|
Critical
|
21 Oct 2026 |
22 Oct 2026 |
CPAI-2026-15224
|
|
CVE-2026-109618 CVE-2026-109619
|
PHP Remote Code Execution (CVE-2026-109618; CVE-2026-109619)
|
|
Critical
|
22 Oct 2026 |
22 Oct 2026 |
CPAI-2026-15010
|
|
CVE-2026-103849
|
Adobe Multiple Products Server-Side Template Injection (CVE-2026-103849)
|
|
High
|
22 Oct 2026 |
22 Oct 2026 |
CPAI-2026-14895
|
|
CVE-2026-5683 CVE-2026-5684 CVE-2026-5685 CVE-2026-5686 CVE-2026-5687 CVE-2026-8138
|
Tenda CX12L Stack Overflow (CVE-2026-5683; CVE-2026-5684; CVE-2026-5685; CVE-2026-5686; CVE-2026-5687; CVE-2026-8138)
|
|
High
|
22 Oct 2026 |
22 Oct 2026 |
CPAI-2026-14894
|
|
CVE-2026-2180 CVE-2026-2186 CVE-2026-2187
|
Tenda RX3 Stack Overflow (CVE-2026-2180; CVE-2026-2186; CVE-2026-2187)
|
|
High
|
22 Oct 2026 |
22 Oct 2026 |
CPAI-2026-14893
|
|
CVE-2024-30891 CVE-2026-31255 CVE-2026-4253
|
Tenda AC8 Command Injection (CVE-2026-4253; CVE-2024-30891; CVE-2026-31255)
|
|
High
|
22 Oct 2026 |
22 Oct 2026 |
CPAI-2026-14892
|
|
CVE-2026-5152 CVE-2026-5154 CVE-2026-5156 CVE-2026-5604 CVE-2026-5605
|
Tenda CH22 Stack Overflow (CVE-2026-5154; CVE-2026-5152; CVE-2026-5156; CVE-2026-5604; CVE-2026-5605)
|
|
High
|
22 Oct 2026 |
22 Oct 2026 |
CPAI-2026-14890
|
|
CVE-2026-24103
|
Tenda AC15 Buffer Overflow (CVE-2026-24103)
|
|
High
|
22 Oct 2026 |
22 Oct 2026 |
CPAI-2026-14889
|
|
CVE-2026-5036
|
Tenda 4G06 Stack Overflow (CVE-2026-5036)
|
|
High
|
22 Oct 2026 |
22 Oct 2026 |
CPAI-2026-14887
|
|
CVE-2026-7102
|
Tenda F456 Command Injection (CVE-2026-7102)
|
|
High
|
22 Oct 2026 |
22 Oct 2026 |
CPAI-2026-14833
|
|
CVE-2026-69254
|
Flowise Remote Code Execution (CVE-2026-69254)
|
|
Critical
|
22 Oct 2026 |
22 Oct 2026 |
CPAI-2026-14827
|
|
CVE-2026-49468
|
LiteLLM Authentication Bypass (CVE-2026-49468)
|
|
High
|
22 Oct 2026 |
22 Oct 2026 |
CPAI-2026-14824
|
|
CVE-2026-12940
|
Langflow Command Injection (CVE-2026-12940)
|
|
High
|
22 Oct 2026 |
22 Oct 2026 |
CPAI-2025-19010
|
|
CVE-2025-71332
|
Flowise SQL Injection (CVE-2025-71332)
|
|
High
|
22 Oct 2026 |
22 Oct 2026 |
CPAI-2025-19009
|
|
CVE-2025-71336
|
Flowise Command Injection (CVE-2025-71336)
|
|
High
|
22 Oct 2026 |
22 Oct 2026 |
CPAI-2026-14813
|
|
CVE-2026-41137
|
FlowiseAI Flowise Command Injection (CVE-2026-41137)
|
|
High
|
22 Oct 2026 |
22 Oct 2026 |
CPAI-2026-14812
|
|
CVE-2026-55887
|
MCP Gateway Command Injection (CVE-2026-55887)
|
|
High
|
22 Oct 2026 |
22 Oct 2026 |
CPAI-2026-14811
|
|
CVE-2026-42867
|
Langflow Directory Traversal (CVE-2026-42867)
|
|
High
|
18 May 2026 |
22 Oct 2026 |
CPAI-2026-15223
|
|
CVE-2026-21510
|
Microsoft Windows Security Bypass (CVE-2026-21510)
|
|
Medium
|
6 Apr 2026 |
22 Oct 2026 |
CPAI-2025-14374
|
|
CVE-2025-31140
|
JetBrains TeamCity Cross-Site Scripting (CVE-2025-31140)
|
|
Critical
|
21 Oct 2026 |
21 Oct 2026 |
CPAI-2026-15172
|
|
CVE-2026-109618 CVE-2026-109619
|
PHP Remote Code Execution (CVE-2026-109618; CVE-2026-109619)
|
|
Critical
|
21 Oct 2026 |
21 Oct 2026 |
CPAI-2026-15184
|
|
CVE-2026-109618 CVE-2026-109619
|
PHP Remote Code Execution (CVE-2026-109618; CVE-2026-109619)
|
|
Critical
|
21 Oct 2026 |
21 Oct 2026 |
CPAI-2026-15170
|
|
CVE-2026-96654
|
Plex Media Server URL Injection (CVE-2026-96654)
|
|
High
|
21 Oct 2026 |
21 Oct 2026 |
CPAI-2026-15169
|
|
CVE-2026-96656
|
Plex Media Server Arbitrary File Write (CVE-2026-96656)
|
|
Critical
|
21 Oct 2026 |
21 Oct 2026 |
CPAI-2026-15176
|
|
CVE-2026-96652 CVE-2026-96655
|
Plex Media Server Server-Side Request Forgery (CVE-2026-96652; CVE-2026-96655)
|
|
Critical
|
21 Oct 2026 |
21 Oct 2026 |
CPAI-2026-15052
|
|
CVE-2026-106173
|
Fortinet FortiSIEM Directory Traversal (CVE-2026-106173)
|
|
High
|
20 Oct 2026 |
20 Oct 2026 |
CPAI-2026-14913
|
|
CVE-2026-93637
|
Zimbra Collaboration Authentication Bypass (CVE-2026-93637)
|
|
Critical
|
18 Oct 2026 |
20 Oct 2026 |
CPAI-2026-14948
|
|
CVE-2026-110447
|
Nextcloud Collabora Online Command Injection (CVE-2026-110447)
|
|
Critical
|
27 Jul 2026 |
20 Oct 2026 |
CPAI-2026-14953
|
|
CVE-2026-105740 CVE-2026-22688 CVE-2026-30861 CVE-2026-57124 CVE-2026-90898
|
MCP Tools Command Injection (CVE-2026-105740; CVE-2026-22688; CVE-2026-30861; CVE-2026-57124; CVE-2026-90898)
|
|
High
|
28 Jun 2026 |
19 Oct 2026 |
CPAI-2026-14920
|
|
CVE-2026-2652
|
LF Projects MLflow Authentication Bypass (CVE-2026-2652)
|
|
Critical
|
18 Oct 2026 |
18 Oct 2026 |
CPAI-2026-14866
|
|
CVE-2026-110447
|
Nextcloud Collabora Online Command Injection (CVE-2026-110447)
|
|
High
|
18 Oct 2026 |
18 Oct 2026 |
CPAI-2026-14668
|
|
CVE-2026-10182
|
TRENDnet TEW-432BRP Command Injection (CVE-2026-10182)
|
|
High
|
18 Oct 2026 |
18 Oct 2026 |
CPAI-2026-14667
|
|
CVE-2026-10183
|
TRENDnet TEW-432BRP Buffer Overflow (CVE-2026-10183)
|
|
High
|
18 Oct 2026 |
18 Oct 2026 |
CPAI-2026-14666
|
|
CVE-2026-109157
|
TRENDnet TEW-432BRP Stack Overflow (CVE-2026-109157)
|
|
High
|
18 Oct 2026 |
18 Oct 2026 |
CPAI-2026-14665
|
|
CVE-2026-44011
|
CraftCMS CMS Remote Code Execution (CVE-2026-44011)
|
|
High
|
18 Oct 2026 |
18 Oct 2026 |
CPAI-2026-14664
|
|
CVE-2026-9389
|
Tenda F456 Buffer Overflow (CVE-2026-9389)
|
|
High
|
18 Oct 2026 |
18 Oct 2026 |
CPAI-2026-14635
|
|
CVE-2026-2138 CVE-2026-2139 CVE-2026-2140
|
Tenda TX9 Buffer Overflow (CVE-2026-2139; CVE-2026-2138; CVE-2026-2140)
|
|
High
|
18 Oct 2026 |
18 Oct 2026 |
CPAI-2026-14634
|
|
CVE-2026-10270
|
D-Link DI-7001 MINI Stack Overflow (CVE-2026-10270)
|
|
High
|
18 Oct 2026 |
18 Oct 2026 |
CPAI-2024-8705
|
|
CVE-2024-44308
|
Apple Multiple Products Remote Code Execution (CVE-2024-44308)
|
|
High
|
18 Oct 2026 |
18 Oct 2026 |
CPAI-2026-14369
|
|
CVE-2026-10878 CVE-2026-11339
|
D-Link DWR-M920 Command Injection (CVE-2026-11339; CVE-2026-10878)
|
|
Critical
|
18 Oct 2026 |
18 Oct 2026 |
CPAI-2026-14326
|
|
CVE-2024-2707 CVE-2026-8263
|
Tenda AC6 Command Injection (CVE-2026-8263; CVE-2024-2707)
|
|
High
|
18 Oct 2026 |
18 Oct 2026 |
CPAI-2026-14325
|
|
CVE-2026-3809 CVE-2026-3810 CVE-2026-7034 CVE-2026-7035
|
Tenda FH1202 Buffer Overflow (CVE-2026-7034; CVE-2026-3809; CVE-2026-3810; CVE-2026-7035)
|
|
Critical
|
27 Jul 2026 |
15 Oct 2026 |
CPAI-2026-14794
|
|
CVE-2026-105740 CVE-2026-90898
|
MCP Tools Command Injection (CVE-2026-105740; CVE-2026-90898)
|
|
Critical
|
15 Oct 2026 |
15 Oct 2026 |
CPAI-2026-14786
|
|
CVE-2026-105134
|
AhsayCBS Command Injection (CVE-2026-105134)
|
|
Critical
|
15 Oct 2026 |
15 Oct 2026 |
CPAI-2026-14778
|
|
CVE-2026-105133
|
AhsayCBS Authentication Bypass (CVE-2026-105133)
|
|
Medium
|
15 Oct 2026 |
15 Oct 2026 |
CPAI-2023-5331
|
|
CVE-2023-22894
|
Strapi Information Disclosure (CVE-2023-22894)
|
|
Critical
|
15 Oct 2026 |
15 Oct 2026 |
CPAI-2020-5400
|
|
CVE-2019-17509 CVE-2019-17510 CVE-2020-27600
|
D-Link DIR-846 Command Injection (CVE-2019-17510; CVE-2019-17509; CVE-2020-27600)
|
|
High
|
15 Oct 2026 |
15 Oct 2026 |
CPAI-2020-5399
|
|
CVE-2020-15875 CVE-2020-35700
|
LibreNMS SQL Injection (CVE-2020-35700; CVE-2020-15875)
|
|
Critical
|
15 Oct 2026 |
15 Oct 2026 |
CPAI-2020-5392
|
|
CVE-2020-18331
|
ChinaMobile GPN2.4P21-C-CN Directory Traversal (CVE-2020-18331)
|
|
Critical
|
15 Oct 2026 |
15 Oct 2026 |
CPAI-2020-5388
|
|
CVE-2020-21016
|
D-Link DIR-846 Remote Code Execution (CVE-2020-21016)
|
|
High
|
15 Oct 2026 |
15 Oct 2026 |
CPAI-2026-14193
|
|
CVE-2026-91932
|
Flowise Remote Code Execution (CVE-2026-91932)
|