1)
|
Webreaper Damselfly through 4.5.3 Missing Authenticati…
|
Webreaper
|
Damselfly
|
2026-10-16T17:39:01.458Z |
2026-10-16T21:19:19.069Z |
|
cve-2026-111631
|
5.3 (v4.0)
5.4 (v3.1)
|
Distributor before 2.3.2 Missing Authorization in Exte…
|
10up
|
Distributor
|
2026-10-16T17:39:04.861Z |
2026-10-16T21:19:10.473Z |
|
cve-2026-111636
|
9.2 (v4.0)
8.1 (v3.1)
|
OpenBMB StaffDeck through 0.5.6 Authentication Bypass …
|
OpenBMB
|
StaffDeck
|
2026-10-16T17:39:08.257Z |
2026-10-16T21:19:00.346Z |
|
cve-2026-111641
|
9.3 (v4.0)
9.8 (v3.1)
|
FastapiAdmin through 3.0 Authentication Bypass via Aut…
|
fastapiadmin
|
FastapiAdmin
|
2026-10-16T17:39:11.674Z |
2026-10-16T21:18:51.468Z |
|
cve-2026-111646
|
8.2 (v4.0)
5.9 (v3.1)
|
SurveyKing before 1.13.0 Unauthenticated File Download…
|
javahuang
|
SurveyKing
|
2026-10-16T17:39:15.125Z |
2026-10-16T21:18:43.318Z |
|
cve-2026-111651
|
7.1 (v4.0)
6.5 (v3.1)
|
Risesoft Digital-Infrastructure through 9.6.11 Cross-T…
|
risesoft-y9
|
Digital-Infrastructure
|
2026-10-16T17:39:18.666Z |
2026-10-16T21:18:33.584Z |
|
cve-2026-111656
|
5.3 (v4.0)
5.4 (v3.1)
|
ChatWiki through 2.9.6 Cross-Tenant IDOR via Form Filt…
|
zhimaAi
|
chatwiki
|
2026-10-16T17:39:22.093Z |
2026-10-16T21:18:25.806Z |
|
cve-2026-111661
|
6.9 (v4.0)
5.3 (v3.1)
|
waynboot-mall through 2.0.0 Missing Authentication via…
|
wayn111
|
waynboot-mall
|
2026-10-16T17:39:25.521Z |
2026-10-16T21:18:14.959Z |
|
cve-2026-111666
|
5.3 (v4.0)
4.3 (v3.1)
|
Steedos Platform through 3.0.15-beta.51 Cross-Tenant I…
|
steedos
|
steedos-platform
|
2026-10-16T17:39:28.959Z |
2026-10-16T21:18:06.427Z |
|
cve-2026-111671
|
7.1 (v4.0)
7.1 (v3.1)
|
Cube-studio through 2026.09.01 IDOR via Notebook and S…
|
data-infra
|
cube-studio
|
2026-10-16T17:39:32.472Z |
2026-10-16T21:17:54.276Z |
|
cve-2026-111676
|
5.3 (v4.0)
4.3 (v3.1)
|
Faveo Helpdesk through 2.0.3 Broken Access Control via…
|
faveosuite
|
faveo-helpdesk
|
2026-10-16T17:39:35.960Z |
2026-10-16T21:17:46.687Z |
|
cve-2026-111681
|
8.7 (v4.0)
8.8 (v3.1)
|
EFAK through 5.1.0 Privilege Escalation via /api/users…
|
smartloli
|
EFAK
|
2026-10-16T17:39:39.410Z |
2026-10-16T21:17:35.235Z |
|
cve-2026-111686
|
8.7 (v4.0)
7.5 (v3.1)
|
IceCMS through 4.1.5 SQL Injection via /WebArticle/fin…
|
Thecosy
|
IceCMS
|
2026-10-16T17:39:44.117Z |
2026-10-16T21:17:27.385Z |
|
cve-2026-111691
|
9.1 (v4.0)
7.4 (v3.1)
|
WIMOOR through commit ec86736 Authentication Bypass vi…
|
wimoor-erp
|
wimoor
|
2026-10-16T17:39:47.608Z |
2026-10-16T21:17:17.620Z |
|
cve-2026-111696
|
7.1 (v4.0)
6.5 (v3.1)
|
data-platform-open through commit efeacd3 Hardcoded AE…
|
shaiwz
|
data-platform-open
|
2026-10-16T17:39:50.964Z |
2026-10-16T21:17:09.657Z |
|
cve-2026-111701
|
8.3 (v4.0)
7 (v3.1)
|
OtterMind Nubase through 0.1.4 Missing Authentication …
|
OtterMind
|
Nubase
|
2026-10-16T17:39:54.414Z |
2026-10-16T21:16:58.942Z |
|
cve-2026-111706
|
8.7 (v4.0)
7.5 (v3.1)
|
99AI through 4.3.0 Unauthenticated Information Disclos…
|
vastxie
|
99AI
|
2026-10-16T17:39:57.886Z |
2026-10-16T21:16:51.203Z |
|
cve-2026-111711
|
9.3 (v4.0)
9.8 (v3.1)
|
Netcore NR256CN through 1.5.140116 Pre-Auth Stack Over…
|
Netcore
|
NR256CN
|
2026-10-16T17:40:01.282Z |
2026-10-16T21:16:42.070Z |
|
cve-2026-111716
|
5.3 (v4.0)
5.4 (v3.1)
|
Arkon through 0.9.2 Broken Access Control via Sources …
|
nduckmink
|
arkon
|
2026-10-16T17:40:04.869Z |
2026-10-16T21:16:33.552Z |
|
cve-2026-111721
|
5.3 (v4.0)
5.4 (v3.1)
|
Open WES through 1.0.0 Broken Access Control via Globa…
|
jingsewu
|
open-wes
|
2026-10-16T17:40:08.350Z |
2026-10-16T21:16:25.789Z |
|
cve-2026-17068
|
5.4 (v3.1)
|
IBM i is Affected By Improper Authorization and Access…
|
IBM
|
i
|
2026-10-16T18:39:45.465Z |
2026-10-16T21:16:16.013Z |
|
cve-2026-59963
|
|
Tandoor Recipes: Private recipe file and share-link au…
|
TandoorRecipes
|
recipes
|
2026-10-16T19:17:25.148Z |
2026-10-16T21:16:08.364Z |
|
cve-2026-107349
|
7.5 (v3.1)
|
Infinite loop on empty option name in startup options …
|
n/a
|
PgBouncer
|
2026-10-14T17:34:33.785Z |
2026-10-16T20:19:16.649Z |
|
cve-2026-108337
|
7.4 (v4.0)
|
Password Reset Code Accessible in User Listing API
|
Hitachi Vantara
|
Remot Ops Agent
|
2026-10-14T21:43:08.247Z |
2026-10-16T20:18:39.031Z |