Home / 2026 Advisories Archive

2026 Advisories Archive

Severity	Date Published	Date Updated	Check Point Reference	Industry Reference	Description
High	2 Nov 2026	2 Nov 2026	CPAI-2026-15816	CVE-2026-116009	Camaleon CMS Directory Traversal (CVE-2026-116009)
High	2 Nov 2026	2 Nov 2026	CPAI-2026-15775	CVE-2026-114622 CVE-2026-114623	baserCMS Directory Traversal (CVE-2026-114622; CVE-2026-114623)
High	2 Nov 2026	2 Nov 2026	CPAI-2026-15772	CVE-2026-115481	baserCMS Unrestricted File Upload (CVE-2026-115481)
High	2 Nov 2026	2 Nov 2026	CPAI-2026-15770	CVE-2026-55535 CVE-2026-55537 CVE-2026-57114 CVE-2026-61429	PraisonAI Server-Side Request Forgery (CVE-2026-55535; CVE-2026-55537; CVE-2026-57114; CVE-2026-61429)
High	2 Nov 2026	2 Nov 2026	CPAI-2026-15769	CVE-2026-114621	baserCMS SQL Injection (CVE-2026-114621)
Critical	21 Oct 2026	2 Nov 2026	CPAI-2026-16229	CVE-2026-109618 CVE-2026-109619 CVE-2026-115560	PHP Remote Code Execution (CVE-2026-109618; CVE-2026-109619; CVE-2026-115560)
High	2 Nov 2026	2 Nov 2026	CPAI-2026-15136	CVE-2026-2824	Comfast CF-E7 Command Injection (CVE-2026-2824)
Critical	1 Nov 2026	1 Nov 2026	CPAI-2026-16213	CVE-2026-97229	GitLab Integer Overflow (CVE-2026-97229)
High	1 Nov 2026	1 Nov 2026	CPAI-2026-16209	CVE-2026-101767	Oracle E-Business Suite SQL Injection (CVE-2026-101767)
Critical	2 Sep 2026	1 Nov 2026	CPAI-2026-11109	CVE-2026-82329	JFrog Artifactory Authentication Bypass (CVE-2026-82329)
High	1 Nov 2026	1 Nov 2026	CPAI-2026-15695	CVE-2026-115378 CVE-2026-48769	Incus Arbitrary File Write (CVE-2026-48769; CVE-2026-115378)
High	1 Nov 2026	1 Nov 2026	CPAI-2026-15694	CVE-2026-115507 CVE-2026-27116 CVE-2026-35600	Vikunja HTML Injection (CVE-2026-115507; CVE-2026-27116; CVE-2026-35600)
High	1 Nov 2026	1 Nov 2026	CPAI-2026-15693	CVE-2026-114633 CVE-2026-33684	WWBN AVideo Privilege Escalation (CVE-2026-33684; CVE-2026-114633)
High	1 Nov 2026	1 Nov 2026	CPAI-2026-15690	CVE-2025-32388 CVE-2026-114061	SvelteKit Cross-Site Scripting (CVE-2025-32388; CVE-2026-114061)
High	1 Nov 2026	1 Nov 2026	CPAI-2026-15689	CVE-2026-115362 CVE-2026-55770	OpenBao Authentication Bypass (CVE-2026-55770; CVE-2026-115362)
High	1 Nov 2026	1 Nov 2026	CPAI-2026-15682	CVE-2026-114250 CVE-2026-114251 CVE-2026-114252	itsourcecode Sales-and-Inventory-System SQL Injection (CVE-2026-114250; CVE-2026-114251; CVE-2026-114252)
High	1 Nov 2026	1 Nov 2026	CPAI-2026-15680	CVE-2026-114658 CVE-2026-42613 CVE-2026-65603	Grav Login Plugin Privilege Escalation (CVE-2026-114658; CVE-2026-42613; CVE-2026-65603)
High	1 Nov 2026	1 Nov 2026	CPAI-2026-15679	CVE-2026-115375 CVE-2026-48753	Incus Directory Traversal (CVE-2026-115375; CVE-2026-48753)
High	1 Nov 2026	1 Nov 2026	CPAI-2026-15678	CVE-2026-115372 CVE-2026-48755	Incus Command Injection (CVE-2026-48755; CVE-2026-115372)
High	1 Nov 2026	1 Nov 2026	CPAI-2026-15677	CVE-2026-113740 CVE-2026-114378 CVE-2026-114380	itsourcecode Online Cake Ordering System SQL Injection (CVE-2026-114380; CVE-2026-113740; CVE-2026-114378)
Critical	1 Nov 2026	1 Nov 2026	CPAI-2026-15676	CVE-2020-12640 CVE-2026-114714	Roundcube Webmail Directory Traversal (CVE-2020-12640; CVE-2026-114714)
High	1 Nov 2026	1 Nov 2026	CPAI-2026-15675	CVE-2024-31457 CVE-2026-114492	gin-vue-admin Directory Traversal (CVE-2024-31457; CVE-2026-114492)
High	1 Nov 2026	1 Nov 2026	CPAI-2026-15673	CVE-2026-114268	Tenda BE3L Pro Buffer Overflow (CVE-2026-114268)
High	1 Nov 2026	1 Nov 2026	CPAI-2026-15671	CVE-2026-113605 CVE-2026-85714	Stirling-PDF Remote Code Execution (CVE-2026-113605; CVE-2026-85714)
High	1 Nov 2026	1 Nov 2026	CPAI-2026-15668	CVE-2026-114127	Astro HTML Injection (CVE-2026-114127)
High	1 Nov 2026	1 Nov 2026	CPAI-2026-15666	CVE-2026-114039	projectworlds Advanced Library Management System SQL Injection (CVE-2026-114039)
High	1 Nov 2026	1 Nov 2026	CPAI-2026-15664	CVE-2026-113802	Wavlink WL-WN530BE1-A Command Injection (CVE-2026-113802)
High	1 Nov 2026	1 Nov 2026	CPAI-2026-15663	CVE-2026-113678 CVE-2026-41235	Froxlor Privilege Escalation (CVE-2026-113678; CVE-2026-41235)
High	1 Nov 2026	1 Nov 2026	CPAI-2026-15662	CVE-2026-113710 CVE-2026-33888	Apostrophe Security Bypass (CVE-2026-113710; CVE-2026-33888)
High	1 Nov 2026	1 Nov 2026	CPAI-2026-15660	CVE-2026-113392 CVE-2026-113395	DrayTek Vigor2960 Directory Traversal (CVE-2026-113395; CVE-2026-113392)
High	1 Nov 2026	1 Nov 2026	CPAI-2026-15661	CVE-2026-113712	Cachet Cross-Site Scripting (CVE-2026-113712)
High	1 Nov 2026	1 Nov 2026	CPAI-2026-15595	CVE-2026-113388	OSSN Code Injection (CVE-2026-113388)
High	1 Nov 2026	1 Nov 2026	CPAI-2026-15593	CVE-2026-113354	Finsys Dockhand Arbitrary File Read (CVE-2026-113354)
High	1 Nov 2026	1 Nov 2026	CPAI-2026-15586	CVE-2023-30179 CVE-2026-112772	Craft CMS Remote Code Execution (CVE-2026-112772; CVE-2023-30179)
High	1 Nov 2026	1 Nov 2026	CPAI-2026-15552	CVE-2025-65340 CVE-2025-69942 CVE-2025-69943 CVE-2025-69944 CVE-2025-69945 CVE-2026-111990	kishan0725 Hospital Management System SQL Injection (CVE-2025-69944; CVE-2025-65340; CVE-2025-69942; CVE-2025-69943; CVE-2025-69945; CVE-2026-111990)
High	1 Nov 2026	1 Nov 2026	CPAI-2026-15550	CVE-2025-25403 CVE-2026-107082	Slims SQL Injection (CVE-2026-107082; CVE-2025-25403)
High	1 Nov 2026	1 Nov 2026	CPAI-2026-15547	CVE-2026-111903 CVE-2026-56736	phpMyFAQ Cross-Site Scripting (CVE-2026-56736; CVE-2026-111903)
High	1 Nov 2026	1 Nov 2026	CPAI-2026-15544	CVE-2026-105772	Google ADK TypeScript Directory Traversal (CVE-2026-105772)
High	1 Nov 2026	1 Nov 2026	CPAI-2026-15542	CVE-2026-112139 CVE-2026-90805	subhajitkhan online-clinic-management-system SQL Injection (CVE-2026-112139; CVE-2026-90805)
High	1 Nov 2026	1 Nov 2026	CPAI-2026-15540	CVE-2026-112097 CVE-2026-11518	SourceCodester Inventory System Cross-Site Scripting (CVE-2026-11518; CVE-2026-112097)
High	1 Nov 2026	1 Nov 2026	CPAI-2026-15541	CVE-2026-112370	H3C Magic NX15 Command Injection (CVE-2026-112370)
High	1 Nov 2026	1 Nov 2026	CPAI-2026-15539	CVE-2026-108959 CVE-2026-112087 CVE-2026-114384	itsourcecode Online Cake Ordering System SQL Injection (CVE-2026-114384; CVE-2026-108959; CVE-2026-112087)
High	1 Nov 2026	1 Nov 2026	CPAI-2026-15538	CVE-2026-107081	SENAYAN Library Management System SQL Injection (CVE-2026-107081)
High	1 Nov 2026	1 Nov 2026	CPAI-2026-15537	CVE-2026-107083	SLiMS SQL Injection (CVE-2026-107083)
Critical	1 Nov 2026	1 Nov 2026	CPAI-2026-15502	CVE-2019-25778 CVE-2025-10662 CVE-2025-11071 CVE-2026-82600 CVE-2026-85138	SeaCMS SQL Injection (CVE-2025-10662; CVE-2019-25778; CVE-2025-11071; CVE-2026-82600; CVE-2026-85138)
High	1 Nov 2026	1 Nov 2026	CPAI-2026-15501	CVE-2026-11959 CVE-2026-23476 CVE-2026-27964 CVE-2026-42877	FacturaScripts Cross-Site Scripting (CVE-2026-27964; CVE-2026-11959; CVE-2026-23476; CVE-2026-42877)
High	1 Nov 2026	1 Nov 2026	CPAI-2026-15497	CVE-2026-111873 CVE-2026-111992	itsmeravitejak Online-Examination-System SQL Injection (CVE-2026-111992; CVE-2026-111873)
High	1 Nov 2026	1 Nov 2026	CPAI-2026-15496	CVE-2026-111053	FOSSBilling Directory Traversal (CVE-2026-111053)
High	1 Nov 2026	1 Nov 2026	CPAI-2026-15495	CVE-2026-59970	Tandoor Recipes Server-Side Request Forgery (CVE-2026-59970)
Medium	1 Nov 2026	1 Nov 2026	CPAI-2026-15494	CVE-2026-33153 CVE-2026-35489 CVE-2026-59963	Tandoor Recipes Information Disclosure (CVE-2026-33153; CVE-2026-35489; CVE-2026-59963)