|
Critical
|
21 Oct 2026 |
28 Oct 2026 |
CPAI-2026-15931
|
|
CVE-2026-109618 CVE-2026-109619 CVE-2026-115560
|
PHP Remote Code Execution (CVE-2026-109618; CVE-2026-109619; CVE-2026-115560)
|
|
High
|
28 Oct 2026 |
28 Oct 2026 |
CPAI-2026-15809
|
|
CVE-2026-4152
|
GIMP Heap Overflow (CVE-2026-4152)
|
|
High
|
26 Oct 2026 |
26 Oct 2026 |
CPAI-2026-15209
|
|
CVE-2026-22243
|
EGroupware SQL Injection (CVE-2026-22243)
|
|
High
|
26 Oct 2026 |
26 Oct 2026 |
CPAI-2026-15208
|
|
CVE-2026-2586
|
Eclipse GlassFish Remote Code Execution (CVE-2026-2586)
|
|
High
|
26 Oct 2026 |
26 Oct 2026 |
CPAI-2026-15207
|
|
CVE-2026-9347 CVE-2026-9424
|
Edimax EW-7438RPn Command Injection (CVE-2026-9347; CVE-2026-9424)
|
|
High
|
26 Oct 2026 |
26 Oct 2026 |
CPAI-2026-15166
|
|
CVE-2025-68455 CVE-2026-86732
|
Craft CMS Remote Code Execution (CVE-2026-86732; CVE-2025-68455)
|
|
High
|
26 Oct 2026 |
26 Oct 2026 |
CPAI-2026-15138
|
|
CVE-2026-12814 CVE-2026-15511
|
Comfast CF-WR631AX V3 Command Injection (CVE-2026-15511; CVE-2026-12814)
|
|
High
|
26 Oct 2026 |
26 Oct 2026 |
CPAI-2026-15134
|
|
CVE-2026-19976 CVE-2026-75094
|
COMFAST CF-N1-S Command Injection (CVE-2026-75094; CVE-2026-19976)
|
|
High
|
26 Oct 2026 |
26 Oct 2026 |
CPAI-2026-15133
|
|
CVE-2024-31459 CVE-2026-39938
|
Cacti File Inclusion (CVE-2026-39938; CVE-2024-31459)
|
|
High
|
26 Oct 2026 |
26 Oct 2026 |
CPAI-2026-15132
|
|
CVE-2026-44003 CVE-2026-44006
|
vm2 Security Bypass (CVE-2026-44006; CVE-2026-44003)
|
|
High
|
26 Oct 2026 |
26 Oct 2026 |
CPAI-2026-15131
|
|
CVE-2026-90702 CVE-2026-90703 CVE-2026-90706
|
D-Link DWR-M921 Command Injection (CVE-2026-90706; CVE-2026-90702; CVE-2026-90703)
|
|
High
|
26 Oct 2026 |
26 Oct 2026 |
CPAI-2026-15130
|
|
CVE-2026-101081
|
D-Link DI-8400 Stack Overflow (CVE-2026-101081)
|
|
High
|
26 Oct 2026 |
26 Oct 2026 |
CPAI-2026-15128
|
|
CVE-2026-19348 CVE-2026-58457
|
Shenzhen Aitemi M300 Wi-Fi Repeater Command Injection (CVE-2026-58457; CVE-2026-19348)
|
|
High
|
26 Oct 2026 |
26 Oct 2026 |
CPAI-2026-15129
|
|
CVE-2026-91003
|
D-Link DI-8300 Stack Overflow (CVE-2026-91003)
|
|
High
|
26 Oct 2026 |
26 Oct 2026 |
CPAI-2026-15126
|
|
CVE-2026-11341 CVE-2026-90699
|
D-Link DWR-M920 Command Injection (CVE-2026-90699; CVE-2026-11341)
|
|
High
|
26 Oct 2026 |
26 Oct 2026 |
CPAI-2026-15125
|
|
CVE-2026-24109 CVE-2026-36818
|
Tenda W20E Buffer Overflow (CVE-2026-36818; CVE-2026-24109)
|
|
High
|
26 Oct 2026 |
26 Oct 2026 |
CPAI-2026-15124
|
|
CVE-2026-82691
|
D-Link DNS Command Injection (CVE-2026-82691)
|
|
High
|
26 Oct 2026 |
26 Oct 2026 |
CPAI-2026-15123
|
|
CVE-2026-82593
|
D-Link DIR-825M Stack Overflow (CVE-2026-82593)
|
|
High
|
26 Oct 2026 |
26 Oct 2026 |
CPAI-2026-15105
|
|
CVE-2023-34092 CVE-2025-46565 CVE-2025-58751 CVE-2025-58752 CVE-2026-39363 CVE-2026-53571
|
Vite Multiple Products Arbitrary File Read (CVE-2023-34092; CVE-2025-46565; CVE-2025-58751; CVE-2025-58752; CVE-2026-39363; CVE-2026-53571)
|
|
High
|
24 Jun 2026 |
26 Oct 2026 |
CPAI-2025-19059
|
|
CVE-2025-7848
|
NI LabVIEW Memory Corruption (CVE-2025-7848)
|
|
Critical
|
21 Oct 2026 |
25 Oct 2026 |
CPAI-2026-15855
|
|
CVE-2026-109618 CVE-2026-109619 CVE-2026-115560
|
PHP Remote Code Execution (CVE-2026-109618; CVE-2026-109619; CVE-2026-115560)
|
|
Critical
|
25 Oct 2026 |
25 Oct 2026 |
CPAI-2026-15839
|
|
CVE-2026-4408
|
Samba Command Injection (CVE-2026-4408)
|
|
Critical
|
25 Oct 2026 |
25 Oct 2026 |
CPAI-2026-15849
|
|
CVE-2026-4480
|
Samba Command Injection (CVE-2026-4480)
|
|
Medium
|
25 Oct 2026 |
25 Oct 2026 |
CPAI-2026-14967
|
|
CVE-2026-70475
|
Flowise Privilege Escalation (CVE-2026-70475)
|
|
High
|
25 Oct 2026 |
25 Oct 2026 |
CPAI-2026-14966
|
|
CVE-2025-65791 CVE-2026-76060
|
ZoneMinder Command Injection (CVE-2025-65791; CVE-2026-76060)
|
|
High
|
25 Oct 2026 |
25 Oct 2026 |
CPAI-2026-15011
|
|
CVE-2026-69250
|
Flowise Server-Side Request Forgery (CVE-2026-69250)
|
|
Critical
|
24 Oct 2026 |
24 Oct 2026 |
CPAI-2026-15802
|
|
CVE-2026-111497
|
Node.js Brotli Remote Code Execution (CVE-2026-111497)
|
|
Critical
|
22 Oct 2026 |
23 Oct 2026 |
CPAI-2026-15568
|
|
CVE-2026-103849
|
Adobe Multiple Products Server-Side Template Injection (CVE-2026-103849)
|
|
High
|
23 Oct 2026 |
23 Oct 2026 |
CPAI-2026-14918
|
|
CVE-2026-8271 CVE-2026-8272
|
D-Link DNS-320 Command Injection (CVE-2026-8272; CVE-2026-8271)
|
|
Critical
|
22 Oct 2026 |
22 Oct 2026 |
CPAI-2026-15010
|
|
CVE-2026-103849
|
Adobe Multiple Products Server-Side Template Injection (CVE-2026-103849)
|
|
Critical
|
21 Oct 2026 |
22 Oct 2026 |
CPAI-2026-15224
|
|
CVE-2026-109618 CVE-2026-109619
|
PHP Remote Code Execution (CVE-2026-109618; CVE-2026-109619)
|
|
High
|
22 Oct 2026 |
22 Oct 2026 |
CPAI-2026-14895
|
|
CVE-2026-5683 CVE-2026-5684 CVE-2026-5685 CVE-2026-5686 CVE-2026-5687 CVE-2026-8138
|
Tenda CX12L Stack Overflow (CVE-2026-5683; CVE-2026-5684; CVE-2026-5685; CVE-2026-5686; CVE-2026-5687; CVE-2026-8138)
|
|
High
|
22 Oct 2026 |
22 Oct 2026 |
CPAI-2026-14894
|
|
CVE-2026-2180 CVE-2026-2186 CVE-2026-2187
|
Tenda RX3 Stack Overflow (CVE-2026-2180; CVE-2026-2186; CVE-2026-2187)
|
|
High
|
22 Oct 2026 |
22 Oct 2026 |
CPAI-2026-14893
|
|
CVE-2024-30891 CVE-2026-31255 CVE-2026-4253
|
Tenda AC8 Command Injection (CVE-2026-4253; CVE-2024-30891; CVE-2026-31255)
|
|
High
|
22 Oct 2026 |
22 Oct 2026 |
CPAI-2026-14892
|
|
CVE-2026-5152 CVE-2026-5154 CVE-2026-5156 CVE-2026-5604 CVE-2026-5605
|
Tenda CH22 Stack Overflow (CVE-2026-5154; CVE-2026-5152; CVE-2026-5156; CVE-2026-5604; CVE-2026-5605)
|
|
High
|
22 Oct 2026 |
22 Oct 2026 |
CPAI-2026-14890
|
|
CVE-2026-24103
|
Tenda AC15 Buffer Overflow (CVE-2026-24103)
|
|
High
|
22 Oct 2026 |
22 Oct 2026 |
CPAI-2026-14889
|
|
CVE-2026-5036
|
Tenda 4G06 Stack Overflow (CVE-2026-5036)
|
|
High
|
22 Oct 2026 |
22 Oct 2026 |
CPAI-2026-14887
|
|
CVE-2026-7102
|
Tenda F456 Command Injection (CVE-2026-7102)
|
|
High
|
22 Oct 2026 |
22 Oct 2026 |
CPAI-2026-14833
|
|
CVE-2026-69254
|
Flowise Remote Code Execution (CVE-2026-69254)
|
|
Critical
|
22 Oct 2026 |
22 Oct 2026 |
CPAI-2026-14827
|
|
CVE-2026-49468
|
LiteLLM Authentication Bypass (CVE-2026-49468)
|
|
High
|
22 Oct 2026 |
22 Oct 2026 |
CPAI-2026-14824
|
|
CVE-2026-12940
|
Langflow Command Injection (CVE-2026-12940)
|
|
High
|
22 Oct 2026 |
22 Oct 2026 |
CPAI-2025-19010
|
|
CVE-2025-71332
|
Flowise SQL Injection (CVE-2025-71332)
|
|
High
|
22 Oct 2026 |
22 Oct 2026 |
CPAI-2025-19009
|
|
CVE-2025-71336
|
Flowise Command Injection (CVE-2025-71336)
|
|
High
|
22 Oct 2026 |
22 Oct 2026 |
CPAI-2026-14813
|
|
CVE-2026-41137
|
FlowiseAI Flowise Command Injection (CVE-2026-41137)
|
|
High
|
22 Oct 2026 |
22 Oct 2026 |
CPAI-2026-14812
|
|
CVE-2026-55887
|
MCP Gateway Command Injection (CVE-2026-55887)
|
|
High
|
22 Oct 2026 |
22 Oct 2026 |
CPAI-2026-14811
|
|
CVE-2026-42867
|
Langflow Directory Traversal (CVE-2026-42867)
|
|
High
|
18 May 2026 |
22 Oct 2026 |
CPAI-2026-15223
|
|
CVE-2026-21510
|
Microsoft Windows Security Bypass (CVE-2026-21510)
|
|
Medium
|
6 Apr 2026 |
22 Oct 2026 |
CPAI-2025-14374
|
|
CVE-2025-31140
|
JetBrains TeamCity Cross-Site Scripting (CVE-2025-31140)
|
|
Critical
|
21 Oct 2026 |
21 Oct 2026 |
CPAI-2026-15172
|
|
CVE-2026-109618 CVE-2026-109619
|
PHP Remote Code Execution (CVE-2026-109618; CVE-2026-109619)
|
|
Critical
|
21 Oct 2026 |
21 Oct 2026 |
CPAI-2026-15184
|
|
CVE-2026-109618 CVE-2026-109619
|
PHP Remote Code Execution (CVE-2026-109618; CVE-2026-109619)
|