|
cve-2026-110603
|
5.8 (v4.0)
6.3 (v3.1)
|
LASzip through 3.5.0 Invalid Free via Truncated VLR He…
|
rapidlasso
|
LASzip
|
2026-10-14T14:16:44.360Z |
2026-10-16T17:16:44.388Z |
|
cve-2026-110608
|
5.3 (v4.0)
5.4 (v3.1)
|
BizSpring Shop through commit cf22d39daaf1 IDOR via /m…
|
BizSpring
|
BizSpring Shop
|
2026-10-14T14:16:49.839Z |
2026-10-16T17:16:36.942Z |
|
cve-2026-103524
|
N/A
|
CVE-2026-103524
|
Thelia
|
Thelia
|
2026-10-12T14:54:16.912Z |
2026-10-16T17:16:31.779Z |
|
cve-2026-110618
|
8.6 (v4.0)
8.1 (v3.1)
|
SmsForwarder through 3.5.0 Missing Authentication in H…
|
pppscn
|
SmsForwarder
|
2026-10-14T14:16:56.635Z |
2026-10-16T17:16:18.856Z |
|
cve-2026-110623
|
7.7 (v4.0)
7.5 (v3.1)
|
Papermerge Core through 3.5.3 Missing Authorization in…
|
papermerge
|
papermerge-core
|
2026-10-14T14:16:59.957Z |
2026-10-16T17:16:11.037Z |
|
cve-2026-110628
|
9.2 (v4.0)
8.6 (v3.1)
|
Kan 0.5.5 through 0.6.0 Unauthenticated SSRF via /api/…
|
kanbn
|
kan
|
2026-10-14T14:17:03.232Z |
2026-10-16T17:16:01.554Z |
|
cve-2026-110638
|
9.3 (v4.0)
9.8 (v3.1)
|
doc-recog through 1.1.6 OS Command Injection via DocDa…
|
zepspaiva
|
doc-recog
|
2026-10-14T14:17:09.820Z |
2026-10-16T17:15:54.950Z |
|
cve-2026-110643
|
9.3 (v4.0)
9.8 (v3.1)
|
transcribe2texts through 1.0.6 OS Command Injection vi…
|
kky-ykk
|
transcribe2texts
|
2026-10-14T14:17:13.152Z |
2026-10-16T17:15:48.105Z |
|
cve-2026-110648
|
8.5 (v4.0)
7.8 (v3.1)
|
@offactory/compress-fonts before 1.1.1 OS Command Inje…
|
adamarcanov
|
compress-fonts
|
2026-10-14T14:17:16.381Z |
2026-10-16T17:15:41.334Z |
|
cve-2026-109439
|
9.3 (v4.0)
9.8 (v3.1)
|
Lantronix XPress-DR 8.1.0.0 Unauthenticated Configurat…
|
LANTRONIX
|
XPress-DR
|
2026-10-14T16:45:49.338Z |
2026-10-16T17:15:34.637Z |
|
cve-2026-110775
|
7.1 (v4.0)
6.5 (v3.1)
|
Nexent through 2.7.0 Cross-Tenant Knowledge-Base File …
|
ModelEngine-Group
|
nexent
|
2026-10-14T18:48:05.425Z |
2026-10-16T17:15:27.094Z |
|
cve-2026-110833
|
8.2 (v4.0)
5.9 (v3.1)
|
FreeRDP before 3.32.0 Unbounded Memory Retention via R…
|
FreeRDP
|
FreeRDP
|
2026-10-14T22:52:08.294Z |
2026-10-16T17:15:19.859Z |
|
cve-2026-110838
|
8.7 (v4.0)
7.5 (v3.1)
|
FreeRDP shadow before 3.32.0 Pre-Authentication Input …
|
FreeRDP
|
FreeRDP
|
2026-10-14T22:52:13.434Z |
2026-10-16T17:15:12.757Z |
|
cve-2026-110843
|
8.2 (v4.0)
|
n8n before 2.41.4 and 2.42.1 Unauthenticated Unbounded…
|
n8n-io
|
n8n
|
2026-10-14T22:52:18.571Z |
2026-10-16T17:15:05.495Z |
|
cve-2026-110848
|
6 (v4.0)
|
n8n before 1.123.83, 2.41.4, and 2.42.1 Prototype Poll…
|
n8n-io
|
n8n
|
2026-10-14T22:52:23.952Z |
2026-10-16T17:14:56.072Z |
|
cve-2026-110853
|
7.1 (v4.0)
|
n8n before 1.123.83 Authorization Bypass via Execute S…
|
n8n-io
|
n8n
|
2026-10-14T22:52:29.991Z |
2026-10-16T17:14:50.047Z |
|
cve-2026-110858
|
9.2 (v4.0)
8.1 (v3.1)
|
GitPython 3.1.30 before 3.2.0 Command Injection via Re…
|
gitpython-developers
|
GitPython
|
2026-10-14T22:52:42.217Z |
2026-10-16T17:14:41.140Z |
|
cve-2026-110863
|
8.6 (v4.0)
8.1 (v3.1)
|
Better Auth @better-auth/sso before 1.7.3 Authenticati…
|
better-auth
|
sso
|
2026-10-14T22:52:50.378Z |
2026-10-16T17:14:33.345Z |
|
cve-2026-110868
|
8.4 (v4.0)
8.5 (v3.1)
|
Renovate before 44.79.0 SSRF via HTTP Preset URLs and …
|
renovatebot
|
renovate
|
2026-10-14T22:52:56.896Z |
2026-10-16T17:14:25.676Z |
|
cve-2026-110873
|
7.1 (v4.0)
7.1 (v3.1)
|
Heym 0.0.55 before 0.0.121 Credential Theft via error_…
|
heymrun
|
heym
|
2026-10-14T22:53:01.452Z |
2026-10-16T17:14:18.802Z |
|
cve-2026-46694
|
|
EspoCRM: Portal User ACL Bypass Exposes Internal Strea…
|
espocrm
|
espocrm
|
2026-10-15T14:40:49.258Z |
2026-10-16T17:14:07.344Z |
|
cve-2026-55154
|
|
EspoCRM: CSV/Formula Injection sanitizer bypass via le…
|
espocrm
|
espocrm
|
2026-10-15T14:49:15.584Z |
2026-10-16T17:13:56.910Z |
|
cve-2026-75505
|
|
EspoCRM: Access control bypass in Mass Update letting …
|
espocrm
|
espocrm
|
2026-10-15T15:04:02.253Z |
2026-10-16T17:13:50.051Z |
|
cve-2026-53582
|
|
OPNsense: XPATH Injection can disclose any secret in c…
|
opnsense
|
core
|
2026-10-15T15:08:46.374Z |
2026-10-16T17:13:42.903Z |
|
cve-2026-63442
|
|
OPNsense: Log Forgery via Login Username CRLF in WebGU…
|
opnsense
|
core
|
2026-10-15T15:22:16.011Z |
2026-10-16T17:13:35.384Z |
|
cve-2026-100349
|
|
kin-openapi openapi3filter: nil-pointer panic in Valid…
|
getkin
|
kin-openapi
|
2026-10-15T15:50:37.453Z |
2026-10-16T17:13:28.236Z |
|
cve-2026-57568
|
|
Lychee: Stored XSS via Markdown javascript: Links in P…
|
LycheeOrg
|
Lychee
|
2026-10-15T16:22:30.323Z |
2026-10-16T17:13:21.565Z |
|
cve-2026-62679
|
|
Lychee: Path traversal in `SecurePathController` allow…
|
LycheeOrg
|
Lychee
|
2026-10-15T16:33:43.958Z |
2026-10-16T17:13:13.881Z |
|
cve-2026-102527
|
|
Nuxt OG Image cache poisoning through derivable cache …
|
nuxt-modules
|
og-image
|
2026-10-15T16:55:23.150Z |
2026-10-16T17:13:07.014Z |
|
cve-2026-55453
|
|
CUPS ipp backend status-line injection can update queu…
|
OpenPrinting
|
cups
|
2026-10-15T17:11:21.208Z |
2026-10-16T17:12:58.110Z |