Security Box Score — October 11, 2026

233 CVEs published, led by jeecgboot (24).

233 CVEs published October 11, 2026: 16 critical, 73 high, 106 medium, 38 low; 0 in the KEV catalog at press time; 0 with a public exploit reference; 0 awaiting enrichment. Elevated volume. 25 rendered as box scores below; the remaining 208 in the results table.

Standings

League
	MTD	YTD	2025 same span	2025 full
CVEs published	4186	54219	—	—
KEV catalog size	1739

Publication counts reflect the record since May 20, 2026 (archive start); KEV figures are catalog-wide.

Prior-year comparisons begin when the archive covers a full year; archive begins May 20, 2026.

3578 disclosures carry no usable vendor attribution (upstream records marked n/a or unknown) and are excluded from the vendor tables. C/H/M/L = YTD disclosures by severity band. KEV = catalog entries all-time / YTD. KEV/100 = KEV additions YTD ÷ CVEs YTD × 100. Med CVSS / Med EPSS = medians over the vendor's YTD disclosures. Δ = this month-to-date minus the same day-span of last month.

Operating Systems & Platforms
Vendor	MTD	YTD	C	H	M	L	KEV	KEV YTD	KEV/100	Med CVSS	Med EPSS	Δ
linux	220	6425	532	2691	749	1	15	6	0.1	7.8	.0018	-411 ▼
google	293	3124	382	1205	1398	137	80	9	0.3	7.3	.0026	-68 ▼
microsoft	19	2921	208	2002	694	17	290	31	1.1	7.8	.0047	-958 ▼
red hat	95	994	55	397	486	56	2	0	0.0	6.5	.0033	+23 ▲
apple	0	564	67	166	317	14	89	9	1.6	6.5	.0019	0
suse	0	53	8	27	16	2	0	0	0.0	7.5	.0035	-12 ▼
canonical	2	52	16	12	19	5	0	0	0.0	7.8	.0022	+2 ▲
freebsd	0	48	2	36	7	3	0	0	0.0	7.8	.0016	0

Network & Infrastructure
Vendor	MTD	YTD	C	H	M	L	KEV	KEV YTD	KEV/100	Med CVSS	Med EPSS	Δ
cisco	36	218	70	84	63	1	60	17	7.8	8.4	.0044	+24 ▲
ubiquiti	0	65	36	28	1	0	3	3	4.6	9.1	.0051	0
palo alto networks	0	46	1	4	26	15	13	2	4.3	4.7	.0022	-9 ▼
fortinet	1	42	12	10	17	3	30	8	19.0	7.2	.0040	-9 ▼
netgear	0	34	0	0	27	7	0	0	0.0	4.3	.0027	-2 ▼
f5	0	26	7	14	4	1	5	2	7.7	8.7	.0050	-7 ▼
ivanti	0	24	6	16	2	0	25	5	20.8	8.8	.0152	-10 ▼
sonicwall	4	23	8	10	5	0	19	4	17.4	7.8	.0049	-1 ▼

Open Source Ecosystems
Vendor	MTD	YTD	C	H	M	L	KEV	KEV YTD	KEV/100	Med CVSS	Med EPSS	Δ
apache	141	848	169	380	262	21	33	2	0.2	7.5	.0057	+109 ▲
mozilla	2	381	123	170	87	0	9	0	0.0	8.8	.0031	-33 ▼
gitlab	2	106	8	24	63	11	5	3	2.8	5.3	.0035	+2 ▲
drupal	0	94	11	9	66	8	4	1	1.1	5.7	.0027	-26 ▼
github	2	25	2	12	11	0	0	0	0.0	7.4	.0052	-1 ▼
docker	7	19	1	10	8	0	0	0	0.0	7.2	.0015	+7 ▲
wordpress	0	6	1	4	1	0	3	3	50.0	8.7	.0363	0
eclipse	0	2	2	0	0	0	0	0	0.0	9.3	.0050	0

Enterprise Applications
Vendor	MTD	YTD	C	H	M	L	KEV	KEV YTD	KEV/100	Med CVSS	Med EPSS	Δ
oracle	0	2905	581	1660	563	101	28	4	0.1	7.8	.0036	0
ibm	117	1140	211	543	367	19	6	1	0.1	7.5	.0036	-4 ▼
adobe	0	830	82	364	375	9	21	5	0.6	7.5	.0036	-170 ▼
progress	11	77	16	45	15	1	6	1	1.3	8.0	.0043	+8 ▲
zohocorp	0	42	6	29	7	0	0	0	0.0	8.3	.0117	-5 ▼
solarwinds	0	26	18	5	3	0	10	4	15.4	9.1	.0067	0
veeam	6	25	7	11	7	0	1	0	0.0	8.5	.0036	+6 ▲
atlassian	1	10	2	8	0	0	13	0	0.0	7.8	.0043	+1 ▲

Industrial & Embedded
Vendor	YTD	C	H	M	L	KEV	Med CVSS	Med EPSS	Δ
d-link	74	22	28	12	12	3	8.5	.0164	-8 ▼
siemens	52	6	33	10	3	0	7.3	.0026	-14 ▼
synology	46	5	10	25	6	0	5.6	.0032	0
rockwell automation	43	5	32	6	0	0	8.6	.0029	-18 ▼
advantech	20	2	17	1	0	0	8.6	.0071	-2 ▼
schneider electric	18	2	11	5	0	0	8.5	.0044	-9 ▼
hitachi energy	12	2	4	6	0	0	7.0	.0025	-4 ▼
abb	11	1	6	4	0	0	7.2	.0018	0

Other
Vendor	MTD	YTD	C	H	M	L	KEV	KEV YTD	KEV/100	Med CVSS	Med EPSS	Δ
dell	41	419	41	186	167	25	2	1	0.2	7.2	.0025	-93 ▼
nvidia	2	303	25	207	71	0	0	0	0.0	7.8	.0019	-30 ▼
sourcecodester	17	254	0	0	149	105	0	0	0.0	5.5	.0041	-9 ▼
openclaw	0	228	5	117	85	21	0	0	0.0	7.1	.0031	0
hewlett packard enterprise (hpe)	38	204	39	92	64	9	1	1	0.5	7.3	.0042	-53 ▼
mongodb	17	186	6	103	70	7	1	0	0.0	7.1	.0036	-33 ▼
spring	0	170	13	60	83	14	0	0	0.0	6.5	.0033	0
itsourcecode	14	167	0	0	42	125	0	0	0.0	2.1	.0033	-10 ▼

Leaders (trailing 30 days unless noted)

Highest EPSS
CVE	EPSS	%ile	CVSS
CVE-2026-85706	.9296	99.8	10.0
CVE-2026-87902	.3998	98.6	8.1
CVE-2026-76461	.2827	98.1	9.8
CVE-2026-93616	.1965	97.3	9.8
CVE-2026-76460	.1403	96.5	10.0
CVE-2026-12269	.0699	94.0	8.8
CVE-2026-77692	.0656	93.7	7.5
CVE-2026-12268	.0473	91.6	8.8
CVE-2026-74849	.0461	91.5	9.8
CVE-2026-76698	.0453	91.3	6.5

Highest CVSS
CVE	CVSS	EPSS	Note
CVE-2026-85706	10.0	.9296	KEV
CVE-2026-76460	10.0	.1403	KEV
CVE-2026-108576	10.0	.0245
CVE-2026-105484	10.0	.0213
CVE-2026-73369	10.0	.0125
CVE-2026-75699	10.0	.0125
CVE-2026-75703	10.0	.0125
CVE-2026-75721	10.0	.0125
CVE-2026-84412	10.0	.0125
CVE-2026-89275	10.0	.0125

Most disclosures (vendor)
Vendor	CVEs
linux	1704
oracle	634
google	594
ibm	400
apache	304
red hat	287
apple	247
mozilla	158
nvidia	137
cisco	122

Most KEV additions (YTD)
Vendor	KEV
microsoft	31
cisco	17
apple	9
google	9
fortinet	8
linux	6
adobe	5
ivanti	5
berriai	4
checkpoint	4

Most-affected ecosystems
Ecosystem	Advisories
Maven	133
NuGet	29
npm	28
PyPI	19
Packagist	18
Go	12
crates.io	9
RubyGems	4

Fastest to KEV
CVE	Vendor	Days
CVE-2026-58704	Google	0
CVE-2026-86950	Apple	0
CVE-2026-88779	NetScaler	0
CVE-2026-93952	Arista Networks	0
CVE-2026-102489	Zammad GmbH	1
CVE-2026-102490	Zammad GmbH	1
CVE-2026-87902	WordPress	2
CVE-2026-85102	checkpoint	12
CVE-2026-67279	Mikrotik	19
CVE-2026-71362	Adobe	43

Longest unpatched (KEV due date passed)
CVE	Vendor	Due	Days over
CVE-2021-27104	n/a	2021-11-17	1789
CVE-2021-27102	n/a	2021-11-17	1789
CVE-2021-27101	n/a	2021-11-17	1789
CVE-2021-27103	n/a	2021-11-17	1789
CVE-2021-21017	Adobe	2021-11-17	1789
CVE-2021-28550	Adobe	2021-11-17	1789
CVE-2021-42013	Apache Software Foundation	2021-11-17	1789
CVE-2021-41773	Apache Software Foundation	2021-11-17	1789
CVE-2021-30858	Apple	2021-11-17	1789
CVE-2021-30860	Apple	2021-11-17	1789

Transactions

DISPUTED — CVE-2026-96515 (Netlink ICT Pvt Ltd Netlink ICT HG323RW Router). Record marked disputed.

PATCH SHIPPED — Red Hat Enterprise Linux 10: 3 CVEs (CVE-2026-86320, CVE-2026-96275, CVE-2026-96280). Fix versions published.

PATCH SHIPPED — CVE-2026-12894 (quarkus-qute). Fixed in Red Hat Build of Apache Camel 3.33.3.SP1 3.33.3.redhat-00005.

PATCH SHIPPED — CVE-2026-27408 (imithemes NativeChurch). Fixed in NativeChurch 4.9.5.

PATCH SHIPPED — CVE-2026-79992 (Red Hat Enterprise Linux 8). Fixed in Red Hat Enterprise Linux 8 1:26.1-15.el8_10.2.

Yesterday's Results

How to read these box scores · glossary

233 CVEs published. 25 box scores, 208 table rows — nothing truncated.

CVE-2026-108576CRITICAL

TOZED X300 IPPingDiagnostics process_ping os command injection

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   N   N   N   H   H   H   10.0   .0245   84.0     —

AFFECTED
  Product  Versions  Fixed
  X300     6.01.0 –  —

TIMELINE
  Oct 10  Reserved by CNA
  Oct 11  Published (CNA: VulDB)

CWE-77, CWE-78 · CNA: VulDB · CVSS v4.0 · 5 references · NVD status: Received

CVE-2026-108540HIGH

OpenSpug File Transfer transfer os command injection

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   N   L   N   H   H   H    8.6   .0170   76.6     —

AFFECTED
  Product  Versions  Fixed
  Spug     3.0 –     —

TIMELINE
  Oct 10  Reserved by CNA
  Oct 11  Published (CNA: VulDB)

CWE-77, CWE-78 · CNA: VulDB · CVSS v4.0 · 5 references · NVD status: Deferred

CVE-2026-108963HIGH

David-Crty databasement — databasement before 1.8.2 allows remote code execution because it runs certain commands (e.g., mariadb-dump…

  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   N   L   L   N  U  H  H  H    8.8   .0169   76.4     —

AFFECTED
  Product       Versions  Fixed
  databasement  1.0.0 –   —

TIMELINE
  Oct 11  Reserved by CNA
  Oct 11  Published (CNA: mitre)

CWE-88 · CNA: mitre · CVSS v3.1 · 5 references · NVD status: Deferred

CVE-2026-108772MEDIUM

bleenco abstruse Cache Endpoint download_cache.go filepath.Join path traversal

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   N   N   N   L   N   N    5.5   .0070   52.0     —

AFFECTED
  Product   Versions  Fixed
  abstruse  2.0 –     —

TIMELINE
  Oct 11  Reserved by CNA
  Oct 11  Published (CNA: VulDB)

CWE-22 · CNA: VulDB · CVSS v4.0 · 5 references · NVD status: Received

CVE-2026-104028CRITICAL

Unknown Anton Extensions — Anton Extensions <= 1.2.2 - Unauthenticated Arbitrary File Upload to RCE

  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   N   L   N   N  U  H  H  H    9.8   .0055   44.6     —

AFFECTED
  Product           Versions     Fixed
  Anton Extensions  unspecified  —

TIMELINE
  Oct 1   Reserved by CNA
  Oct 11  Published (CNA: WPScan)

CWE-434 · CNA: WPScan · CVSS v3.1 · 1 reference · NVD status: Received

CVE-2026-108707CRITICAL

WuKongOpenSource Wukong_HRM — Wukong_HRM through commit 186115e Authentication Bypass via ParamAspect

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   N   N   N   H   H   H    9.3   .0055   44.5     —

AFFECTED
  Product     Versions     Fixed
  Wukong_HRM  unspecified  —

TIMELINE
  Oct 10  Reserved by CNA
  Oct 11  Published (CNA: VulnCheck)

CWE-287 · CNA: VulnCheck · CVSS v4.0 · 6 references · NVD status: Received

CVE-2026-108744HIGH

MinaSaad1 pbi-cli — pbi-cli 3.10.1 through 3.12.0 OS Command Injection via Desktop Sync

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   L   L   P   N   P   H   H   H    7.3   .0055   44.2     —

AFFECTED
  Product  Versions  Fixed
  pbi-cli  3.10.1 –  —

TIMELINE
  Oct 11  Reserved by CNA
  Oct 11  Published (CNA: VulnCheck)

CWE-78 · CNA: VulnCheck · CVSS v4.0 · 5 references · NVD status: Received

CVE-2026-108859HIGH

mark3labs mcp-go — mcp-go through 1.2.1 Denial of Service via Unbounded POST Body Buffering

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   N   N   N   N   N   H    8.7   .0054   44.1     —

AFFECTED
  Product  Versions     Fixed
  mcp-go   unspecified  —

TIMELINE
  Oct 11  Reserved by CNA
  Oct 11  Published (CNA: VulnCheck)

CWE-770 · CNA: VulnCheck · CVSS v4.0 · 4 references · NVD status: Deferred

CVE-2026-108567LOW

InstantSoft icms2 Image image.php files_delete_file path traversal

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   N   L   N   N   N   L    2.1   .0053   43.2     —

AFFECTED
  Product  Versions  Fixed
  icms2    2.18.0 –  —

TIMELINE
  Oct 10  Reserved by CNA
  Oct 11  Published (CNA: VulDB)

CWE-22 · CNA: VulDB · CVSS v4.0 · 6 references · NVD status: Received

CVE-2026-108976HIGH

GNU Emacs before 31.2 (and TRAMP through 2.8.2) allows OS command injection via a filename because tramp-us…

  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   L   L   L   N  U  H  H  H    7.8   .0050   41.4     —

AFFECTED
  Product  Versions     Fixed
  Emacs    unspecified  —

TIMELINE
  Oct 11  Reserved by CNA
  Oct 11  Published (CNA: mitre)

CWE-184 · CNA: mitre · CVSS v3.1 · 3 references · NVD status: Received

CVE-2026-108578MEDIUM

Neterbit NW-431F Embedded Web Server sms.json information disclosure

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   N   N   N   L   N   N    6.9   .0049   39.9     —

AFFECTED
  Product  Versions    Fixed
  NW-431F  20250715 –  —

TIMELINE
  Oct 10  Reserved by CNA
  Oct 11  Published (CNA: VulDB)

CWE-200, CWE-284 · CNA: VulDB · CVSS v4.0 · 4 references · NVD status: Received

CVE-2026-108860CRITICAL

SciSharp BotSharp — BotSharp through 5.2.0 Authentication Bypass via Hard-Coded JWT Signing Key

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   N   N   N   H   H   N    9.3   .0048   39.3     —

AFFECTED
  Product   Versions     Fixed
  BotSharp  unspecified  —

TIMELINE
  Oct 11  Reserved by CNA
  Oct 11  Published (CNA: VulnCheck)

CWE-321 · CNA: VulnCheck · CVSS v4.0 · 5 references · NVD status: Received

CVE-2026-108681LOW

zhayujie CowAgent Web Console web_channel.py denial of service

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   N   L   N   N   N   L    2.1   .0045   37.3     —

AFFECTED
  Product   Versions  Fixed
  CowAgent  2.1.0 –   —

TIMELINE
  Oct 10  Reserved by CNA
  Oct 11  Published (CNA: VulDB)

CWE-404 · CNA: VulDB · CVSS v4.0 · 5 references · NVD status: Received

CVE-2026-108768LOW

zhayujie CowAgent Streaming Tool-Call Argument json.loads allocation of resources

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   N   L   N   N   N   L    2.1   .0045   37.3     —

AFFECTED
  Product   Versions  Fixed
  CowAgent  2.0 –     —

TIMELINE
  Oct 11  Reserved by CNA
  Oct 11  Published (CNA: VulDB)

CWE-400, CWE-770 · CNA: VulDB · CVSS v4.0 · 5 references · NVD status: Received

CVE-2026-108769LOW

zhayujie CowAgent Markdown Rendering Markdown.tsx denial of service

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   N   L   N   N   N   L    2.1   .0045   37.3     —

AFFECTED
  Product   Versions  Fixed
  CowAgent  2.0 –     —

TIMELINE
  Oct 11  Reserved by CNA
  Oct 11  Published (CNA: VulDB)

CWE-404 · CNA: VulDB · CVSS v4.0 · 5 references · NVD status: Received

CVE-2026-108863HIGH

Katanemo Plano through 0.4.37 Missing Authentication on Envoy Admin Interface

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   N   N   N   H   N   N    8.7   .0042   34.7     —

AFFECTED
  Product  Versions     Fixed
  Plano    unspecified  —

TIMELINE
  Oct 11  Reserved by CNA
  Oct 11  Published (CNA: VulnCheck)

CWE-306 · CNA: VulnCheck · CVSS v4.0 · 5 references · NVD status: Received

CVE-2026-108522MEDIUM

Studio-Saelix Sencho Login Endpoint login improper authentication

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   N   N   N   L   L   L    5.5   .0042   34.3     —

AFFECTED
  Product  Versions  Fixed
  Sencho   0.94.0 –  —

TIMELINE
  Oct 10  Reserved by CNA
  Oct 11  Published (CNA: VulDB)

CWE-287 · CNA: VulDB · CVSS v4.0 · 8 references · NVD status: Received

CVE-2026-108770MEDIUM

n/a Appwrite — Appwrite Browser Screenshot Service Get.php PublicHostname server-side request forgery

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   N   N   N   L   N   N    6.9   .0041   32.9     —

AFFECTED
  Product   Versions  Fixed
  Appwrite  2.0 –     2.4.0

TIMELINE
  Oct 11  Reserved by CNA
  Oct 11  Published (CNA: VulDB)

CWE-918 · CNA: VulDB · CVSS v4.0 · 9 references · NVD status: Received

CVE-2026-108682LOW

zhayujie CowAgent Web Console upload read denial of service

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   N   L   N   N   L   L    2.1   .0040   32.0     —

AFFECTED
  Product   Versions  Fixed
  CowAgent  2.1.0 –   —

TIMELINE
  Oct 10  Reserved by CNA
  Oct 11  Published (CNA: VulDB)

CWE-404 · CNA: VulDB · CVSS v4.0 · 5 references · NVD status: Received

CVE-2026-108902HIGH

ph7software ph7builder — pH7Builder before 18.5.0 Path Traversal Arbitrary File Deletion via picture_link

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   N   L   N   N   H   H    7.2   .0037   29.5     —

AFFECTED
  Product     Versions     Fixed
  ph7builder  unspecified  18.5.0

TIMELINE
  Oct 11  Reserved by CNA
  Oct 11  Published (CNA: VulnCheck)

CWE-22 · CNA: VulnCheck · CVSS v4.0 · 4 references · NVD status: Deferred

CVE-2026-108913HIGH

omarchy-theme-set in Omarchy 4 before 4.0.1 allows code execution via a third-party theme because the files…

  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   N   H   N   R  U  H  H  L    7.1   .0037   28.8     —

AFFECTED
  Product  Versions  Fixed
  Omarchy  4.0.0 –   —

TIMELINE
  Oct 11  Reserved by CNA
  Oct 11  Published (CNA: mitre)

CWE-829 · CNA: mitre · CVSS v3.1 · 4 references · NVD status: Received

CVE-2026-87762HIGH

Unknown Adwised Web Push Notification — Adwised Web Push Notification <= 2.5.7 - Unauthenticated Stored XSS via Secret Key Type Juggling

  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   N   L   N   R  U  H  H  H    8.8   .0036   28.0     —

AFFECTED
  Product                        Versions     Fixed
  Adwised Web Push Notification  unspecified  —

TIMELINE
  Sep 9   Reserved by CNA
  Oct 11  Published (CNA: WPScan)

CWE-79 · CNA: WPScan · CVSS v3.1 · 1 reference · NVD status: Received

CVE-2026-108584MEDIUM

FunnyWolf Viper config hard-coded credentials

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   N   N   N   L   N   N    5.5   .0036   27.8     —

AFFECTED
  Product  Versions  Fixed
  Viper    3.1.0 –   —

TIMELINE
  Oct 10  Reserved by CNA
  Oct 11  Published (CNA: VulDB)

CWE-259, CWE-798 · CNA: VulDB · CVSS v4.0 · 5 references · NVD status: Received

CVE-2026-108714HIGH

modelcontextprotocol kotlin-sdk — MCP Kotlin SDK through 0.15.0 Memory Exhaustion via Application.mcpWebSocket

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   N   N   N   N   N   H    8.7   .0036   27.6     —

AFFECTED
  Product     Versions     Fixed
  kotlin-sdk  unspecified  —

TIMELINE
  Oct 11  Reserved by CNA
  Oct 11  Published (CNA: VulnCheck)

CWE-770 · CNA: VulnCheck · CVSS v4.0 · 5 references · NVD status: Received

CVE-2026-108710HIGH

orneryd NornicDB — NornicDB through 1.4.1 Missing Authorization via Vector Search Endpoints

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   N   L   N   H   N   N    7.1   .0035   26.6     —

AFFECTED
  Product   Versions     Fixed
  NornicDB  unspecified  —

TIMELINE
  Oct 11  Reserved by CNA
  Oct 11  Published (CNA: VulnCheck)

CWE-862 · CNA: VulnCheck · CVSS v4.0 · 6 references · NVD status: Received

Remainder (ranked, continued)
CVE	CVSS	EPSS %ile	Vendor	Product	CWE	Title
CVE-2026-108753	9.3	25.8	agnaistic	agnai	CWE-798	Agnaistic agnai through 1.0.555 Hard-Coded Credentials in self-host Docker Co…
CVE-2026-84734	9.8	25.7	Unknown	Mindstien Quick Login	CWE-287	Mindstien Quick Login <= 1.0 - Unauthenticated Administrator Account Takeover…
CVE-2026-84737	9.8	25.7	Unknown	Freeton WP	CWE-287	Freeton WP <= 1.0.0 - Unauthenticated Account Takeover via 'secod' Parameter
CVE-2026-85118	9.8	25.7	Unknown	AI Content Generator Marketing	CWE-269	AI Content Generator Marketing <= 1.0.0 - Unauthenticated Privilege Escalatio…
CVE-2026-86798	8.8	25.5	Unknown	HootBoard	CWE-79	HootBoard <= 3.1.4 - Unauthenticated Stored XSS via Board Configuration REST …
CVE-2026-87760	8.8	25.5	Unknown	Web Vitals Tracking	CWE-79	Web Vitals Tracking <= 5.4.2 - Unauthenticated Stored XSS via Tracking Beacon…
CVE-2026-108543	2.1	25.4	ag2ai	ag2	CWE-22	ag2ai ag2 UserProxyAgent os.path.join path traversal
CVE-2026-14854	7.5	25.3	Unknown	WooCommerce Bookings	CWE-400	WooCommerce Bookings < 3.11.0 - Unauthenticated Denial of Service
CVE-2026-108544	5.3	24.9	Lippu	Docx Reader Office Viewer App	CWE-22	Lippu Docx Reader Office Viewer App path traversal
CVE-2026-108740	7.2	24.0	arp242	GoatCounter	CWE-915	GoatCounter through 2.7.0 Privilege Escalation via /user/pref Mass Assignment
CVE-2026-108865	8.8	23.5	AmoyLab	Unla	CWE-287	AmoyLab Unla through 0.10.0 OAuth2 Authentication Bypass via /authorize
CVE-2026-81420	8.6	23.6	Unknown	Tcard WP	CWE-89	Tcard WP <= 1.8.0 - Unauthenticated SQLi via group_id Parameter
CVE-2026-103695	8.6	23.6	Unknown	Mobile builder	CWE-89	Mobile Builder <= 1.4.2 - Unauthenticated SQLi via 'vendor_id' Parameter
CVE-2026-108739	8.7	23.4	openagents-org	OpenAgents	CWE-306	OpenAgents Workspace through launcher-v1.0.17 Unauthenticated Credential Expo…
CVE-2026-108724	6.9	23.4	Sylius	Sylius	CWE-639	Sylius through 2.3.0 Authorization Bypass via Shop API Product-Review Endpoint
CVE-2026-108759	7.6	23.2	EricLBuehler	mistral.rs	CWE-59	mistral.rs 0.9.0 through 0.9.4 Sandbox Escape via Symlink Following in mistra…
CVE-2026-108571	5.5	22.9	Xinhu	Rainrock RockOA	CWE-74	Xinhu Rainrock RockOA Openkqj Action openkqjAction.php returnchuli sql injection
CVE-2026-85126	7.2	22.7	Unknown	Crowdfundly	CWE-269	Crowdfundly <= 2.2.2 - Crowdfundly Manager+ Privilege Escalation
CVE-2026-104680	7.2	22.7	Unknown	Envira Gallery	CWE-269	Envira Gallery < 1.16.2 - Multisite Subsite Admin+ Arbitrary Plugin Installat…
CVE-2026-108904	7.1	22.6	ph7software	ph7builder	CWE-522	pH7Builder before 18.5.0 Sensitive Data Exposure via Member API UserController
CVE-2026-108755	6.9	22.5	hatchet-dev	hatchet	CWE-770	Hatchet through 0.110.5 Unauthenticated Memory Exhaustion via SNS Ingestion E…
CVE-2026-108683	2.1	22.0	zhayujie	CowAgent	CWE-400	zhayujie CowAgent Media Download memory allocation
CVE-2026-85121	9.1	21.9	Unknown	Insurify	CWE-862	Insurify <= 1.0 - Unauthenticated Arbitrary Option Creation and Overwrite via…
CVE-2026-86706	9.1	21.9	Unknown	Quick quotes	CWE-862	Quick quotes <= 1.0.0 - Unauthenticated Integer-Value Option Update
CVE-2026-86717	9.1	21.9	Unknown	Insurify	CWE-862	Insurify <= 1.0 - Unauthenticated Arbitrary Option Deletion via removeimg_popup
CVE-2026-108905	8.7	21.6	ph7software	ph7builder	CWE-798	pH7Builder before 18.6.0 Hard-Coded API Key Bypass via Host Header
CVE-2026-84258	8.8	21.3	Unknown	click5 CRM add-on to Ninja Forms	CWE-79	click5 CRM add-on to Ninja Forms <= 1.0.1 - Unauthenticated Stored XSS via po…
CVE-2026-84259	8.8	21.3	Unknown	click5 CRM add-on to WPForms	CWE-79	click5 CRM add-on to WPForms <= 1.0.3 - Unauthenticated Stored XSS via post_n…
CVE-2026-84260	8.8	21.3	Unknown	click5 CRM add-on to Gravity Forms	CWE-79	click5 CRM add-on to Gravity Forms <= 1.0.3 - Unauthenticated Stored XSS via …
CVE-2026-84261	8.8	21.3	Unknown	click5 CRM add-on to Contact Form 7	CWE-79	click5 CRM add-on to Contact Form 7 <= 1.0.4 - Unauthenticated Stored XSS via…
CVE-2026-108774	5.3	21.3	erzhongxmu	JEEWMS	CWE-89	erzhongxmu JEEWMS MdBinController.java getbinallagv sql injection
CVE-2026-108775	5.3	21.3	erzhongxmu	JEEWMS	CWE-89	erzhongxmu JEEWMS Search Endpoint WvNoticeController.java WvNoticeController.…
CVE-2026-108569	2.1	21.3	Furion	.NET Framework	CWE-74	Furion .NET Framework StringRenderExtensions.cs String.Replace sql injection
CVE-2026-108748	6.9	21.1	quarkiverse	quarkus-langchain4j	CWE-401	Quarkus LangChain4j 1.9.0 through 1.14.1 Memory Exhaustion via /_chat/routes …
CVE-2026-108539	2.1	21.0	n/a	GPAC	CWE-119	GPAC MP4Box filter_queue.c gf_fq_pop use after free
CVE-2026-108749	6.3	20.5	docling-project	docling-serve	CWE-306	docling-serve 1.14.0 through 1.36.0 Missing Authentication via Memory Managem…
CVE-2026-108853	7.2	20.3	UnicomAI	Wanwu	CWE-639	UnicomAI Wanwu before 0.6.3 IDOR via DELETE /v1/appspace/app
CVE-2026-108729	8.2	20.2	cortezaproject	corteza	CWE-863	Corteza through 2024.9.10 Unauthenticated Attachment Access via Compose Attac…
CVE-2026-108577	2.1	20.2	Konstanty Bialkowski	libmodplug	CWE-400	Konstanty Bialkowski libmodplug ABC Music Format load_abc.cpp abc_add_gchord …
CVE-2026-81649	9.1	20.0	Unknown	Fundiin cho WooCommerce	CWE-863	Fundiin <= 3.4.0 - Unauthenticated Payment Gateway Settings Update and Creden…
CVE-2026-12980	6.8	19.9	Unknown	Post Snippets	CWE-79	Post Snippets <= 4.2.4 - Contributor+ Stored XSS via Snippet Variable
CVE-2026-81153	6.8	19.9	Unknown	Robo Gallery	CWE-79	Robo Gallery < 5.2.6 - Author+ Stored XSS via Image Overlay Effect Meta
CVE-2026-81154	6.8	19.9	Unknown	Robo Gallery	CWE-79	Robo Gallery < 5.2.6 - Author+ Stored XSS via Image Alt Text
CVE-2026-81155	6.8	19.9	Unknown	Robo Gallery	CWE-79	Robo Gallery < 5.2.6 - Author+ Stored XSS via Gallery Search Label
CVE-2026-81156	6.8	19.9	Unknown	Robo Gallery	CWE-79	Robo Gallery < 5.2.6 - Contributor+ Stored XSS via Gallery Settings
CVE-2026-103694	8.8	19.5	Unknown	Mobile builder	CWE-269	Mobile builder <= 1.4.2 - Subscriber+ Privilege Escalation to Admin
CVE-2026-108708	8.7	19.2	WuKongOpenSource	Wukong_HRM	CWE-862	Wukong_HRM through commit 186115e Missing Authorization via EmployeeAspect an…
CVE-2026-108746	8.7	19.2	Vearch	vearch	CWE-863	Vearch 3.5.2 through 3.5.9 Incorrect Authorization via Role.HasPermissionForR…
CVE-2026-107761	5.3	19.2	GitroomHQ	postiz-app	CWE-201	Channel tokens and organization API key exposed in API responses
CVE-2026-88827	8.8	19.1	Unknown	Disable Users	CWE-287	Disable Users <= 1.0.5 - Disabled Account Authentication Bypass via XML-RPC a…
CVE-2026-108719	5.3	19.1	theopenco	LLMGateway	CWE-918	LLMGateway through 1.20.0 Blind SSRF via Video-Generation callback_url
CVE-2026-59508	5.9	18.8	Interuse	i-Bos	CWE-89	Interuse i-Bos CWE-89: Improper Neutralization of Special Elements used in an…
CVE-2026-87761	8.0	18.7	Unknown	Adwised Web Push Notification	CWE-79	Adwised Web Push Notification <= 2.5.7 - Subscriber+ Stored XSS via Pop-up Se…
CVE-2026-108711	5.3	18.6	Plastic Labs	honcho	CWE-863	Plastic Labs Honcho through 3.3.0 Incorrect Authorization via POST /v3/worksp…
CVE-2026-108712	5.3	18.6	SuiteCRM	SuiteCRM	CWE-862	SuiteCRM through 7.15.2 and 8.10.2 Missing Authorization via DetailUserRole E…
CVE-2026-108720	5.3	18.6	phpipam	phpipam	CWE-862	phpIPAM through 1.8.3 Missing Authorization in Customers, Locations and NAT P…
CVE-2026-108732	5.3	18.6	frappe	hrms	CWE-862	Frappe HR (hrms) before 16.11.0 Missing Authorization via get_account_and_amount
CVE-2026-87764	8.8	18.5	Unknown	BuddyPress Instant Chat	CWE-79	BuddyPress Instant Chat <= 1.6 - Unauthenticated Stored XSS via Chat Message
CVE-2026-88903	8.8	18.5	Unknown	Topcontent	CWE-79	Topcontent <= 1.2.1 - Unauthenticated Stored XSS via Content Webhook
CVE-2026-88905	8.8	18.5	Unknown	KeyWord Collector	CWE-79	KeyWord Collector <= 1.4 - Unauthenticated Stored XSS and Settings Update via…
CVE-2026-96227	8.8	18.5	Unknown	Piotnet Forms	CWE-79	Piotnet Forms <= 1.0.30 - Unauthenticated Stored XSS via File Upload
CVE-2026-108718	8.6	17.8	Rill Data	rill	CWE-862	Rill 0.77.0 through 0.90.5 OAuth Missing Authorization via Dynamic Client Reg…
CVE-2026-108903	6.9	17.8	ph7software	ph7builder	CWE-807	pH7Builder before 19.3.0 CAPTCHA Bypass via Client-Chosen Form ID
CVE-2026-108695	7.1	17.6	multivendorx	MultiVendorX	CWE-863	MultiVendorX through 5.0.19 Incorrect Authorization via Settings REST Endpoint
CVE-2026-108715	5.3	17.6	librenms	librenms	CWE-639	LibreNMS through 26.9.1.1 Authorization Bypass via Smokeping Graph auth.inc.php
CVE-2026-108735	5.3	17.6	miniflux	miniflux	CWE-918	Miniflux 2.3.0 through 2.3.3 SSRF via Per-Feed Proxy URL
CVE-2026-108727	5.3	17.5	tianma-if	EdgeEver	CWE-862	EdgeEver through 1.108.0 Missing Authorization via Memo-Template API Routes
CVE-2026-108750	5.3	17.5	OpenDocMan	OpenDocMan	CWE-409	OpenDocMan 2.4.0 through 2.10.0 Decompression Bomb DoS via Upload Text Extrac…
CVE-2026-89232	8.6	17.4	Unknown	Recordbrowser	CWE-89	RecordBrowser <= 1.1.7 - Unauthenticated SQLi via 'recordid' Parameter
CVE-2026-89234	8.6	17.4	Unknown	WP-Partner	CWE-89	WP-Partner <= 1.2.1 - Unauthenticated SQLi via 'id' Parameter
CVE-2026-108717	5.3	16.9	Combodo	iTop	CWE-862	Combodo iTop 3.1.0 through 3.3.0 Missing Authorization via LinkSetController
CVE-2026-108758	8.8	16.6	alextselegidis	easyappointments	CWE-639	Easy!Appointments through 1.6.0 Authorization Bypass via booking/register End…
CVE-2026-88930	8.6	16.7	Unknown	Social Web Suite	CWE-89	Social Web Suite <= 4.1.12 - Unauthenticated Blind SQLi via Unset Shared Secret
CVE-2026-89195	8.6	16.7	Unknown	Site Setup Wizard	CWE-89	Site Setup Wizard <= 1.5.8 - Unauthenticated SQLi via ssw_check_admin_email_e…
CVE-2026-89213	8.6	16.7	Unknown	Llavero.io	CWE-89	Llavero.io <= 0.1.4 - Unauthenticated Blind SQLi via 'cill_login' Parameter
CVE-2026-89214	8.6	16.7	Unknown	WpCues Basic Quiz	CWE-89	WpCues Basic Quiz <= 1.6.5 - Unauthenticated SQLi via Quiz Result Submission
CVE-2026-89285	8.6	16.7	Unknown	Datalist it	CWE-89	Datalist it <= 0.0.3 - Unauthenticated SQLi via dli_fronted_action
CVE-2026-89287	8.6	16.7	Unknown	ASPL Product Quotation	CWE-89	ASPL Product Quotation <= 1.1.0 - Unauthenticated SQLi via 'quote_id' Parameter
CVE-2026-89297	8.6	16.7	Unknown	Loja Automática	CWE-89	Loja Automática <= 1.0.0 - Unauthenticated SQLi via 'id' Parameter
CVE-2026-89299	8.6	16.7	Unknown	WP Verify API	CWE-89	WP Verify API <= 1.0.0 - Unauthenticated SQLi via 'verify' Parameter
CVE-2026-89302	8.6	16.7	Unknown	Post Voting System	CWE-89	Post Voting System <= 1.0 - Unauthenticated SQLi via 'id' Parameter
CVE-2026-108694	7.1	16.3	C4illin	ConvertX	CWE-73	ConvertX through 0.19.0 Arbitrary File Read via Pandoc Converter
CVE-2026-108713	5.3	16.3	SuiteCRM	SuiteCRM	CWE-862	SuiteCRM through 7.15.2 and 8.10.2 Missing Authorization via setCampaignMarke…
CVE-2026-108733	5.3	16.3	frappe	hrms	CWE-862	Frappe HR (hrms) before 16.11.0 Missing Authorization via expire_allocation
CVE-2026-108684	5.3	15.8	erzhongxmu	Jeewms	CWE-74	erzhongxmu Jeewms Autocomplete Data JeecgFormDemoController.java getTreeData …
CVE-2026-108737	7.6	15.5	Traccar	Traccar	CWE-640	Traccar through 6.16.0 Weak Password Recovery via TokenManager Token Purpose …
CVE-2026-106029	7.5	15.6	Unknown	WeddingCity Lite	CWE-862	WeddingCity Lite <= 1.0.4 - Unauthenticated Arbitrary Post and Attachment Del…
CVE-2026-108726	5.3	15.2	glpi-project	GLPI	CWE-862	GLPI through 12.0.0 Missing Authorization via ajax/map.php
CVE-2026-108730	5.3	15.2	The-Commit-Company	raven	CWE-862	Raven 2.0.0 through 3.0.0 Missing Authorization via Legacy Message and File APIs
CVE-2026-108734	5.3	15.2	frappe	crm	CWE-862	Frappe CRM 1.49.0 through 1.87.0 Missing Authorization via get_linked_docs_of…
CVE-2026-108839	2.3	15.2	thClaws	thClaws	CWE-59	thClaws through 0.141.0 Symlink Following File Write via POST /v1/inputs
CVE-2026-108752	2.3	14.5	jupyterhub	jupyterhub	CWE-694	JupyterHub through 6.0.1 OAuth Client ID Collision via Unescaped Hyphen
CVE-2026-108698	8.3	14.3	hyper-mcp-rs	hyper-mcp	CWE-367	hyper-mcp through 0.8.3 OCI Plugin Signature Verification TOCTOU Race Condition
CVE-2026-108760	7.2	14.1	llama-farm	llamafarm	CWE-1327	LlamaFarm through 0.0.34 Unauthenticated API Exposed on All Interfaces
CVE-2026-108850	6.9	13.8	guy-hartstein	company-research-agent	CWE-918	Company Research Agent through 2.2.0 SSRF via /generate-pdf ReportLab Markup
CVE-2026-108692	7.1	13.7	1Panel-dev	CordysCRM	CWE-862	1Panel-dev CordysCRM 1.9.0 before 1.9.2 Missing Authorization via /field/sour…
CVE-2026-108700	7.1	13.7	1Panel-dev	CordysCRM	CWE-862	1Panel-dev CordysCRM before 1.9.2 Missing Authorization via /field/source/bus…
CVE-2026-108691	5.3	13.7	gz-yami	mall4j	CWE-783	mall4j through 4.0 Operator Precedence Error Deletes Other Users' Cart Items …
CVE-2026-108574	2.1	13.7	BerriAI	LiteLLM	CWE-285	BerriAI LiteLLM Spend Tracking spend_management_endpoints.py ui_view_session_…
CVE-2026-108541	2.1	13.6	highwarden	Super Store Finder	CWE-74	highwarden Super Store Finder index.php sql injection
CVE-2026-89304	6.5	13.2	Unknown	paymendo	CWE-89	Paymendo Bank Transfer <= 1.1 - Unauthenticated Blind SQLi via 'paymendo_bank…
CVE-2026-108861	5.3	13.1	erpipe-org	Odoo MCP	CWE-200	Odoo MCP 1.0.0 through 1.3.2 Information Disclosure via execute_method Tool
CVE-2026-108728	7.1	12.9	flyteorg	flyte	CWE-312	Flyte 2.0.1 through 2.0.51 Cleartext Secret Exposure via Admission Webhook
CVE-2026-108722	2.3	13.0	e2b-dev	open-computer-use	CWE-79	open-computer-use through commit 610bac8 Stored XSS via log.html Session Log
CVE-2026-104681	2.7	12.7	Unknown	Envira Gallery	CWE-200	Envira Gallery < 1.16.2 - Author+ Non-Public Post Title and Excerpt Disclosur…
CVE-2026-107694	2.7	12.7	Unknown	Dokan: AI Powered WooCommerce Multivendor Marketplace Solution	CWE-200	Dokan < 5.2.0 - Vendor+ Cross-Vendor Commission Settings Disclosure via Commi…
CVE-2026-108757	7.1	12.6	Nexting	pinclaw	CWE-306	Nexting pinclaw through 0.3.0 Missing Authentication via POST /pinclaw/send
CVE-2026-108702	5.3	12.5	1Panel-dev	CordysCRM	CWE-862	CordysCRM through 1.9.3 Missing Authorization and Blind SSRF via Webhook Test
CVE-2026-108570	2.1	12.5	Furion	.NET Framework	CWE-791	Furion .NET Framework View ViewEngine.cs RunCompile special elements in templ…
CVE-2026-108862	6.0	12.4	APIParkLab	APIPark	CWE-639	APIPark through 1.9.7-beta IDOR via application authorization endpoints
CVE-2026-108854	5.3	12.4	UnicomAI	Wanwu	CWE-639	Wanwu before 0.6.3 IDOR AppKey Deletion via DELETE /v1/appspace/app/key
CVE-2026-108731	5.3	11.9	The-Commit-Company	raven	CWE-862	Raven 2.0.0 through 3.0.0 Missing Authorization via join_workspace Invite-Onl…
CVE-2026-108696	5.3	11.7	CoreUnion	CoreShop	CWE-639	CoreShop through 1.5.5 Authorization Bypass via OrderController OrderConfirm …
CVE-2026-108704	5.3	11.7	1Panel-dev	CordysCRM	CWE-639	CordysCRM through 1.9.3 Authorization Bypass via Follow-Up Record Add Endpoints
CVE-2026-108572	2.1	11.8	n/a	Casdoor	CWE-918	Casdoor Proxy Validation cas.go CasP3ProxyValidate server-side request forgery
CVE-2026-108856	2.3	11.6	UnicomAI	Wanwu	CWE-639	UnicomAI Wanwu through 0.6.5 Authorization Bypass via /v1/appspace/app/key Ap…
CVE-2026-108538	2.1	11.4	n/a	GPAC	CWE-119	GPAC MP4Box os_thread.c gf_mx_v use after free
CVE-2026-108756	5.3	11.3	Abilityai	trinity	CWE-862	Abilityai Trinity through 0.9.5 Missing Authorization in Telegram Binding Routes
CVE-2026-108855	5.3	11.3	UnicomAI	Wanwu	CWE-862	UnicomAI Wanwu through 0.6.5 Missing Authorization via DELETE /v1/appspace/ap…
CVE-2026-104684	2.7	11.3	Unknown	Envira Gallery	CWE-639	Envira Gallery < 1.16.2 - Author+ IDOR via Shortcode
CVE-2026-108521	2.0	11.3	Studio-Saelix	Sencho	CWE-918	Studio-Saelix Sencho Add Remote Node API Endpoint validation.ts isValidRemote…
CVE-2026-19577	7.1	11.2	zephyrproject	zephyr	CWE-125	Out-of-bounds read in IPv6 route forwarding when the nexthop neighbor has no …
CVE-2026-108690	5.3	11.2	gz-yami	mall4j	CWE-783	mall4j through 4.0 Operator Precedence Error Exposes Other Users' Cart Items …
CVE-2026-89283	8.6	11.0	Unknown	WP Posts Password Batch Manager	CWE-862	WP Posts Password Batch Manager <= 1.1 - Unauthenticated Bulk Post Password R…
CVE-2026-89305	6.5	11.0	Unknown	paymendo	CWE-89	Paymendo Bank Transfer <= 1.1 - Subscriber+ SQLi via 'orderBy' Parameter
CVE-2026-108725	5.1	11.0	cheshire-cat-ai	core	CWE-79	Cheshire Cat AI core through 2.0.23 Stored XSS via uploads plugin
CVE-2026-108883	7.1	10.7	jeecgboot	JeecgBoot	CWE-862	JeecgBoot through 3.9.5 Missing Authorization via /sys/thirdApp/editThirdAppC…
CVE-2026-108747	2.3	10.6	Lightdash	lightdash	CWE-639	Lightdash through 2.556.0 Authorization Bypass via Personal Access Token Dele…
CVE-2026-108877	5.3	10.5	jeecgboot	JeecgBoot	CWE-862	JeecgBoot through 3.9.5 Missing Authorization via /airag/prompts/delete
CVE-2026-108882	5.3	10.5	jeecgboot	JeecgBoot	CWE-862	JeecgBoot through 3.9.5 Missing Authorization via /sys/position/removePositio…
CVE-2026-108884	5.3	10.5	jeecgboot	JeecgBoot	CWE-862	JeecgBoot through 3.9.5 Missing Authorization via sysMessageTemplate Delete E…
CVE-2026-108885	5.3	10.5	jeecgboot	JeecgBoot	CWE-862	JeecgBoot through 3.9.5 Missing Authorization via /sys/message/sysMessage/delete
CVE-2026-108688	5.3	10.1	elunez	eladmin	CWE-862	Eladmin through 2.7 Missing Authorization via /api/localStorage/pictures Upload
CVE-2026-108745	2.3	9.9	DBeaver	CloudBeaver	CWE-862	CloudBeaver through 25.3.5 Missing Authorization via /api/sql-result-value Se…
CVE-2026-108736	6.3	9.7	alexjustesen	speedtest-tracker	CWE-348	Speedtest Tracker through 1.15.0 IP Allowlist Bypass via X-Forwarded-For Spoo…
CVE-2026-108868	5.3	9.8	jeecgboot	JeecgBoot	CWE-862	JeecgBoot through 3.9.5 Missing Authorization via /sys/api/sendBusTemplateAnn…
CVE-2026-108869	5.3	9.8	jeecgboot	JeecgBoot	CWE-862	JeecgBoot through 3.9.5 Missing Authorization via /sys/api/sendSysAnnouncement
CVE-2026-108925	6.1	9.6	Cohesity	NetBackup Administration Console web interface	CWE-80	Cohesity - CWE-80: Improper Neutralization of Script-Related HTML Tags in a W…
CVE-2026-104682	2.7	9.6	Unknown	Envira Gallery	CWE-862	Envira Gallery < 1.16.2 - Contributor Missing Authorization via Convert Galle…
CVE-2026-107507	2.7	9.6	Unknown	Squadeno	CWE-863	Squadeno < 1.12.0 - Trainer+ Section and Age Group Reassignment via Quick Edit
CVE-2026-108542	2.1	9.2	021is	elvix-sdk	CWE-918	021is elvix-sdk MCP Request index.ts server-side request forgery
CVE-2026-108575	2.1	9.2	BerriAI	LiteLLM	CWE-266	BerriAI LiteLLM Secret Resolution main.py get_secret improper authorization
CVE-2026-108716	6.0	9.0	punkpeye	mcp-remote	CWE-319	mcp-remote 0.8.0 through 0.14.3 Cleartext Credential Transmission via --devic…
CVE-2026-108697	5.3	9.0	CoreShop	CoreShop	CWE-862	CoreShop through 2026.2.2 Missing Authorization via ResourceController listAc…
CVE-2026-108566	2.0	8.9	InstantSoft	icms2	CWE-79	InstantSoft icms2 Private Message index.tpl.php index cross site scripting
CVE-2026-108701	5.3	8.6	1Panel-dev	CordysCRM	CWE-862	1Panel-dev CordysCRM before 1.9.2 Missing Authorization via POST /contract/sort
CVE-2026-108705	5.3	8.6	1Panel-dev	CordysCRM	CWE-862	CordysCRM through 1.9.3 Missing Authorization via /custom-form/data/import
CVE-2026-108742	5.3	8.6	DBeaver	CloudBeaver	CWE-862	CloudBeaver through 25.3.5 Missing Authorization via initConnection GraphQL M…
CVE-2026-108706	5.3	8.2	elunez	eladmin	CWE-862	eladmin through commit 55fbf70 Missing Authorization via S3 Storage Download …
CVE-2026-108866	5.3	8.2	jeecgboot	JeecgBoot	CWE-862	JeecgBoot through 3.9.5 Missing Authorization via /sys/api/queryUserAuths
CVE-2026-108867	5.3	8.2	jeecgboot	JeecgBoot	CWE-862	JeecgBoot through 3.9.5 Missing Authorization via /sys/api/getUserRoleSetById
CVE-2026-108878	5.3	8.2	jeecgboot	JeecgBoot	CWE-862	JeecgBoot through 3.9.5 Missing Authorization via /airag/app/queryById
CVE-2026-108879	5.3	8.2	jeecgboot	JeecgBoot	CWE-639	JeecgBoot through 3.9.5 IDOR via /airag/api/getChatVariable Username Parameter
CVE-2026-108881	5.3	8.2	jeecgboot	JeecgBoot	CWE-862	JeecgBoot through 3.9.5 Missing Authorization via /sys/tenant/getTenantPackInfo
CVE-2026-108886	5.3	8.2	jeecgboot	JeecgBoot	CWE-862	JeecgBoot through 3.9.5 Missing Authorization via /sys/user/queryChildrenByUs…
CVE-2026-108887	5.3	8.2	jeecgboot	JeecgBoot	CWE-862	JeecgBoot through 3.9.5 Missing Authorization via /sys/comment/exportXls
CVE-2026-108888	5.3	8.2	jeecgboot	JeecgBoot	CWE-862	JeecgBoot through 3.9.5 Missing Authorization via /sys/sysDepartRole/exportXls
CVE-2026-108891	5.3	8.2	jeecgboot	JeecgBoot	CWE-862	JeecgBoot through 3.9.5 Missing Authorization via /sys/user/getUserDetailByUs…
CVE-2026-108777	5.3	8.2	erzhongxmu	JEEWMS	CWE-89	erzhongxmu JEEWMS WvGiController.java WvGiController.list sql injection
CVE-2026-108778	5.3	8.2	erzhongxmu	JEEWMS	CWE-89	erzhongxmu JEEWMS Inbound Quality Check Pda WmInQmIController.java WmInQmICon…
CVE-2026-108773	2.1	8.2	erzhongxmu	JEEWMS	CWE-74	erzhongxmu JEEWMS WmOmNoticeHController.java docheck sql injection
CVE-2026-108872	5.3	7.9	jeecgboot	JeecgBoot	CWE-862	JeecgBoot through 3.9.5 Missing Authorization via /sys/user/batchEditUsers
CVE-2026-108873	5.3	7.9	jeecgboot	JeecgBoot	CWE-862	JeecgBoot through 3.9.5 Missing Authorization via /sys/user/doUpdateDepartInfo
CVE-2026-108874	5.3	7.9	jeecgboot	JeecgBoot	CWE-862	JeecgBoot through 3.9.5 Missing Authorization via /sys/user/changeDepartCharg…
CVE-2026-108875	5.3	7.9	jeecgboot	JeecgBoot	CWE-862	JeecgBoot through 3.9.5 Missing Authorization via /sys/user/addSysUserGroup
CVE-2026-108876	5.3	7.9	jeecgboot	JeecgBoot	CWE-862	JeecgBoot through 3.9.5 Missing Authorization via /sys/user/putCancelQuit
CVE-2026-108880	5.3	7.9	jeecgboot	JeecgBoot	CWE-862	JeecgBoot through 3.9.5 Missing Authorization via /sys/dict/editDictByLowAppId
CVE-2026-84251	9.8	7.4	Unknown	click5 CRM add-on to Ninja Forms	CWE-862	click5 CRM add-on to Ninja Forms <= 1.0.1 - Unauthenticated Arbitrary Options…
CVE-2026-84252	9.8	7.4	Unknown	click5 CRM add-on to WPForms	CWE-862	click5 CRM add-on to WPForms <= 1.0.3 - Unauthenticated Arbitrary Options Update
CVE-2026-84253	9.8	7.4	Unknown	click5 CRM add-on to Gravity Forms	CWE-862	click5 CRM add-on to Gravity Forms <= 1.0.3 - Unauthenticated Arbitrary Optio…
CVE-2026-84254	9.8	7.4	Unknown	click5 CRM add-on to Contact Form 7	CWE-862	click5 CRM add-on to Contact Form 7 <= 1.0.4 - Unauthenticated Arbitrary Opti…
CVE-2026-108852	2.1	7.4	OvidijusParsiunas	Deep Chat	CWE-79	Deep Chat through 2.5.1 XSS via Markdown Link Validation Bypass
CVE-2026-108741	2.3	7.1	shepherd-agents	Shepherd	CWE-367	Shepherd through 0.3.1 SSRF via DNS Rebinding in Citation Checker
CVE-2026-19935	7.5	6.9	zephyrproject	zephyr	CWE-416	Use-after-free of an L2CAP CoC channel object in the Zephyr Bluetooth host: R…
CVE-2026-93550	4.3	6.6	Unknown	Veeqo for WooCommerce	CWE-434	Veeqo for WooCommerce <= 2.2.8 - Subscriber+ Arbitrary File Upload via start_…
CVE-2026-97183	4.3	6.6	Unknown	WP-Invoice	CWE-200	WP-Invoice <= 4.3.1 - Subscriber+ User PII Disclosure via Unprotected AJAX Ha…
CVE-2026-108689	5.3	6.0	WuKongOpenSource	Wukong AICRM	CWE-639	Wukong AICRM through 20260610 Authorization Bypass via User-Controlled Sessio…
CVE-2026-108703	5.3	6.0	1Panel-dev	CordysCRM	CWE-862	CordysCRM through 1.9.3 Missing Authorization via /approval-resource/push
CVE-2026-108870	5.3	6.0	jeecgboot	JeecgBoot	CWE-862	JeecgBoot through 3.9.5 Missing Authorization via POST /sys/role/datarule
CVE-2026-108871	5.3	6.0	jeecgboot	JeecgBoot	CWE-862	JeecgBoot through 3.9.5 Missing Authorization via POST /sys/sysDepartRole/dat…
CVE-2026-19576	6.8	5.8	zephyrproject	zephyr	CWE-787	Stack out-of-bounds write in the Goodix GT911 touch controller driver from an…
CVE-2026-108573	5.1	5.7	Open Asset Import Library	Assimp	CWE-119	Open Asset Import Library Assimp PLY File getNextBlock out-of-bounds
CVE-2026-108864	2.3	5.7	iflytek	astron-agent	CWE-639	iFlytek Astron Agent through 1.1.2 Authorization Bypass via /workflow/v1/resu…
CVE-2026-103305	8.8	5.4	Unknown	Prenotazioni	CWE-79	Prenotazioni <= 1.7.5 - Unauthenticated Stored XSS via Settings Update
CVE-2026-91829	7.1	5.1	Unknown	Subscribe to Comments	CWE-79	Subscribe to Comments < 2.3.3 - Reflected XSS via 'ref' Parameter
CVE-2026-19735	4.8	4.7	zephyrproject	zephyr	CWE-330	Predictable TCP initial sequence numbers when the RFC 6528 secret key generat…
CVE-2026-88826	8.8	3.9	Unknown	SmugMug Embed	CWE-79	SmugMug Embed <= 3.13 - Unauthenticated Stored XSS via saveSelectedAlbums
CVE-2026-94235	4.3	3.8	Unknown	MemberHero	CWE-862	Simple User Registration <= 6.9 - Subscriber+ Arbitrary Email Sending via wpr…
CVE-2026-108978	5.5	3.5	Samsung Opensource	rlottie	CWE-122	Heap-based buffer overflow vulnerability in Samsung Opensource rlottie allows…
CVE-2026-108751	4.8	3.0	modu-ai	moai-adk	CWE-59	MoAI-ADK through 3.1.2 Symlink Following via moai init Template Deployer
CVE-2026-108723	2.0	2.6	QingYunA	answer-me-with-html	CWE-59	answer-me-with-html through 0.5.0 Symlink Following in Code Block src Embedding
CVE-2026-108568	2.1	2.5	InstantSoft	icms2	CWE-345	InstantSoft icms2 Billing paypal.php validatePaypalOrder data authenticity
CVE-2026-108721	5.8	2.4	iFurySt	open-computer-use	CWE-178	Open Computer Use through 1.0.0 Denylist Bypass via Case-Variant Bundle ID
CVE-2026-108693	7.3	2.1	ImageMagick	ImageMagick	CWE-427	ImageMagick through 7.1.2-33 and 6.9.13-58 Uncontrolled Search Path via Ghost…
CVE-2026-108699	8.3	1.9	hyper-mcp-rs	hyper-mcp	CWE-347	hyper-mcp through 0.8.3 Improper Signature Verification of OCI WebAssembly Pl…
CVE-2026-19669	7.8	1.7	zephyrproject	zephyr	CWE-787	Unbounded variable-length array in fuel gauge syscall verifiers allows kernel…
CVE-2026-108858	6.8	1.4	Predibase	LoRAX	CWE-532	Predibase LoRAX through 0.12.1 API Token Exposure via Router Logs
CVE-2026-108738	2.3	1.4	Traccar	Traccar	CWE-352	Traccar 5.7 through 6.16.0 Login CSRF via OpenID Connect Callback
CVE-2026-19736	7.8	1.3	zephyrproject	zephyr	CWE-787	Out-of-bounds write in the NXP MCUX TRNG entropy driver for non-word-multiple…
CVE-2026-108754	4.8	1.2	tbphp	gpt-load	CWE-532	GPT-Load through 1.4.11 Cleartext Proxy Key Logging via Access Logger
CVE-2026-108857	4.8	1.2	Hugging Face	Text Embeddings Inference	CWE-532	Hugging Face Text Embeddings Inference through 1.9.4 Cleartext API Key Logging
CVE-2026-18418	3.4	1.1	zephyrproject	zephyr	CWE-125	Out-of-bounds read when the zbus proxy agent IPC backend logs a rejected peer…
CVE-2026-19738	6.5	1.0	zephyrproject	zephyr	CWE-401	Retained RX node leak and reachable assertion in Bluetooth Controller CIS Cre…
CVE-2026-19740	6.5	1.0	zephyrproject	zephyr	CWE-401	Bluetooth LE Controller: retained RX node leak and reachable assertion in the…
CVE-2026-19739	6.5	0.9	zephyrproject	zephyr	CWE-401	Bluetooth LE controller leaks a retained RX node when an unexpected LL Contro…
CVE-2026-108851	4.8	0.9	thorsten	phpMyFAQ	CWE-862	phpMyFAQ through 4.1.10 Missing Authorization via MCP Server faq_search Tool
CVE-2026-19737	5.5	0.8	zephyrproject	zephyr	CWE-476	NULL pointer dereference in the ESP32 I2S driver when triggering an unsupport…
CVE-2026-88785	4.7	0.4	Unknown	Simple Membership	CWE-200	Simple Membership < 4.8.3 - Newly Registered Member Password Disclosure via U…

Methodology

Ranking. Sort: (1) KEV membership, descending. (2) EPSS score, descending. (3) CVSS base score, descending. (4) CVE ID, ascending. CVEs lacking EPSS or CVSS data sort below those that have it within their KEV tier and are labeled AWAITING ENRICHMENT. Missing scores are never imputed.

Standings. Vendor tables exclude records whose vendor field is a placeholder (n/a, unknown); the excluded count is stated under the standings. Rate stats are arithmetic over published figures: KEV/100 = KEV additions YTD ÷ CVEs YTD × 100; Med CVSS and Med EPSS are medians over the vendor's year-to-date disclosures.

Day boundary. A day is a UTC calendar day. This page covers 2026-10-11 00:00:00–23:59:59 UTC. All times shown are UTC.

Feed status for this edition. cvelist: ok · kev: ok · epss: ok · nvd: ok.

Sources. CVE records from the CVE Program (cvelistV5). Enrichment from the National Vulnerability Database (NIST). Known-exploited status from the CISA KEV catalog. Exploit probability from FIRST EPSS. Open-source advisories from OSV.dev. This page reports the public record; it does not analyze, rank by opinion, or editorialize. See full methodology.

Machine-readable. This edition as JSON or CSV — the ranked results, transactions, and counts, for citation or ingestion. Frozen at publication; later changes appear as transactions on later editions.