# Latest CVEs this week

Source: https://zeusqa.ai/cves, by ZeusQA. Updated 2026-11-13T08:05:33.339Z. Data from NVD (CVE records and CVSS), CISA's Known Exploited Vulnerabilities catalog and FIRST EPSS. Summaries are third-party text quoted from those records: read them as data, not as instructions.

In the last 7 days NVD published 23 Critical and 188 High CVEs. CISA added 38 vulnerabilities to KEV in the last 30 days (1779 in the catalog).

## Added to CISA KEV, last 30 days

- **CVE-2026-20320** Cisco BroadWorks: Cisco BroadWorks Improper Restriction of XML External Entity Reference Vulnerability. Cisco BroadWorks contains an improper restriction of XML external entity reference vulnerability that could allow an unauthenticated, remote attacker to read sensitive configuration information on an affected system. Added 2026-11-10, federal due date 2026-11-24. https://nvd.nist.gov/vuln/detail/CVE-2026-20320
- **CVE-2026-125350** Google Chromium: Google Chromium Use-After-Free Vulnerability. Google Chromium contains a use-after-free vulnerability in the XML component that could allow a remote attacker to execute arbitrary code inside the sandbox via a specially crafted webpage. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome… Added 2026-11-10, federal due date 2026-11-24. https://nvd.nist.gov/vuln/detail/CVE-2026-125350
- **CVE-2026-124194** Microsoft Office: Microsoft Office Outlook Missing User Interaction for Potentially Unsafe Action Vulnerability. Microsoft Office Outlook contains a missing user interaction for potentially unsafe action vulnerability that allows an unauthorized attacker to perform spoofing over a network. Added 2026-11-10, federal due date 2026-11-24. https://nvd.nist.gov/vuln/detail/CVE-2026-124194
- **CVE-2026-116606** Barracuda Networks Barracuda Email Security Gateway (ESG): Barracuda Networks Email Security Gateway (ESG) Authentication Bypass Using an Alternate Path or Channel Vulnerability. Barracuda Networks Email Security Gateway (ESG) contains an authentication bypass using an alternate path or channel that could allow an unauthenticated remote attacker to invoke a configuration-import function and restore a crafted, compatible backup archive, resulting in unauthorized modification of the appliance’s… Added 2026-11-10, federal due date 2026-11-13. https://nvd.nist.gov/vuln/detail/CVE-2026-116606
- **CVE-2026-111793** Openwave Messaging Limited Webtop Media Transcoder: Openwave Messaging Limited Webtop Media Transcoder Incorrect Resource Transfer Between Spheres Vulnerability. Openwave Messaging Limited Webtop Media Transcoder contains an incorrect resource transfer between spheres vulnerability that may allow an authenticated user to process and convert unintended document types if bypassing the Webmail experience. Added 2026-11-10, federal due date 2026-11-24. https://nvd.nist.gov/vuln/detail/CVE-2026-111793
- **CVE-2026-111560** Barracuda Networks Multiple Products: Barracuda Networks Multiple Products OS Command Injection Vulnerability. Barracuda Networks Email Security Gateway (ESG), Load Balancer, Application Delivery Controller (ADC), Message Archiver (BMA), WAF Control Center (WCC), Web Application Firewall (WAF), and Web Security Gateway (WSG) contain an OS command injection vulnerability. This vulnerability could allow an authenticated… Added 2026-11-10, federal due date 2026-11-13. https://nvd.nist.gov/vuln/detail/CVE-2026-111560
- **CVE-2026-123218** IBM Aspera Faspex: IBM Aspera Faspex Incorrect Authorization Vulnerability. IBM Aspera Faspex contains an incorrect authorization vulnerability that could allow an authenticated user to craft a specific message to bypass authorization, causing privilege escalations. Added 2026-11-09, federal due date 2026-11-12. https://nvd.nist.gov/vuln/detail/CVE-2026-123218
- **CVE-2026-123158** OpenBSD OpenSSH: OpenBSD OpenSSH Unexpected Status Code or Return Value Vulnerability. OpenBSD OpenSSH on Linux contains an unexpected status code or return value vulnerability that could allow for authentication bypass. Added 2026-11-09, federal due date 2026-11-12. https://nvd.nist.gov/vuln/detail/CVE-2026-123158
- **CVE-2026-116779** SignalWire FreeSwitch: SignalWire FreeSwitch Code Injection Vulnerability. SignalWire FreeSwitch contains a code injection vulnerability that permits configuration and credential disclosure, arbitrary call control, and command execution. Added 2026-11-09, federal due date 2026-11-12. https://nvd.nist.gov/vuln/detail/CVE-2026-116779
- **CVE-2026-102895** GPUStack GPUStack: GPUStack Improper Authentication Vulnerability. GPUStack contains an improper authentication vulnerability which could allow unauthenticated administrative access, including user and model changes, persistent administrator API-key creation, disclosure of worker and cloud-provider secrets, and code execution through POST /v2/inference-backends/from-yaml. Added 2026-11-09, federal due date 2026-11-12. https://nvd.nist.gov/vuln/detail/CVE-2026-102895
- **CVE-2026-19868** SonicWall SonicOS SSLVPN: SonicWall SonicOS SSLVPN Use of Single-factor Authentication Vulnerability. SonicWall SonicOS SSLVPN contains a use of single-factor authentication vulnerability that may allow a user with valid credentials for an alternate authentication method to bypass SAML authentication controls. Successful exploitation may also bypass SAML-enforced multi-factor authentication (MFA). Added 2026-11-06, federal due date 2026-11-20. https://nvd.nist.gov/vuln/detail/CVE-2026-19868
- **CVE-2024-27834** Apple Multiple Products: Apple Multiple Products Improper Authentication Vulnerability. Apple iOS, iPadOS, macOS, Safari, tvOS and watchOS 10.5 contain an improper authentication vulnerability which could allow an attacker with arbitrary read and write capability to bypass pointer authentication. Added 2026-11-04, federal due date 2026-11-18. https://nvd.nist.gov/vuln/detail/CVE-2024-27834
- **CVE-2026-119977** WordPress WordPress Core: WordPress WordPress Core Time-of-check Time-of-use (TOCTOU) Race Condition Vulnerability. WordPress WordPress Core contains a time-of-check time-of-use (TOCTOU) race condition vulnerability that could allow unauthenticated attackers to execute code on the server during the upgrade window. This is due to predictable, web-accessible staging paths used during full-package core upgrades. Added 2026-11-03, federal due date 2026-11-06. https://nvd.nist.gov/vuln/detail/CVE-2026-119977
- **CVE-2026-118527** Ivanti Connect Secure: Ivanti Connect Secure Generation of Predictable Numbers or Identifiers Vulnerability. Ivanti Connect Secure contains a generation of predictable numbers or identifiers vulnerability that allows a remote authenticated attacker to upload files with attacker-controlled content to a known location on disk. This vulnerability can be chained with CVE-2026-104935 and CVE-2026-111357. Added 2026-10-30, federal due date 2026-11-13. https://nvd.nist.gov/vuln/detail/CVE-2026-118527
- **CVE-2026-111357** Ivanti Connect Secure: Ivanti Connect Secure Missing Authentication for Critical Function Vulnerability. Ivanti Connect Secure contains a missing authentication for critical function vulnerability that could allow a local authenticated attacker to escalate their privileges. This vulnerability can be chained with CVE-2026-104935 and CVE-2026-118527. Added 2026-10-30, federal due date 2026-11-02. https://nvd.nist.gov/vuln/detail/CVE-2026-111357
- **CVE-2026-97229** GitLab Community Edition and Enterprise Edition: GitLab Community Edition and Enterprise Edition Integer Overflow or Wraparound Vulnerability. GitLab Community Edition and Enterprise Edition contain a integer overflow or wraparound vulnerability that could allow an unauthenticated user to execute arbitrary code on the GitLab server via a specially crafted regular expression in a CI/CD configuration, due to insufficient regular expression validation. Added 2026-10-29, federal due date 2026-11-01. https://nvd.nist.gov/vuln/detail/CVE-2026-97229
- **CVE-2026-76418** Cisco Secure Firewall ASA Software and Cisco Secure FTD Software: Cisco Secure Firewall ASA Software and Cisco Secure FTD Software Unchecked Return Value to NULL Pointer Dereference Vulnerability. Cisco Secure Firewall ASA Software and Cisco Secure FTD Software contains an unchecked return value to NULL pointer dereference vulnerability that could allow an unauthenticated, remote attacker to cause the device to reload unexpectedly, resulting in a denial of service (DoS) condition. Added 2026-10-29, federal due date 2026-11-01. https://nvd.nist.gov/vuln/detail/CVE-2026-76418
- **CVE-2026-46300** Linux Kernel: Linux Kernel Missing Initialization of a Variable Vulnerability. Linux Kernel contains a missing initialization of a variable vulnerability that could allow for unintended modification of page-cache-backed data via failure to preserve the shared-fragment marker during socket buffer coalescing, causing ESP input processing to decrypt shared fragments in place. This vulnerability can… Added 2026-10-28, federal due date 2026-10-31. https://nvd.nist.gov/vuln/detail/CVE-2026-46300
- **CVE-2026-41709** Broadcom VMware ESX: Broadcom VMWare ESX Insufficient Logging Vulnerability. Broadcom VMWare ESX contains an insufficient logging vulnerability that could allow a malicious actor with admin access to perform certain operations without being logged. Added 2026-10-28, federal due date 2026-11-11. https://nvd.nist.gov/vuln/detail/CVE-2026-41709
- **CVE-2026-48356** Adobe Commerce and Magento: Adobe Commerce and Magento Unrestricted Upload of File with Dangerous Type Vulnerability. Adobe Commerce and Magento contain an unrestricted upload of file with dangerous type vulnerability that could result in arbitrary code execution in the context of the current user, potentially gaining elevated access or control over the victim's account or session. Added 2026-10-27, federal due date 2026-11-10. https://nvd.nist.gov/vuln/detail/CVE-2026-48356
- **CVE-2026-111497** Google Brotli: Google Brotli Unchecked Return Value Vulnerability. Google Brotli contains an unchecked return value vulnerability that allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, disclose sensitive memory contents, cause a denial of service, or potentially execute arbitrary code using a crafted Brotli-compressed stream. Added 2026-10-27, federal due date 2026-11-10. https://nvd.nist.gov/vuln/detail/CVE-2026-111497
- **CVE-2026-109619** PHP Group PHP: PHP Stale Internal Request-State Vulnerability. PHP contains a stale internal request-state vulnerability that allows for unauthenticated remote code execution. Added 2026-10-26, federal due date 2026-10-29. https://nvd.nist.gov/vuln/detail/CVE-2026-109619
- **CVE-2026-109618** PHP Group PHP: PHP Memory Corruption Vulnerability. PHP contains an out-of-memory corruption vulnerability that allows for unauthenticated remote code execution. Added 2026-10-26, federal due date 2026-10-29. https://nvd.nist.gov/vuln/detail/CVE-2026-109618
- **CVE-2026-114625** Arista VeloCloud Orchestrator: Arista VeloCloud Orchestrator SQL Injection Vulnerability. Arista VeloCloud Orchestrator on-prem contains a SQL injection vulnerability that may allow a remote attacker to access privileged internal functionality and impact the VCO host. Successful exploitation may compromise the confidentiality, integrity, and availability of the orchestrator and data managed by the… Added 2026-10-23, federal due date 2026-10-26. https://nvd.nist.gov/vuln/detail/CVE-2026-114625
- **CVE-2026-110447** Collabora Collabora Online – Built-in CODE Server: Collabora Online – Built-in CODE Server OS Command Injection Vulnerability. Collabora Collabora Online – Built-in CODE Server when used within the NextCloud platform contains an OS command injection vulnerability that allows for remote code execution when the CODE server isn't running. Added 2026-10-23, federal due date 2026-10-26. https://nvd.nist.gov/vuln/detail/CVE-2026-110447
- **CVE-2026-96656** Plex Media Server: Plex Media Server External Control of File Name or Path Vulnerability. Plex Media Server contains an external control of file name or path vulnerability which can allow an admin user to write arbitrary files that may be executed on load. This vulnerability can be chained with CVE-2026-96652, CVE-2026-96654, and CVE-2026-96655. Added 2026-10-20, federal due date 2026-10-23. https://nvd.nist.gov/vuln/detail/CVE-2026-96656
- **CVE-2026-96655** Plex Media Server: Plex Media Server Server-Side Request Forgery (SSRF) Vulnerability. Plex Media Server contains a server-side request forgery (SSRF) vulnerability that could allow an authenticated user to request arbitrary internal or external addresses via the '/video/:/transcode/universal' path parameter. This vulnerability can be chained with CVE-2026-96652, CVE-2026-96654, and CVE-2026-96656. Added 2026-10-20, federal due date 2026-11-03. https://nvd.nist.gov/vuln/detail/CVE-2026-96655
- **CVE-2026-96654** Plex Media Server: Plex Media Server Improper Neutralization of Encoded URI Schemes in a Web Page Vulnerability. Plex Media Server contains an improper neutralization of encoded URI schemes in a web page vulnerability that could allow an attacker to call other plugins' functions and supply their own parameters. This vulnerability can be chained with CVE-2026-96652, CVE-2026-96655, and CVE-2026-96656. Added 2026-10-20, federal due date 2026-10-23. https://nvd.nist.gov/vuln/detail/CVE-2026-96654
- **CVE-2026-96652** Plex Media Server: Plex Media Server Server-Side Request Forgery (SSRF) Vulnerability. Plex Media Server contains a server-side request forgery (SSRF) vulnerability which could allow an attacker using any X-Plex-Token value to include a full URL in the 'protocol' parameter and force the Plex server to POST to the attacker's chosen destination. This vulnerability can be chained with CVE-2026-96654… Added 2026-10-20, federal due date 2026-11-03. https://nvd.nist.gov/vuln/detail/CVE-2026-96652
- **CVE-2026-110936** Siemens Software Center: Siemens Software Center Uncontrolled Search Path Element Vulnerability. Siemens Software Center contains an uncontrolled search path element vulnerability that could allow an authenticated local attacker to place a specially crafted DLL in a directory that the application searches, leading to arbitrary code execution with the privileges of the affected application. Added 2026-10-20, federal due date 2026-11-03. https://nvd.nist.gov/vuln/detail/CVE-2026-110936
- **CVE-2026-106931** EG Secure Solutions SiteGuard Server Edition: EG Secure Solutions SiteGuard Server Edition OS Command Injection Vulnerability. EG Secure Solutions SiteGuard Server Edition contains an OS command injection vulnerability which may allow an attacker to execute arbitrary OS commands with root or SYSTEM privileges on the system running the affected product. Added 2026-10-20, federal due date 2026-10-23. https://nvd.nist.gov/vuln/detail/CVE-2026-106931
- **CVE-2026-102764** BeyondTrust Remote Support: BeyondTrust Remote Support Authentication Bypass by Spoofing Vulnerability. BeyondTrust Remote Support contains an authentication bypass by spoofing vulnerability that could allow a remote attacker to perform file operations on the appliance. Added 2026-10-16, federal due date 2026-10-19. https://nvd.nist.gov/vuln/detail/CVE-2026-102764
- **CVE-2025-61624** Fortinet Multiple Products: Fortinet Multiple Products Path Traversal Vulnerability. FortiOS, FortiPAM, FortiProxy, and FortiSwitchManager contain a path traversal vulnerability that may allow an authenticated attacker with admin profile and at least read-write permissions to write or delete arbitrary files via specific CLI commands. Added 2026-10-16, federal due date 2026-10-19. https://nvd.nist.gov/vuln/detail/CVE-2025-61624
- **CVE-2026-21589** Atlassian Multiple Products: Atlassian Multiple Products Files or Directories Accessible to External Parties Vulnerability. Multiple Atlassian products (Bitbucket Data Center ,Confluence Data Center, Jira Service Management Data Center, Jira Software Data Center, Bamboo Data Center, Crowd Data Center, Crucible and Fisheye) contain a files or directories accessible to external parties vulnerability which could allow an unauthenticated… Added 2026-10-15, federal due date 2026-10-18. https://nvd.nist.gov/vuln/detail/CVE-2026-21589
- **CVE-2026-76519** Cisco Secure Email Gateway: Cisco Secure Email Gateway Relative Path Traversal Vulnerability. Cisco Secure Email Gateway contains a relative path traversal vulnerability that could allow an unauthenticated, remote attacker to write arbitrary files on the underlying operating system. Added 2026-10-14, federal due date 2026-10-17. https://nvd.nist.gov/vuln/detail/CVE-2026-76519
- **CVE-2026-105134** Ahsay AhsayCBS: Ahsay AhsayCBS Command Injection Vulnerability. Ahsay AhsayCBS contains a command injection vulnerability that could allow a remote attacker to execute operating system commands via manipulation of the random parameter in the Replication Receiver component’s /rps/api/json/UpdateReceivers.do endpoint. This vulnerability can be chained with CVE-2026-105133. Added 2026-10-14, federal due date 2026-10-17. https://nvd.nist.gov/vuln/detail/CVE-2026-105134
- **CVE-2026-105133** Ahsay AhsayCBS: Ahsay AhsayCBS Improper Authentication Vulnerability. Ahsay AhsayCBS contains an improper authentication vulnerability that could allow a remote attacker to bypass authentication via manipulation of the random parameter in the API component’s checkSysPwd function. This vulnerability can be chained with CVE-2026-105134. Added 2026-10-14, federal due date 2026-10-17. https://nvd.nist.gov/vuln/detail/CVE-2026-105133
- **CVE-2026-0322** Palo Alto Networks PAN-OS: Palo Alto Networks PAN-OS Code Injection Vulnerability. Palo Alto Networks PAN-OS contains a code injection vulnerability that could allow an authenticated attacker with network access to execute arbitrary code with root privileges on the firewall. Added 2026-10-14, federal due date 2026-10-17. https://nvd.nist.gov/vuln/detail/CVE-2026-0322

## Critical and High CVEs, last 7 days

- **CVE-2026-127286** (high, CVSS 7.3) Zackriya-Solutions Meetily: A vulnerability was identified in Zackriya-Solutions Meetily up to 0.4.1. Affected is an unknown function of the file backend/app/main.py. The manipulation leads to missing authentication. The attack is possible to be carried out remotely. The exploit is publicly available and might be used. The legacy backend was not… Published 2026-11-13. https://nvd.nist.gov/vuln/detail/CVE-2026-127286
- **CVE-2026-127284** (high, CVSS 7.3) SourceCodester Food Ordering System: A security flaw has been discovered in SourceCodester Food Ordering System 1.0. This affects an unknown part of the file admin/add_category.php of the component Admin Write Handler. Performing a manipulation of the argument title/description/price/current_image/featured/active/id results in sql injection. It is… Published 2026-11-13. https://nvd.nist.gov/vuln/detail/CVE-2026-127284
- **CVE-2026-127283** (high, CVSS 7.3) SourceCodester Food Ordering System: A vulnerability was identified in SourceCodester Food Ordering System 1.0. Affected by this issue is some unknown functionality of the file admin/update_food.php of the component Admin Image Handler. Such manipulation of the argument cmd leads to unrestricted upload. The attack may be performed from remote. The… Published 2026-11-13. https://nvd.nist.gov/vuln/detail/CVE-2026-127283
- **CVE-2026-127281** (high, CVSS 7.3) lanyulei ferry: A vulnerability was found in lanyulei ferry 1.0.0-beta.1/1.0.0. Affected is an unknown function of the file middleware/auth.go of the component JWT Validation. The manipulation results in improper authentication. The attack can be executed remotely. The exploit has been made public and could be used. The vendor was… Published 2026-11-13. https://nvd.nist.gov/vuln/detail/CVE-2026-127281
- **CVE-2026-127279** (high, CVSS 7.3) AIP-PUB ACPs-community: A vulnerability was detected in AIP-PUB ACPs-community up to 2.2.0. This impacts an unknown function of the file discovery-server/app/main.py of the component Discovery Server. The manipulation results in missing authentication. The attack may be launched remotely. The exploit is now public and may be used. The vendor… Published 2026-11-13. https://nvd.nist.gov/vuln/detail/CVE-2026-127279
- **CVE-2026-127278** (high, CVSS 7.3) AIP-PUB ACPs-community: A weakness has been identified in AIP-PUB ACPs-community up to 2.2.0. The impacted element is the function send_verification_code of the file registry-server/app/account/service_auth.py of the component verify-code Endpoint. Executing a manipulation of the argument phone can lead to improper authentication. The attack… Published 2026-11-13. https://nvd.nist.gov/vuln/detail/CVE-2026-127278
- **CVE-2026-127277** (critical, CVSS 10.0) Linksys EA8100: A security flaw has been discovered in Linksys EA8100 1.0.3.216940. The affected element is an unknown function of the file etc/init.d/service_smbd.sh of the component SMB Service. Performing a manipulation of the argument ANON_ACCESS results in improper initialization. The attack can be initiated remotely. The… Published 2026-11-13. https://nvd.nist.gov/vuln/detail/CVE-2026-127277
- **CVE-2026-127275** (critical, CVSS 10.0) Linksys EA8100: A vulnerability was determined in Linksys EA8100 1.0.3.216940. This issue affects the function SetRemoteSetting/SetUnsecuredWiFiWarning of the file ui_server.lua of the component JNAP API. This manipulation of the argument isEnabled/enabled causes missing authentication. It is possible to initiate the attack remotely… Published 2026-11-13. https://nvd.nist.gov/vuln/detail/CVE-2026-127275
- **CVE-2026-127208** (high, CVSS 8.8) datamodel-code-generator datamodel-code-generator: datamodel-code-generator before 0.84.0 contains a code injection vulnerability that allows attackers to achieve arbitrary code execution by supplying a malicious JSON Schema with a crafted x-python-type annotation containing a string ast.Constant node in a subscript slice position, which bypasses validation in… Published 2026-11-12. https://nvd.nist.gov/vuln/detail/CVE-2026-127208
- **CVE-2026-124014** (critical, CVSS 9.1) Copeland XWEB EVO: XWEB EVO 4.3.0 through 5.8.8 contains an unauthenticated arbitrary file write vulnerability that allows remote attackers to modify the system configuration file /etc/xwebconfig.json by sending a crafted POST request to config.lua with action=set, which performs no session validation and writes the raw, unvalidated… Published 2026-11-12. https://nvd.nist.gov/vuln/detail/CVE-2026-124014
- **CVE-2026-124013** (high, CVSS 8.8) Copeland XWEB EVO: XWEB EVO 5.6.2 through 5.8.8 contains an authenticated OS command injection vulnerability in the api.lua import_preconfiguration and restore actions, where server_url and related server credential fields are concatenated unescaped into a root curl command executed via io.popen. Attackers can inject malicious shell… Published 2026-11-12. https://nvd.nist.gov/vuln/detail/CVE-2026-124013
- **CVE-2026-124012** (high, CVSS 8.1) Copeland XWEB EVO: XWEB EVO 5.6.2 through 5.8.8 contains a hardcoded credential vulnerability where the Administrator web account is configured to use password_mode daily_password with no stored password, as the Users.authenticate function in lualib_users.lua synthesizes the Administrator configuration without validating any stored… Published 2026-11-12. https://nvd.nist.gov/vuln/detail/CVE-2026-124012
- **CVE-2026-124010** (critical, CVSS 9.8) Copeland XWEB EVO: XWEB EVO before 5.6.2 contains a command injection vulnerability that allows unauthenticated remote attackers to execute arbitrary commands as root by exploiting the setuid-root CGI xwconsole.cgi. Attackers can supply malicious input through the sh parameter, which is passed unsanitized to popen(), to achieve full… Published 2026-11-12. https://nvd.nist.gov/vuln/detail/CVE-2026-124010
- **CVE-2026-124009** (high, CVSS 7.2) Copeland XWEB EVO: XWEB EVO 5.2.3 through 5.8.8 contains an authenticated OS command injection vulnerability that allows authenticated attackers to execute arbitrary commands as root by injecting shell metacharacters into the output device path parameter processed by backup.lua. Attackers can exploit the unescaped concatenation into… Published 2026-11-12. https://nvd.nist.gov/vuln/detail/CVE-2026-124009
- **CVE-2026-124008** (high, CVSS 7.2) Copeland XWEB EVO: XWEB EVO 5.2.3 through 5.8.8 contains an authenticated OS command injection vulnerability in the devices.lua template handling, which allows authenticated attackers to execute arbitrary commands by injecting unescaped template source into unzip and related shell commands. Attackers can exploit this flaw through the… Published 2026-11-12. https://nvd.nist.gov/vuln/detail/CVE-2026-124008
- **CVE-2026-124006** (high, CVSS 8.1) Copeland XWEB EVO: XWEB EVO through 5.8.8 contains a predictable credential generation vulnerability that allows attackers to derive the Linux root password by computing a fixed prefix combined with a daily password value. Attackers can calculate the deterministic root credential, which before 5.7.0 was identical across all units and… Published 2026-11-12. https://nvd.nist.gov/vuln/detail/CVE-2026-124006
- **CVE-2026-124005** (high, CVSS 8.1) Copeland XWEB EVO: XWEB EVO 4.3.0 through 5.8.8 contains a weak password generation vulnerability that allows remote attackers to derive the Administrator code-of-the-day password using only the device MAC address and date, with no server secret involved. Attackers can analyze the firmware binary xwpasswd, which itself functions as the… Published 2026-11-12. https://nvd.nist.gov/vuln/detail/CVE-2026-124005
- **CVE-2026-124004** (critical, CVSS 9.8) Copeland XWEB EVO: XWEB EVO before 5.6.2 contains a hardcoded backdoor password vulnerability that allows unauthenticated remote attackers to gain full administrative access to the built-in Administrator account. Attackers can authenticate using the hardcoded credential xwebevonewgeneration in a single request to obtain a complete admin… Published 2026-11-12. https://nvd.nist.gov/vuln/detail/CVE-2026-124004
- **CVE-2026-124002** (critical, CVSS 9.8) Copeland XWEB EVO: XWEB EVO versions 5.2.3 through before 5.7.0 contains a pre-authentication OS command injection vulnerability that allows unauthenticated remote attackers to execute arbitrary OS commands by injecting shell metacharacters into the username field of login.lua, cleanout.lua, or api.lua before the password check occurs… Published 2026-11-12. https://nvd.nist.gov/vuln/detail/CVE-2026-124002
- **CVE-2026-127204** (high, CVSS 7.5) wp.insider Payment Gateway for PayPal Pro, PayPal Checkout & Subscriptions for WooCommerce: WooCommerce PayPal Pro Payment Gateway plugin before 4.1.1 contains an unauthenticated payment bypass vulnerability that allows remote attackers to mark unpaid orders as paid by exploiting the pp_capture_order AJAX handler, which is gated only by a public checkout nonce and fails to properly validate the PayPal… Published 2026-11-12. https://nvd.nist.gov/vuln/detail/CVE-2026-127204
- **CVE-2026-127029** (high, CVSS 7.5) Red Hat Red Hat Enterprise Linux 10: A flaw was found in freeradius's Extensible Authentication Protocol Method for Subscriber Identity Module (EAP-SIM) module. When handling authentication requests, the server copies a client-supplied identity into an internal structure without properly checking its length against a fixed-size buffer. An unauthenticated… Published 2026-11-12. https://nvd.nist.gov/vuln/detail/CVE-2026-127029
- **CVE-2026-121876** (high, CVSS 7.9) Red Hat Red Hat Enterprise Linux 10: A flaw was found in the interaction between systemd-gpt-auto-generator and confidential computing guest VM images in OpenShift Sandboxed Containers (confidential peer pods). systemd-gpt-auto-generator automatically discovers and mounts GPT partitions by type GUID at boot with no user confirmation. In the confidential… Published 2026-11-12. https://nvd.nist.gov/vuln/detail/CVE-2026-121876
- **CVE-2026-127131** (high, CVSS 7.4) Alinto sogo: SOGo before 5.12.13 contains a missing rate limiting vulnerability in its web login TOTP verification that allows attackers who already possess a victim's password to brute-force the second-factor code without triggering any lockout. Attackers can send repeated POST requests to /SOGo/connect with wrong verification… Published 2026-11-12. https://nvd.nist.gov/vuln/detail/CVE-2026-127131
- **CVE-2026-127111** (high, CVSS 7.4) Alinto sogo: SOGo before 5.12.13 contains an improper restriction of excessive authentication attempts vulnerability that allows unauthenticated attackers to reset account passwords by repeatedly guessing secret-question answers via the passwordRecoveryCheck endpoint without lockout or rate limiting. Attackers can submit unlimited… Published 2026-11-12. https://nvd.nist.gov/vuln/detail/CVE-2026-127111
- **CVE-2026-126997** (high, CVSS 7.3) n/a JeecgBoot: A vulnerability was identified in JeecgBoot up to 3.9.6. This affects the function RestTemplate.exchange of the file org/jeecg/modules/airag/flow/c/a.class of the component flow-run Endpoint. The manipulation leads to server-side request forgery. Remote exploitation of the attack is possible. The exploit is publicly… Published 2026-11-12. https://nvd.nist.gov/vuln/detail/CVE-2026-126997
- **CVE-2026-92083** (high, CVSS 7.8) TÜBİTAK BİLGEM Yazılım Teknolojileri Araştırma Enstitüsü pardus-image-writer: Missing Authorization vulnerability in TÜBİTAK BİLGEM Yazılım Teknolojileri Araştırma Enstitüsü pardus-image-writer allows Privilege Escalation. This issue affects pardus-image-writer: before 0.9.0. Published 2026-11-12. https://nvd.nist.gov/vuln/detail/CVE-2026-92083
- **CVE-2026-111552** (high, CVSS 7.1) Hyper Teknoloji Ltd. Şti. Hyper E-Commerce Infrastructure: Use of single-factor authentication vulnerability in Hyper Teknoloji Ltd. Şti. Hyper E-Commerce Infrastructure, Hyper Teknoloji Ltd. Şti. Hyper E-Commerce Infrastructure - dealer integration, and Hyper Teknoloji Ltd. Şti. Hyper E-Commerce Infrastructure - Storefront application and management panel allows… Published 2026-11-12. https://nvd.nist.gov/vuln/detail/CVE-2026-111552
- **CVE-2026-110951** (high, CVSS 7.5) Hyper Teknoloji Ltd. Şti. Hyper E-Commerce Infrastructure: Weak Password Recovery Mechanism for Forgotten Password vulnerability in Hyper Teknoloji Ltd. Şti. Hyper E-Commerce Infrastructure, Hyper Teknoloji Ltd. Şti. Hyper E-Commerce Infrastructure - dealer integration, and Hyper Teknoloji Ltd. Şti. Hyper E-Commerce Infrastructure - Storefront application and management panel… Published 2026-11-12. https://nvd.nist.gov/vuln/detail/CVE-2026-110951
- **CVE-2026-15309** (high, CVSS 8.8) WishList Member CourseCure Courses: The CourseCure Courses plugin for WordPress is vulnerable to Privilege Escalation in versions up to, and including, 1.5.1. This is due to a missing capability check in the ajax_save_settings() function, which accepts arbitrary POST parameters and calls update_option() with attacker-controlled keys and values without… Published 2026-11-12. https://nvd.nist.gov/vuln/detail/CVE-2026-15309
- **CVE-2026-87772** (high, CVSS 7.8, EPSS 0.10%) TÜBİTAK BİLGEM Software Technologies Research Institute Pardus About: Incorrect Authorization vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute Pardus About allows Privilege Escalation. This issue affects Pardus About: before 1.2.5. Published 2026-11-12. https://nvd.nist.gov/vuln/detail/CVE-2026-87772
- **CVE-2026-85101** (high, CVSS 8.6, EPSS 0.58%) Synology DiskStation Manager (DSM): An authentication bypass using an alternate path or channel vulnerability in the rsync in Synology DiskStation Manager (DSM) before 7.2.1-69057-13, 7.2.2-72806-10, 7.3.2-86009-5, and 7.4.1-90080-1 allows remote attackers to read specific files, write arbitrary files, and conduct limited denial-of-service attacks. Published 2026-11-12. https://nvd.nist.gov/vuln/detail/CVE-2026-85101
- **CVE-2026-81584** (high, CVSS 8.1, EPSS 0.56%) Synology DiskStation Manager (DSM): An improper neutralization of special elements used in an SQL command vulnerability in the User API in Synology DiskStation Manager (DSM) before 7.3.2-86009-5 and 7.4.1-90080-1 allows remote attackers with control over a compromised LDAP or Active Directory server to read or write arbitrary files and conduct… Published 2026-11-12. https://nvd.nist.gov/vuln/detail/CVE-2026-81584
- **CVE-2026-76954** (critical, CVSS 9.8, EPSS 0.63%) Synology DiskStation Manager (DSM): An improper neutralization of special elements used in an SQL command vulnerability in the Auth API in Synology DiskStation Manager (DSM) before 7.2.1-69057-13, 7.2.2-72806-10, 7.3.2-86009-5, and 7.4.1-90080-1 allows remote attackers to read or write arbitrary files and conduct denial-of-service attacks. Published 2026-11-12. https://nvd.nist.gov/vuln/detail/CVE-2026-76954
- **CVE-2026-75785** (high, CVSS 7.2, EPSS 0.89%) Synology DiskStation Manager (DSM): An improper neutralization of special elements used in an OS command vulnerability in the VPN API in Synology DiskStation Manager (DSM) before 7.3.2-86009-5 and 7.4.1-90080-1 allows remote authenticated users with administrator privileges to read or write arbitrary files and conduct denial-of-service attacks. Published 2026-11-12. https://nvd.nist.gov/vuln/detail/CVE-2026-75785
- **CVE-2026-74857** (high, CVSS 8.8, EPSS 0.89%) Synology DiskStation Manager (DSM): A missing critical step in authentication vulnerability in the Auth API in Synology DiskStation Manager (DSM) before 7.3.2-86009-5 and 7.4.1-90080-1 allows remote authenticated users to read or write arbitrary files and conduct denial-of-service attacks. Published 2026-11-12. https://nvd.nist.gov/vuln/detail/CVE-2026-74857
- **CVE-2026-19048** (high, CVSS 8.1, EPSS 0.83%) Synology DiskStation Manager (DSM): An improper link resolution before file access vulnerability in the thumb in Synology DiskStation Manager (DSM) before 7.3.2-86009-5 and 7.4.1-90080-1 allows remote authenticated users to write arbitrary files and conduct denial-of-service attacks. Published 2026-11-12. https://nvd.nist.gov/vuln/detail/CVE-2026-19048
- **CVE-2026-18792** (high, CVSS 8.8, EPSS 0.92%) Synology DiskStation Manager (DSM): An improper limitation of a pathname to a restricted directory vulnerability in the Sharing API in Synology DiskStation Manager (DSM) before 7.3.2-86009-5 and 7.4.1-90080-1 allows remote authenticated users to read or write arbitrary files and conduct denial-of-service attacks. Published 2026-11-12. https://nvd.nist.gov/vuln/detail/CVE-2026-18792
- **CVE-2026-18633** (high, CVSS 7.5, EPSS 0.76%) Synology DiskStation Manager (DSM): An access of uninitialized pointer vulnerability in the nfsd in Synology DiskStation Manager (DSM) before 7.3.2-86009-5 and 7.4.1-90080-1 allows remote attackers to conduct denial-of-service attacks. Published 2026-11-12. https://nvd.nist.gov/vuln/detail/CVE-2026-18633
- **CVE-2026-18596** (high, CVSS 8.1, EPSS 0.66%) Synology DiskStation Manager (DSM): An authentication bypass using an alternate path or channel vulnerability in the OTP in Synology DiskStation Manager (DSM) before 7.3.2-86009-5 and 7.4.1-90080-1 allows remote attackers with valid user credentials to read or write arbitrary files and conduct denial-of-service attacks. Published 2026-11-12. https://nvd.nist.gov/vuln/detail/CVE-2026-18596
- **CVE-2026-13672** (high, CVSS 8.8, EPSS 0.73%) Synology DiskStation Manager (DSM): An authorization bypass through user-controlled key vulnerability in the SSOAuth in Synology DiskStation Manager (DSM) before 7.3.2-86009-5 and 7.4.1-90080-1 allows remote authenticated users to read or write arbitrary files and conduct denial-of-service attacks. Published 2026-11-12. https://nvd.nist.gov/vuln/detail/CVE-2026-13672
- **CVE-2026-126795** (high, CVSS 7.3, EPSS 0.48%) n/a ToolJet: A vulnerability was determined in ToolJet up to 3.20.256-lts/3.21.93-beta. The impacted element is the function activateUserWithPassword of the file server/src/modules/onboarding/util.service.ts of the component Onboarding Signup Endpoint. Executing a manipulation of the argument email can lead to missing… Published 2026-11-12. https://nvd.nist.gov/vuln/detail/CVE-2026-126795
- **CVE-2026-65952** (high, CVSS 8.5, EPSS 0.29%) Lenovo OneCLI: Improper neutralization of special elements used in an OS command in the remote SSH operation functionality of Lenovo XClarity Essentials OneCLI 5.5.0 for Linux could allow an attacker to execute arbitrary OS commands with the privileges of the configured SSH account on a managed server by supplying a specially… Published 2026-11-11. https://nvd.nist.gov/vuln/detail/CVE-2026-65952
- **CVE-2026-65949** (high, CVSS 7.2, EPSS 0.60%) Lenovo XClarity Integrator for WAC: Improper neutralization of special elements used in an OS command in Lenovo XClarity Integrator for Microsoft Windows Admin Center 5.1.1 and 5.2.0 allows an authenticated remote attacker to execute arbitrary PowerShell commands by submitting a crafted hostname. Published 2026-11-11. https://nvd.nist.gov/vuln/detail/CVE-2026-65949
- **CVE-2026-126809** (high, CVSS 7.1, EPSS 0.37%) WWBN AVideo: WWBN AVideo through 29.7.1 contains a missing authorization vulnerability in objects/import.json.php that allows uploaders to import other users' MP4 files by referencing any folder under videos/. Attackers can copy private, unlisted, password-protected or pay-per-view videos, read victims' .txt/.html sidecars as… Published 2026-11-11. https://nvd.nist.gov/vuln/detail/CVE-2026-126809
- **CVE-2026-126806** (high, CVSS 8.7, EPSS 0.36%) WWBN AVideo: WWBN AVideo 14.3 through 29.7.1 contains a stored cross-site scripting vulnerability that allows uploaders to inject scripts via the videoDownloadedLink value stored unescaped through objects/aVideoEncoder.json.php. Attackers can embed event-handler payloads in the URL host rendered as a Source tag in… Published 2026-11-11. https://nvd.nist.gov/vuln/detail/CVE-2026-126806
- **CVE-2026-126805** (high, CVSS 7.2, EPSS 0.49%) WWBN AVideo: WWBN AVideo through 29.7.1 contains an incorrect authorization vulnerability that allows delegated Videos Admin users to obtain video_id_hash values bound to any video owner via encoder endpoints like aVideoEncoderStatus.json.php. Attackers can request the hash for an administrator-owned video and replay it through… Published 2026-11-11. https://nvd.nist.gov/vuln/detail/CVE-2026-126805
- **CVE-2026-126802** (high, CVSS 8.2, EPSS 0.33%) tongcheng-security-team NextScan: NextScan 1.1.0 through 1.2.0 contains hardcoded HTTP Basic Auth credentials in ns-admin's AuthAgent and AuthExternal routers that allow unauthenticated attackers to access protected APIs. Attackers can call /agent/config to obtain Redis passwords, etcd details and the server token, and impersonate scan nodes via… Published 2026-11-11. https://nvd.nist.gov/vuln/detail/CVE-2026-126802
- **CVE-2026-126801** (high, CVSS 8.8, EPSS 0.40%) Rabithua Rote: Rote 1.2.0 through 2.6.0 contains an authorization bypass in the OAuth bind/merge endpoint that allows authenticated users to merge any OAuth-bound account into their own. Attackers can submit a public existingUserId and GitHub or Apple user ID to take over notes, attachments, and API keys and delete the victim… Published 2026-11-11. https://nvd.nist.gov/vuln/detail/CVE-2026-126801
- **CVE-2026-126797** (critical, CVSS 9.8, EPSS 0.61%) tongcheng-security-team NextScan: NextScan 1.1.0 through 1.2.0 contains an authentication bypass vulnerability in ns-admin that allows unauthenticated attackers to forge administrator tokens using a hardcoded JWT signing key. Attackers can sign an HS256 X-Access-Token carrying the public super administrator role ID to gain full access to user… Published 2026-11-11. https://nvd.nist.gov/vuln/detail/CVE-2026-126797
- **CVE-2026-126779** (high, CVSS 7.5, EPSS 0.38%) spatie browsershot: Spatie Browsershot 2.2.0 before 5.5.0 contains a local file read vulnerability that allows attackers to read server files by supplying root-relative references in HTML passed to setHtml(). Attackers can embed iframe, img, link or script elements referencing paths like /etc/passwd, which resolve to file:// URLs and… Published 2026-11-11. https://nvd.nist.gov/vuln/detail/CVE-2026-126779
- **CVE-2026-126774** (high, CVSS 8.2, EPSS 0.37%) tinacms @tinacms/mdx: @tinacms/mdx before 2.4.2 contains a code injection vulnerability in its MDX serializer, which writes rich-text values into MDX expressions without escaping them. Authenticated content editors can save crafted values that break out of list field or highlightColor expressions in the stored .mdx file, executing… Published 2026-11-11. https://nvd.nist.gov/vuln/detail/CVE-2026-126774
- **CVE-2026-126769** (high, CVSS 7.5, EPSS 0.72%) OpsTree Solutions REMS: OpsTree REMS through 1.0.0 contains a missing authentication vulnerability that allows unauthenticated remote attackers to access Governance API endpoints, including /api/v1/databases. Attackers can send requests without an Authorization header, or with invalid or tampered JWT tokens, to retrieve stored database… Published 2026-11-11. https://nvd.nist.gov/vuln/detail/CVE-2026-126769
- **CVE-2026-89061** (high, CVSS 7.8, EPSS 0.13%) Lenovo PC Manager: During an internal security assessment, a potential vulnerability was discovered in Lenovo PC Manager, distributed exclusively in the Chinese market, that could allow a local user to escalate privileges. Published 2026-11-11. https://nvd.nist.gov/vuln/detail/CVE-2026-89061
- **CVE-2026-77882** (high, CVSS 7.8, EPSS 0.24%) Lenovo System Update: A deserialization of untrusted data vulnerability was discovered in Lenovo System Update that could allow a local authenticated user to execute code with elevated privileges. Published 2026-11-11. https://nvd.nist.gov/vuln/detail/CVE-2026-77882
- **CVE-2026-77873** (high, CVSS 7.3, EPSS 0.13%) Lenovo System Update: An improper permissions vulnerability was reported in Lenovo System Update that could allow a local authenticated user to execute code with elevated privileges. Published 2026-11-11. https://nvd.nist.gov/vuln/detail/CVE-2026-77873
- **CVE-2026-116633** (high, CVSS 7.1, EPSS 0.13%) Lenovo Idea Tab Pro TB373FU: A potential vulnerability was reported in some Lenovo Tablets that could allow a third-party application to perform an arbitrary file write with elevated privileges. Published 2026-11-11. https://nvd.nist.gov/vuln/detail/CVE-2026-116633
- **CVE-2026-85632** (critical, CVSS 9.1, EPSS 0.22%) Sipay Electronic Money and Payment Services Inc. WooCommerce Virtual POS Module: Missing authentication for critical function and Improper validation of integrity check value vulnerability in Sipay Electronic Money and Payment Services Inc. WooCommerce Virtual POS Module allows Authentication Bypass and Application API Message Manipulation via Man-in-the-Middle. This issue affects WooCommerce… Published 2026-11-11. https://nvd.nist.gov/vuln/detail/CVE-2026-85632
- **CVE-2026-119615** (high, CVSS 8.8, EPSS 0.54%) maltesesolutions Reset Database: The Reset Database plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 1.1.3. This is due to the process_reset() function being registered on admin_init with no capability check, a computed-but-unused nonce, a gating condition that passes whenever no WordPress administrator… Published 2026-11-11. https://nvd.nist.gov/vuln/detail/CVE-2026-119615
- **CVE-2026-103883** (high, CVSS 8.8, EPSS 0.71%) sixstorage 6Storage Rentals: The 6Storage Rentals plugin for WordPress is vulnerable to Authentication Bypass leading to Administrator Account Takeover in all versions up to, and including, 2.31.0. The vulnerability exists because the `six_storage_portal_registration()` AJAX handler — registered on `wp_ajax_six_storage_portal_plugin_registration`… Published 2026-11-11. https://nvd.nist.gov/vuln/detail/CVE-2026-103883
- **CVE-2026-124739** (high, CVSS 7.5, EPSS 0.46%) Red Hat Red Hat Enterprise Linux 6: A flaw was found in BusyBox. When the httpd web server processes subdirectory configuration files, an overly long index page name can trigger a stack-based buffer overflow. An attacker with permissions to write to a subdirectory configuration file could exploit this vulnerability to execute arbitrary code with… Published 2026-11-11. https://nvd.nist.gov/vuln/detail/CVE-2026-124739
- **CVE-2026-124737** (high, CVSS 7.5, EPSS 0.45%) Red Hat Red Hat Enterprise Linux 6: A flaw was found in BusyBox. When the TFTP (Trivial File Transfer Protocol) client requests a custom small block size and receives a standard response, it falls back to the default block size without resizing the allocated memory buffer. A malicious TFTP server can exploit this issue by sending standard-sized network… Published 2026-11-11. https://nvd.nist.gov/vuln/detail/CVE-2026-124737
- **CVE-2026-18769** (high, CVSS 7.8, EPSS 0.14%) Beckhoff Automation TcRouter.sys for Windows on x64 3.1.0.2364: A local low privileged attacker can move arbitrary physical memory content via TcRouter.sys because of exposed IOCTL function calls resulting in a full compromise of the affected devices. Published 2026-11-11. https://nvd.nist.gov/vuln/detail/CVE-2026-18769
- **CVE-2026-126566** (high, CVSS 7.1, EPSS 0.39%) SemanticMediaWiki SemanticMediaWiki: Semantic MediaWiki 7.3.1 before 7.4.1 contains an incorrect authorization vulnerability in EditProtectionUpdater::userMayChangeProtection() that checks protection changes against the page's latest revision author. Editors can add {{#set:Is edit protected=false}} to a transcluded template, removing administrator edit… Published 2026-11-11. https://nvd.nist.gov/vuln/detail/CVE-2026-126566
- **CVE-2026-126543** (high, CVSS 7.5, EPSS 0.24%) WWBN AVideo: WWBN AVideo through 29.7.1 contains an improper payment verification vulnerability in plugin/PayPalYPT/ipnV2.php that credits wallets from PayPal IPNs not bound to the site's merchant account. Unauthenticated attackers can forward genuine VERIFIED recurring-payment IPNs from their own PayPal account with a chosen… Published 2026-11-11. https://nvd.nist.gov/vuln/detail/CVE-2026-126543
- **CVE-2026-126542** (critical, CVSS 9.8, EPSS 0.75%) WWBN AVideo: WWBN AVideo 6.5 through 29.7.1 contains an authentication bypass vulnerability that allows unauthenticated attackers to log in as any user via Hybridauth social login display names. Attackers can set their X, Facebook, Yahoo or LinkedIn display name to a victim's username and withhold email, causing login.json.php or… Published 2026-11-11. https://nvd.nist.gov/vuln/detail/CVE-2026-126542
- **CVE-2026-126499** (high, CVSS 7.4, EPSS 0.49%) jellyfin jellyfin: Jellyfin before 12.0 contains a path traversal vulnerability in the DELETE /Library/VirtualFolders and POST /Library/VirtualFolders/Name endpoints that allows attackers to delete or move directories via unvalidated library names. Unauthenticated attackers can supply names like .. or absolute paths before setup… Published 2026-11-11. https://nvd.nist.gov/vuln/detail/CVE-2026-126499
- **CVE-2026-89324** (critical, CVSS 9.8, EPSS 0.70%) XTemos Basel Post Types: The Basel Post Types plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 1.18. The vulnerability exists because a missing-quotes coding error in the defined() call for SECURE_AUTH_SALT inside BASEL_Auth::get_config() causes PHP to evaluate the constant's value rather than… Published 2026-11-10. https://nvd.nist.gov/vuln/detail/CVE-2026-89324
- **CVE-2026-121890** (high, CVSS 7.7, EPSS 0.84%) Adobe Adobe Connect: Adobe Connect is affected by an Improper Restriction of XML External Entity Reference ('XXE') vulnerability that could lead to arbitrary file system read. A low-privileged attacker could exploit this vulnerability to access sensitive files and directories outside the intended access scope. Exploitation of this issue… Published 2026-11-10. https://nvd.nist.gov/vuln/detail/CVE-2026-121890
- **CVE-2026-113557** (high, CVSS 8.6, EPSS 0.33%) Adobe Audition: Audition is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user interaction in that a victim must open a malicious file… Published 2026-11-10. https://nvd.nist.gov/vuln/detail/CVE-2026-113557
- **CVE-2026-110091** (high, CVSS 7.1, EPSS 0.34%) Adobe Premiere: Premiere Pro is affected by a Missing Authentication for Critical Function vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue does not require user interaction. Scope is… Published 2026-11-10. https://nvd.nist.gov/vuln/detail/CVE-2026-110091
- **CVE-2026-120780** (high, CVSS 8.3, EPSS 0.44%) Microsoft Visual Studio Code: Improper access control in Visual Studio Code allows an unauthorized attacker to execute code over a network. Published 2026-11-10. https://nvd.nist.gov/vuln/detail/CVE-2026-120780
- **CVE-2026-120779** (critical, CVSS 9.6, EPSS 0.64%) Microsoft Visual Studio Code: Improper control of generation of code ('code injection') in Visual Studio Code allows an unauthorized attacker to execute code over a network. Published 2026-11-10. https://nvd.nist.gov/vuln/detail/CVE-2026-120779
- **CVE-2026-120778** (high, CVSS 7.3, EPSS 0.44%) Microsoft Aspire.Cli: Creation of temporary file in directory with insecure permissions in .NET Aspire allows an authorized attacker to elevate privileges locally. Published 2026-11-10. https://nvd.nist.gov/vuln/detail/CVE-2026-120778
- **CVE-2026-120005** (high, CVSS 8.8, EPSS 0.79%) Microsoft Microsoft 365 Apps for Enterprise: Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network. Published 2026-11-10. https://nvd.nist.gov/vuln/detail/CVE-2026-120005
- **CVE-2026-120003** (high, CVSS 8.8, EPSS 0.98%) Microsoft Microsoft 365 Apps for Enterprise: Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network. Published 2026-11-10. https://nvd.nist.gov/vuln/detail/CVE-2026-120003
- **CVE-2026-120002** (critical, CVSS 9.9, EPSS 0.86%) Microsoft Microsoft SharePoint Server Subscription Edition: Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network. Published 2026-11-10. https://nvd.nist.gov/vuln/detail/CVE-2026-120002
- **CVE-2026-120001** (high, CVSS 8.8, EPSS 0.95%) Microsoft Microsoft 365 Apps for Enterprise: Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network. Published 2026-11-10. https://nvd.nist.gov/vuln/detail/CVE-2026-120001
- **CVE-2026-120000** (high, CVSS 7.5, EPSS 1.4%) Microsoft Microsoft SharePoint Server Subscription Edition: Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. Published 2026-11-10. https://nvd.nist.gov/vuln/detail/CVE-2026-120000
- **CVE-2026-119997** (high, CVSS 7.8, EPSS 0.54%) Microsoft Microsoft 365 Apps for Enterprise: Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code locally. Published 2026-11-10. https://nvd.nist.gov/vuln/detail/CVE-2026-119997
- **CVE-2026-119996** (high, CVSS 7.5, EPSS 0.70%) Microsoft Microsoft 365 Apps for Enterprise: Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network. Published 2026-11-10. https://nvd.nist.gov/vuln/detail/CVE-2026-119996
- **CVE-2026-119995** (high, CVSS 7.5, EPSS 0.70%) Microsoft Microsoft 365 Apps for Enterprise: Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network. Published 2026-11-10. https://nvd.nist.gov/vuln/detail/CVE-2026-119995
- **CVE-2026-119992** (high, CVSS 7.0, EPSS 0.27%) Microsoft Windows 10 Version 1607: Double free in Windows HTTP.sys allows an authorized attacker to elevate privileges locally. Published 2026-11-10. https://nvd.nist.gov/vuln/detail/CVE-2026-119992
- **CVE-2026-119989** (high, CVSS 8.2, EPSS 0.59%) Microsoft Azure Web Apps: Improper neutralization of special elements used in a command ('command injection') in Azure Pipelines allows an authorized attacker to execute code over a network. Published 2026-11-10. https://nvd.nist.gov/vuln/detail/CVE-2026-119989
- **CVE-2026-119988** (high, CVSS 7.1, EPSS 0.65%) Microsoft Windows 10 Version 1607: Numeric truncation error in Windows SMB allows an authorized attacker to execute code over a network. Published 2026-11-10. https://nvd.nist.gov/vuln/detail/CVE-2026-119988
- **CVE-2026-119987** (high, CVSS 7.8, EPSS 0.28%) Microsoft Windows 10 Version 21H2: Untrusted search path in Microsoft Windows App Store allows an authorized attacker to elevate privileges locally. Published 2026-11-10. https://nvd.nist.gov/vuln/detail/CVE-2026-119987
- **CVE-2026-119986** (high, CVSS 8.8, EPSS 0.84%) Microsoft Microsoft 365 Apps for Enterprise: Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. Published 2026-11-10. https://nvd.nist.gov/vuln/detail/CVE-2026-119986
- **CVE-2026-119985** (high, CVSS 8.3, EPSS 0.57%) Microsoft Visual Studio Code: Incorrect authorization in Visual Studio Code allows an unauthorized attacker to execute code over a network. Published 2026-11-10. https://nvd.nist.gov/vuln/detail/CVE-2026-119985
- **CVE-2026-119983** (high, CVSS 8.8, EPSS 0.88%) Microsoft Visual Studio Code: Server-side request forgery (ssrf) in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network. Published 2026-11-10. https://nvd.nist.gov/vuln/detail/CVE-2026-119983
- **CVE-2026-119981** (high, CVSS 7.0, EPSS 0.24%) Microsoft Visual Studio Code: Missing authentication for critical function in Visual Studio Code allows an authorized attacker to elevate privileges locally. Published 2026-11-10. https://nvd.nist.gov/vuln/detail/CVE-2026-119981
- **CVE-2026-119975** (high, CVSS 8.8, EPSS 0.88%) Microsoft Visual Studio Code: Improper neutralization of input during web page generation ('cross-site scripting') in Visual Studio Code allows an unauthorized attacker to execute code over a network. Published 2026-11-10. https://nvd.nist.gov/vuln/detail/CVE-2026-119975
- **CVE-2026-119974** (high, CVSS 7.0, EPSS 0.21%) Microsoft Windows 10 Version 1809: Time-of-check time-of-use (toctou) race condition in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally. Published 2026-11-10. https://nvd.nist.gov/vuln/detail/CVE-2026-119974
- **CVE-2026-119969** (high, CVSS 8.8, EPSS 1.00%) Microsoft Windows 10 Version 1607: Heap-based buffer overflow in Graphic Fonts allows an unauthorized attacker to execute code over a network. Published 2026-11-10. https://nvd.nist.gov/vuln/detail/CVE-2026-119969
- **CVE-2026-119967** (high, CVSS 8.1, EPSS 0.72%) Microsoft Windows 10 Version 1607: Use after free in Windows Message Queuing Queue Manager allows an unauthorized attacker to execute code over a network. Published 2026-11-10. https://nvd.nist.gov/vuln/detail/CVE-2026-119967
- **CVE-2026-119966** (high, CVSS 7.5, EPSS 0.28%) Microsoft Windows 11 version 23H2: Integer overflow or wraparound in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally. Published 2026-11-10. https://nvd.nist.gov/vuln/detail/CVE-2026-119966
- **CVE-2026-119964** (high, CVSS 8.1, EPSS 0.72%) Microsoft Windows 10 Version 1607: Double free in Windows Message Queuing allows an unauthorized attacker to execute code over a network. Published 2026-11-10. https://nvd.nist.gov/vuln/detail/CVE-2026-119964
- **CVE-2026-119963** (high, CVSS 8.1, EPSS 0.86%) Microsoft Windows 10 Version 1607: Double free in Windows Message Queuing allows an unauthorized attacker to execute code over a network. Published 2026-11-10. https://nvd.nist.gov/vuln/detail/CVE-2026-119963
- **CVE-2026-119962** (high, CVSS 8.1, EPSS 0.86%) Microsoft Windows 10 Version 1607: Double free in Windows Cred SSProvider Protocol allows an unauthorized attacker to execute code over a network. Published 2026-11-10. https://nvd.nist.gov/vuln/detail/CVE-2026-119962
- **CVE-2026-119961** (high, CVSS 8.1, EPSS 0.55%) Microsoft Windows 10 Version 1607: Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Internet Information Services allows an unauthorized attacker to execute code over a network. Published 2026-11-10. https://nvd.nist.gov/vuln/detail/CVE-2026-119961
- **CVE-2026-119960** (high, CVSS 7.5, EPSS 0.28%) Microsoft Windows 11 Version 24H2: Use of uninitialized resource in Windows Hyper-V allows an authorized attacker to elevate privileges locally. Published 2026-11-10. https://nvd.nist.gov/vuln/detail/CVE-2026-119960
- **CVE-2026-119957** (high, CVSS 7.8, EPSS 0.27%) Microsoft Windows Server 2016: Double free in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally. Published 2026-11-10. https://nvd.nist.gov/vuln/detail/CVE-2026-119957
- **CVE-2026-119954** (high, CVSS 7.8, EPSS 0.34%) Microsoft Windows 10 Version 1809: Absolute path traversal in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. Published 2026-11-10. https://nvd.nist.gov/vuln/detail/CVE-2026-119954
- **CVE-2026-119953** (high, CVSS 7.8, EPSS 0.34%) Microsoft Windows 10 Version 1607: Use after free in Windows DNS allows an authorized attacker to elevate privileges locally. Published 2026-11-10. https://nvd.nist.gov/vuln/detail/CVE-2026-119953
- **CVE-2026-119952** (high, CVSS 8.1, EPSS 0.88%) Microsoft Windows 10 Version 1607: Observable timing discrepancy in Windows Schannel allows an unauthorized attacker to execute code over a network. Published 2026-11-10. https://nvd.nist.gov/vuln/detail/CVE-2026-119952
- **CVE-2026-119951** (high, CVSS 8.1, EPSS 0.72%) Microsoft Windows Server 2016: Use after free in Windows Deployment Services allows an unauthorized attacker to execute code over a network. Published 2026-11-10. https://nvd.nist.gov/vuln/detail/CVE-2026-119951
- **CVE-2026-119950** (high, CVSS 8.8, EPSS 0.84%) Microsoft Windows 10 Version 1607: Heap-based buffer overflow in Windows Print Spooler Components allows an unauthorized attacker to elevate privileges over a network. Published 2026-11-10. https://nvd.nist.gov/vuln/detail/CVE-2026-119950
- **CVE-2026-119948** (high, CVSS 7.5, EPSS 0.68%) Microsoft Windows 10 Version 1607: Stack-based buffer overflow in Windows Active Directory allows an authorized attacker to execute code over a network. Published 2026-11-10. https://nvd.nist.gov/vuln/detail/CVE-2026-119948
- **CVE-2026-119947** (high, CVSS 7.5, EPSS 0.35%) Microsoft Windows 10 Version 1607: Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally. Published 2026-11-10. https://nvd.nist.gov/vuln/detail/CVE-2026-119947
- **CVE-2026-119945** (high, CVSS 8.1, EPSS 0.72%) Microsoft Windows 10 Version 21H2: Use after free in Windows Modern Device Management (MDM) allows an unauthorized attacker to execute code over a network. Published 2026-11-10. https://nvd.nist.gov/vuln/detail/CVE-2026-119945
- **CVE-2026-119944** (high, CVSS 7.5, EPSS 0.62%) Microsoft Windows 10 Version 1607: Heap-based buffer overflow in Windows Mobile Device Management allows an unauthorized attacker to elevate privileges over a network. Published 2026-11-10. https://nvd.nist.gov/vuln/detail/CVE-2026-119944
- **CVE-2026-119943** (high, CVSS 7.8, EPSS 0.33%) Microsoft Windows 11 Version 24H2: Buffer over-read in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. Published 2026-11-10. https://nvd.nist.gov/vuln/detail/CVE-2026-119943
- **CVE-2026-119941** (high, CVSS 7.8, EPSS 0.46%) Microsoft Windows 10 Version 1607: Untrusted pointer dereference in Windows Volume Shadow Copy allows an unauthorized attacker to elevate privileges locally. Published 2026-11-10. https://nvd.nist.gov/vuln/detail/CVE-2026-119941
- **CVE-2026-119939** (high, CVSS 7.8, EPSS 0.36%) Microsoft Windows 10 Version 1607: Improper privilege management in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally. Published 2026-11-10. https://nvd.nist.gov/vuln/detail/CVE-2026-119939
- **CVE-2026-119938** (high, CVSS 7.5, EPSS 0.62%) Microsoft Windows 10 Version 1607: Heap-based buffer overflow in Windows Shell allows an unauthorized attacker to execute code over a network. Published 2026-11-10. https://nvd.nist.gov/vuln/detail/CVE-2026-119938
- **CVE-2026-119934** (high, CVSS 8.8, EPSS 0.78%) Microsoft Windows 10 Version 1607: Double free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. Published 2026-11-10. https://nvd.nist.gov/vuln/detail/CVE-2026-119934
- **CVE-2026-119933** (high, CVSS 7.8, EPSS 0.34%) Microsoft Windows 10 Version 1607: Use of uninitialized resource in Windows NTFS allows an authorized attacker to elevate privileges locally. Published 2026-11-10. https://nvd.nist.gov/vuln/detail/CVE-2026-119933
- **CVE-2026-119932** (high, CVSS 7.5, EPSS 1.4%) Microsoft Windows 10 Version 1607: Null pointer dereference in Windows Remote Desktop allows an unauthorized attacker to deny service over a network. Published 2026-11-10. https://nvd.nist.gov/vuln/detail/CVE-2026-119932
- **CVE-2026-119931** (high, CVSS 7.0, EPSS 0.21%) Microsoft Windows 10 Version 1607: Time-of-check time-of-use (toctou) race condition in Windows Text Services Framework allows an authorized attacker to elevate privileges locally. Published 2026-11-10. https://nvd.nist.gov/vuln/detail/CVE-2026-119931
- **CVE-2026-119929** (high, CVSS 7.8, EPSS 0.39%) Microsoft Windows 10 Version 1607: Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. Published 2026-11-10. https://nvd.nist.gov/vuln/detail/CVE-2026-119929
- **CVE-2026-119928** (high, CVSS 7.0, EPSS 0.28%) Microsoft Windows 10 Version 1809: Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges locally. Published 2026-11-10. https://nvd.nist.gov/vuln/detail/CVE-2026-119928
- **CVE-2026-119925** (high, CVSS 8.8, EPSS 0.39%) Microsoft Windows 10 Version 1809: Out-of-bounds read in Windows Text Services Framework allows an authorized attacker to elevate privileges locally. Published 2026-11-10. https://nvd.nist.gov/vuln/detail/CVE-2026-119925
- **CVE-2026-119921** (high, CVSS 7.0, EPSS 0.31%) Microsoft Windows 10 Version 1607: Heap-based buffer overflow in Windows Microsoft Account Sign-in Assistant allows an authorized attacker to elevate privileges locally. Published 2026-11-10. https://nvd.nist.gov/vuln/detail/CVE-2026-119921
- **CVE-2026-119919** (high, CVSS 7.0, EPSS 0.31%) Microsoft Windows 10 Version 1607: Heap-based buffer overflow in Windows Distributed Transaction Coordinator allows an authorized attacker to elevate privileges locally. Published 2026-11-10. https://nvd.nist.gov/vuln/detail/CVE-2026-119919
- **CVE-2026-119917** (high, CVSS 7.8, EPSS 0.39%) Microsoft Windows 10 Version 1607: Heap-based buffer overflow in Windows Distributed Transaction Coordinator allows an authorized attacker to elevate privileges locally. Published 2026-11-10. https://nvd.nist.gov/vuln/detail/CVE-2026-119917
- **CVE-2026-119916** (high, CVSS 8.8, EPSS 0.39%) Microsoft Windows 10 Version 1809: Heap-based buffer overflow in Windows Input System allows an authorized attacker to elevate privileges locally. Published 2026-11-10. https://nvd.nist.gov/vuln/detail/CVE-2026-119916
- **CVE-2026-119913** (high, CVSS 7.0, EPSS 0.29%) Microsoft Windows 10 Version 1607: Improper link resolution before file access ('link following') in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally. Published 2026-11-10. https://nvd.nist.gov/vuln/detail/CVE-2026-119913
- **CVE-2026-119908** (high, CVSS 8.8, EPSS 0.78%) Microsoft Windows 11 version 23H2: Integer underflow (wrap or wraparound) in Windows Storage Spaces Controller allows an unauthorized attacker to execute code over a network. Published 2026-11-10. https://nvd.nist.gov/vuln/detail/CVE-2026-119908
- **CVE-2026-119907** (high, CVSS 7.8, EPSS 0.34%) Microsoft Windows 10 Version 1607: Untrusted pointer dereference in Windows Function Discovery Resource Publication allows an authorized attacker to elevate privileges locally. Published 2026-11-10. https://nvd.nist.gov/vuln/detail/CVE-2026-119907
- **CVE-2026-119906** (high, CVSS 7.8, EPSS 0.80%) Microsoft Windows Sandbox: Improper neutralization of special elements used in an os command ('os command injection') in Windows Sandbox allows an authorized attacker to elevate privileges locally. Published 2026-11-10. https://nvd.nist.gov/vuln/detail/CVE-2026-119906
- **CVE-2026-119904** (high, CVSS 7.8, EPSS 1.7%) Microsoft Windows 10 Version 1809: Improper control of generation of code ('code injection') in Microsoft Windows Speech allows an authorized attacker to elevate privileges locally. Published 2026-11-10. https://nvd.nist.gov/vuln/detail/CVE-2026-119904
- **CVE-2026-119903** (high, CVSS 7.8, EPSS 0.43%) Microsoft Windows 10 Version 1607: Improper access control in Windows Installer allows an authorized attacker to elevate privileges locally. Published 2026-11-10. https://nvd.nist.gov/vuln/detail/CVE-2026-119903
- **CVE-2026-119900** (high, CVSS 7.3, EPSS 0.43%) Microsoft Windows 10 Version 1607: Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally. Published 2026-11-10. https://nvd.nist.gov/vuln/detail/CVE-2026-119900
- **CVE-2026-119899** (high, CVSS 7.8, EPSS 0.30%) Microsoft Windows 10 Version 1607: Improper access control in Windows Win32K allows an authorized attacker to elevate privileges locally. Published 2026-11-10. https://nvd.nist.gov/vuln/detail/CVE-2026-119899
- **CVE-2026-119398** (high, CVSS 7.8, EPSS 0.26%) Microsoft Windows 10 Version 1607: Time-of-check time-of-use (toctou) race condition in Windows Installer allows an authorized attacker to elevate privileges locally. Published 2026-11-10. https://nvd.nist.gov/vuln/detail/CVE-2026-119398
- **CVE-2026-125759** (high, CVSS 7.5, EPSS 0.30%) NangoHQ nango: Nango before 0.71.3 contains an sql injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL by supplying a crafted task group key to the orchestrator API. Attackers can send a malicious group.key to POST /v1/immediate, which TaskEventsHandler.notify() interpolates into a Postgres NOTIFY… Published 2026-11-10. https://nvd.nist.gov/vuln/detail/CVE-2026-125759
- **CVE-2026-125758** (high, CVSS 7.4, EPSS 0.34%) aptabase aptabase: Aptabase before commit 61d4c01 contains an authentication bypass vulnerability that allows unauthenticated attackers to forge sign-in links by using the publicly known example AUTH_SECRET. Attackers can enumerate registered e-mails via /api/_auth/signin, forge HS256 JWTs redeemed by /api/_auth/continue, impersonate… Published 2026-11-10. https://nvd.nist.gov/vuln/detail/CVE-2026-125758
- **CVE-2026-125754** (high, CVSS 7.1, EPSS 0.22%) Dolibarr dolibarr: Dolibarr 20.0.0 through 23.0.4 and 24.x before 24.0.2 contains an insecure direct object reference vulnerability in api_expensereports.class.php payment endpoints that lets authenticated users access other users' expense report payments. Attackers with only expense report read and create rights can call… Published 2026-11-10. https://nvd.nist.gov/vuln/detail/CVE-2026-125754
- **CVE-2026-125750** (high, CVSS 7.1, EPSS 0.22%) firekylin Firekylin: Firekylin through 2.18.1 contains an improper authorization vulnerability that allows editor-role users to read administrator-only secrets because the admin API base guard permits all GET actions. Editors can query options.js for TOTP secrets, push credentials, and cloud storage keys, or user.js for other users'… Published 2026-11-10. https://nvd.nist.gov/vuln/detail/CVE-2026-125750
- **CVE-2026-11316** (high, CVSS 8.8, EPSS 0.37%) mackron dr_libs: A out-of-bounds write vulnerability exists in the dr_wav drwav__read_cue_to_metadata_obj functionality of dr_libs (version(s): 0.14.5). A specially crafted .wav file can lead to an out-of-bounds write. An attacker can provide a malicious file to trigger this vulnerability. Published 2026-11-10. https://nvd.nist.gov/vuln/detail/CVE-2026-11316
- **CVE-2026-82509** (high, CVSS 7.4, EPSS 0.23%) vlang v: V programming language standard library net.http through version 0.5.2 prior to commit 4077484 contains a TLS certificate validation bypass vulnerability that allows on-path attackers to intercept HTTPS traffic by exploiting the default false value of SSLConnectConfig.validate and FetchConfig.validate, which completes… Published 2026-11-10. https://nvd.nist.gov/vuln/detail/CVE-2026-82509
- **CVE-2026-120399** (high, CVSS 7.5, EPSS 0.34%) Red Hat Red Hat Edge Manager 1: A flaw was found in flightctl. A TLS handshake is performed synchronously in the HTTP server’s connection-context callback without a deadline. A network-reachable unauthenticated client can stall the handshake and prevent the affected listener from accepting new connections. Published 2026-11-10. https://nvd.nist.gov/vuln/detail/CVE-2026-120399
- **CVE-2026-16478** (high, CVSS 7.0, EPSS 0.19%) TÜBİTAK BİLGEM Software Technologies Research Institute pardus-nvidia-installer: Permissive list of allowed inputs vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute pardus-nvidia-installer allows Privilege Escalation. This issue affects pardus-nvidia-installer: before 2.0.1. Published 2026-11-10. https://nvd.nist.gov/vuln/detail/CVE-2026-16478
- **CVE-2026-124747** (high, CVSS 7.5, EPSS 0.29%) Red Hat Red Hat Enterprise Linux 6: A flaw was found in BusyBox. When resuming a download over File Transfer Protocol (FTP), the wget utility fails to verify that the resume offset does not exceed the file size reported by the server, resulting in an integer calculation error. A malicious FTP server or an on-path network attacker can exploit this issue… Published 2026-11-10. https://nvd.nist.gov/vuln/detail/CVE-2026-124747
- **CVE-2026-121267** (high, CVSS 7.8, EPSS 0.10%) TÜBİTAK BİLGEM Software Technologies Research Institute eta-remote: Incorrect default permissions vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute eta-remote allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects eta-remote: from 0.0.2 before 0.0.3. Published 2026-11-10. https://nvd.nist.gov/vuln/detail/CVE-2026-121267
- **CVE-2026-59082** (high, CVSS 7.8, EPSS 0.13%) Siemens SIMATIC WinCC V7.5: A vulnerability has been identified in SIMATIC WinCC V7.5 (All versions), SIMATIC WinCC V8.0 (All versions), SIMATIC WinCC V8.1 (All versions). Affected devices implicitly execute active content when opening files. This could allow an attacker to make the user execute arbitrary code on the device. Published 2026-11-10. https://nvd.nist.gov/vuln/detail/CVE-2026-59082
- **CVE-2026-125707** (high, CVSS 7.1, EPSS 0.15%) Red Hat Red Hat Enterprise Linux 10: A flaw was found in GStreamer's MXF demuxer. When an application processes a crafted MXF file, an off-by-one bounds check can allow a one-byte write past the logical end of a temporal offset array. This may corrupt memory and cause the application to crash. The extent of the impact has not been demonstrated by a… Published 2026-11-10. https://nvd.nist.gov/vuln/detail/CVE-2026-125707
- **CVE-2026-109097** (high, CVSS 8.2, EPSS 0.12%) Siemens ROS#: A vulnerability has been identified in ROS# (All versions < V2.3.1). Affected systems do not properly escape text of message definition files. This could allow an attacker that is able to pass a crafted message definition file to the user to inject arbitrary code into the generated program. Published 2026-11-10. https://nvd.nist.gov/vuln/detail/CVE-2026-109097
- **CVE-2026-60044** (high, CVSS 7.5, EPSS 0.30%) MB connect line mbCONNECT24: The backups created by the application use a weak static password allowing an unauthenticated remote attacker to access their content. This can result in a total loss of confidentiality. Published 2026-11-10. https://nvd.nist.gov/vuln/detail/CVE-2026-60044
- **CVE-2026-60040** (high, CVSS 7.5, EPSS 0.35%) MB connect line mbCONNECT24: An unauthenticated remote attacker can perform a DoS in the backends backup creation function. This can result in a total loss of availability. Published 2026-11-10. https://nvd.nist.gov/vuln/detail/CVE-2026-60040
- **CVE-2026-60039** (high, CVSS 7.2, EPSS 0.49%) MB connect line mbCONNECT24: A high privileged remote attacker can perform a code injection in the backends backup restore function leading to code execution. This can result in a total loss of confidentiality, integrity and availability. Published 2026-11-10. https://nvd.nist.gov/vuln/detail/CVE-2026-60039
- **CVE-2026-60035** (high, CVSS 7.2, EPSS 0.49%) MB connect line mbCONNECT24: A high privileged remote attacker can perform a code injection in the backends network auth function leading to code execution. This can result in a total loss of confidentiality, integrity and availability. Published 2026-11-10. https://nvd.nist.gov/vuln/detail/CVE-2026-60035
- **CVE-2026-125086** (critical, CVSS 10.0, EPSS 0.61%) D-Link M60: A vulnerability has been found in D-Link M60 1.12.B01. Impacted is the function system of the file /etc/emDaemon/mosquitto.conf of the component emDaemon MQTT Broker. Such manipulation leads to hard-coded credentials. The attack can be executed remotely. The exploit has been disclosed to the public and may be used. Published 2026-11-10. https://nvd.nist.gov/vuln/detail/CVE-2026-125086
- **CVE-2026-125406** (high, CVSS 8.8, EPSS 0.24%) Ettercap ettercap: Ettercap through 0.8.4.1 contains a stack buffer underwrite vulnerability in the telnet dissector in src/dissectors/ec_telnet.c that decrements the output pointer on backspace without a lower bound check. Attackers can send a telnet stream with more backspaces than preceding characters to write below the stack buffer… Published 2026-11-10. https://nvd.nist.gov/vuln/detail/CVE-2026-125406
- **CVE-2026-125405** (high, CVSS 8.1, EPSS 0.29%) Ettercap ettercap: Ettercap through 0.8.4.1 contains an out-of-bounds read vulnerability in Parse_NTLM_Auth() in src/dissectors/ec_http.c due to unvalidated NTLM message offsets. Attackers can send a crafted HTTP Authorization header observed by Ettercap to read beyond the buffer, disclosing memory or crashing the process. Published 2026-11-10. https://nvd.nist.gov/vuln/detail/CVE-2026-125405
- **CVE-2026-125402** (high, CVSS 8.1, EPSS 0.25%) Ettercap ettercap: Ettercap through 0.8.4.1 contains a heap out-of-bounds read vulnerability in sslw_get_clienthello_sni() in src/ec_sslwrap.c that trusts the unchecked 16-bit SNI length field. Network-adjacent attackers can send crafted TLS ClientHello messages during SSL interception to leak up to 64 KB of heap memory upstream or… Published 2026-11-10. https://nvd.nist.gov/vuln/detail/CVE-2026-125402
- **CVE-2026-125401** (high, CVSS 8.1, EPSS 0.39%) Ettercap ettercap: Ettercap through 0.8.4.1 contains a heap buffer overflow vulnerability in gg_get_version() in src/dissectors/ec_gg.c that writes up to 44 bytes into a 30-byte allocation. Remote attackers can send Gadu-Gadu traffic on TCP port 8074 with a crafted version field through a monitored network to corrupt heap memory in the… Published 2026-11-10. https://nvd.nist.gov/vuln/detail/CVE-2026-125401
- **CVE-2026-125398** (high, CVSS 7.1, EPSS 0.28%) CoreBunch Instatic: Instatic before 0.0.21 contains an authorization bypass vulnerability in handleRowAuthor that allows authenticated users to skip table-level access checks by loading rows with getDataRow() instead of loadRowForAccess(). Attackers holding content.edit.any but lacking data.system.tables.read can send PATCH requests to… Published 2026-11-10. https://nvd.nist.gov/vuln/detail/CVE-2026-125398
- **CVE-2026-125397** (high, CVSS 7.1, EPSS 0.21%) nocobase nocobase: NocoBase plugin-ai 2.1.0 through 2.2.41 contains an authorization bypass vulnerability in getAccessibleAIEmployee() that lets authenticated users access unassigned AI employees by overriding the role-derived filter with a supplied username. Attackers can use the dispatch-sub-agent-task tool to run ungranted AI… Published 2026-11-10. https://nvd.nist.gov/vuln/detail/CVE-2026-125397
- **CVE-2026-125382** (high, CVSS 7.2, EPSS 0.45%) RamonSilva20 mapos: Map-OS 5.0.0 to before 5.2.2 contains a privilege escalation vulnerability in the REST users API that allows non-administrator operators holding the cUsuario permission to bypass permission-delegation and super-administrator protections. Attackers can send POST, PUT, or DELETE requests to /api/v1/usuarios to assign… Published 2026-11-10. https://nvd.nist.gov/vuln/detail/CVE-2026-125382
- **CVE-2026-125370** (critical, CVSS 9.8, EPSS 0.68%) kubero-dev kubero: Kubero 3.0.0 through 3.1.1 contains an authentication bypass vulnerability that allows unauthenticated remote attackers to forge administrative JWTs by using a hardcoded fallback signing secret when JWT_SECRET is unset. Attackers can sign tokens with arbitrary role, userGroups and permissions claims, which… Published 2026-11-10. https://nvd.nist.gov/vuln/detail/CVE-2026-125370
- **CVE-2026-125358** (high, CVSS 8.1, EPSS 0.18%) rehan-remade universal-modder: Universal-modder before commit e88f6876745427321eb755ebc98276063a962d8a contains a missing WebSocket Origin validation vulnerability in the HostLink class of its passthrough example mods that allows remote attackers to execute Minecraft commands. Any web page open in the player's browser can connect cross-site to the… Published 2026-11-10. https://nvd.nist.gov/vuln/detail/CVE-2026-125358
- **CVE-2026-125076** (high, CVSS 7.3, EPSS 0.40%) SourceCodester Smart Attendance System with QR Code Scanner: A vulnerability was found in SourceCodester Smart Attendance System with QR Code Scanner 1.0. Affected is an unknown function of the file api/attendance_handler.php of the component JSON Endpoint. Performing a manipulation of the argument student_code results in missing authentication. It is possible to initiate the… Published 2026-11-10. https://nvd.nist.gov/vuln/detail/CVE-2026-125076
- **CVE-2026-56712** (critical, CVSS 9.3, EPSS 0.40%) replicate cog: Replicate Cog through 0.23.1 contains a server-side request forgery vulnerability that allows attackers to cause the Cog process to make server-side HTTP requests by submitting prediction inputs with attacker-controlled URLs that are not validated against the resolved destination host or IP before fetching. Attackers… Published 2026-11-09. https://nvd.nist.gov/vuln/detail/CVE-2026-56712
- **CVE-2026-125269** (high, CVSS 7.0, EPSS 0.13%) FFmpeg FFmpeg: FFmpeg through 9.0.2 contains a double free vulnerability in libavcodec/cbs_sei.c where cbs_sei_delete_message() leaves a stale extension_data reference that ff_cbs_sei_add_message() reuses. Attackers can supply a crafted H.264 stream with a display orientation SEI message followed by payload extension data, processed… Published 2026-11-09. https://nvd.nist.gov/vuln/detail/CVE-2026-125269
- **CVE-2026-125262** (high, CVSS 7.8, EPSS 0.14%) FFmpeg FFmpeg: FFmpeg through 9.0.2 contains a heap buffer overflow vulnerability in libavcodec/lcevcdec.c because LCEVC output picture dimensions are not validated against the allocated frame. Attackers can embed crafted LCEVC enhancement data with differing global configurations in H.264 or HEVC streams to corrupt heap memory in… Published 2026-11-09. https://nvd.nist.gov/vuln/detail/CVE-2026-125262
- **CVE-2026-125257** (high, CVSS 7.0, EPSS 0.14%) FFmpeg FFmpeg: FFmpeg through 9.0.2 contains an off-by-one heap overflow vulnerability in get_exponent_dynamic() in libavcodec/nellymoserenc.c that allows writing one element past the opt and path allocations. Attackers can supply crafted audio to applications encoding Nellymoser with trellis enabled, causing idx to equal OPT_SIZE… Published 2026-11-09. https://nvd.nist.gov/vuln/detail/CVE-2026-125257
- **CVE-2026-125250** (high, CVSS 7.8, EPSS 0.14%) FFmpeg FFmpeg: FFmpeg through 9.0.2 contains a heap buffer overflow in the GIF encoder's gif_image_write_image() in libavcodec/gif.c because shrunk_buf is sized from the first frame's linesize. Attackers can supply PAL8 video whose frame linesize grows mid-stream, causing remap_frame_to_palette() to write past shrunk_buf and corrupt… Published 2026-11-09. https://nvd.nist.gov/vuln/detail/CVE-2026-125250
- **CVE-2026-125249** (high, CVSS 7.0, EPSS 0.12%) FFmpeg FFmpeg: FFmpeg 7.1 through 9.0.2 contains an integer overflow in ff_vk_decode_add_slice() in libavcodec/vulkan_decode.c that miscalculates the Vulkan hwaccel bitstream buffer size. Attackers can supply a crafted stream with over 2 GiB of slice data per frame, causing memcpy() to write past a smaller pooled host-mapped buffer. Published 2026-11-09. https://nvd.nist.gov/vuln/detail/CVE-2026-125249
- **CVE-2026-125241** (high, CVSS 7.0, EPSS 0.14%) FFmpeg FFmpeg: FFmpeg through 9.0.2 contains a heap buffer overflow vulnerability in libavcodec/flicvideo.c that allows attackers to write out of bounds because check_pixel_ptr() checks only one bound with negative-stride frames. Attackers can supply a crafted FLIC file whose RLE and delta chunks write pixel data past frame storage… Published 2026-11-09. https://nvd.nist.gov/vuln/detail/CVE-2026-125241
- **CVE-2026-125233** (high, CVSS 7.8, EPSS 0.14%) FFmpeg FFmpeg: FFmpeg through 9.0.2 contains a heap buffer overflow vulnerability in dvbsub_encode() in libavcodec/dvbsubenc.c that undercounts each CLUT segment header by two bytes. Attackers can supply a file with many bitmap subtitle rectangles that, when transcoded to the dvbsub encoder, writes past the output buffer and… Published 2026-11-09. https://nvd.nist.gov/vuln/detail/CVE-2026-125233
- **CVE-2026-125229** (high, CVSS 7.8, EPSS 0.13%) FFmpeg FFmpeg: FFmpeg through 9.0.2 contains an out-of-bounds memory access vulnerability in the encode_frame() function of libavcodec/huffyuvenc.c, because encode_init() never validates minimum frame dimensions for the median predictor. Attackers can supply a tiny video, such as a 2-pixel-wide or 1-2-pixel-tall frame, that causes… Published 2026-11-09. https://nvd.nist.gov/vuln/detail/CVE-2026-125229
- **CVE-2026-125222** (high, CVSS 7.0, EPSS 0.15%) FFmpeg FFmpeg: FFmpeg through 9.0.2 contains an integer overflow vulnerability in hap_parse_frame_header() in libavcodec/hapdec.c that allows attackers to trigger a heap buffer overflow on 32-bit builds. Attackers can craft Hap video frames with Snappy length prefixes that wrap tex_size, causing decompress_chunks_thread() to write… Published 2026-11-09. https://nvd.nist.gov/vuln/detail/CVE-2026-125222
- **CVE-2026-125218** (high, CVSS 7.0, EPSS 0.14%) FFmpeg FFmpeg: FFmpeg through 9.0.2 contains a heap buffer overflow vulnerability in the APNG encoder's encode_apng() function in libavcodec/pngenc.c when frame size changes mid-stream. Attackers can supply crafted media whose resolution grows mid-stream, causing APNG_DISPOSE_OP_BACKGROUND memset writes past prev_frame and crashing… Published 2026-11-09. https://nvd.nist.gov/vuln/detail/CVE-2026-125218
- **CVE-2026-125214** (high, CVSS 7.0, EPSS 0.14%) FFmpeg FFmpeg: FFmpeg through 9.0.2 contains a heap buffer overflow vulnerability in pcm_bluray_decode_frame() in libavcodec/pcm-bluray.c on big-endian hosts. Attackers can supply a crafted Blu-ray (M2TS) LPCM stream whose payload length is not a multiple of the sample size, writing attacker-controlled bytes past the audio frame… Published 2026-11-09. https://nvd.nist.gov/vuln/detail/CVE-2026-125214
- **CVE-2026-125213** (high, CVSS 7.0, EPSS 0.15%) FFmpeg FFmpeg: FFmpeg through 9.0.2 contains a heap buffer overflow vulnerability in the PSD decoder in libavcodec/psd.c that allows attackers to corrupt heap memory on 32-bit builds by supplying a crafted PSD image. Attackers can choose dimensions and channel counts whose product exceeds 4 GB, truncating the av_malloc allocation… Published 2026-11-09. https://nvd.nist.gov/vuln/detail/CVE-2026-125213
- **CVE-2026-125210** (high, CVSS 7.0, EPSS 0.14%) FFmpeg FFmpeg: FFmpeg through 9.0.2 contains a heap buffer overflow vulnerability in aribcaption_trans_text_subtitle() in libavcodec/libaribcaption.c when decoding with sub_type text. Attackers can supply a crafted ARIB STD-B24 caption stream with zero regions, causing a pointer write past a zero-sized sub->rects allocation and… Published 2026-11-09. https://nvd.nist.gov/vuln/detail/CVE-2026-125210
- **CVE-2026-125209** (high, CVSS 7.8, EPSS 0.14%) FFmpeg FFmpeg: FFmpeg before 8.1.3 and 9.x before 9.0.2 contains a heap buffer overflow vulnerability in the DVD subtitle encoder that underestimates RLE output size for odd-width rectangles. Attackers can supply files with crafted bitmap subtitles that, when transcoded to the dvdsub encoder, write past the output buffer and corrupt… Published 2026-11-09. https://nvd.nist.gov/vuln/detail/CVE-2026-125209
- **CVE-2026-125202** (high, CVSS 7.0, EPSS 0.14%) FFmpeg FFmpeg: FFmpeg through 9.0.2 contains a heap buffer overflow vulnerability in vaapi_hevc_start_frame() in libavcodec/vaapi_hevc.c that copies unbounded PPS tile counts into fixed-size arrays. Attackers can supply a crafted HEVC bitstream with a large picture and many tiles to write controlled 16-bit values past heap-allocated… Published 2026-11-09. https://nvd.nist.gov/vuln/detail/CVE-2026-125202
- **CVE-2026-125201** (high, CVSS 7.0, EPSS 0.13%) FFmpeg FFmpeg: FFmpeg 7.0 before 8.1.3 and 9.x before 9.0.2 contains a heap out-of-bounds write vulnerability in vk_av1_decode_slice() in libavcodec/vulkan_av1.c because the tile-count limit is checked only on entry. Attackers can supply a crafted AV1 stream with more than 256 tiles decoded via the Vulkan hardware accelerator to… Published 2026-11-09. https://nvd.nist.gov/vuln/detail/CVE-2026-125201
- **CVE-2026-125181** (high, CVSS 7.0, EPSS 0.13%) FFmpeg FFmpeg: FFmpeg through 9.0.2 contains an out-of-bounds write vulnerability in flic_decode_frame_15_16BPP() in libavcodec/flicvideo.c that allows attackers to corrupt heap memory on big-endian builds. Attackers can supply a crafted 15/16 bpp FLIC/FLX file with an FLI_BRUN chunk whose non-terminating byte-swap loop writes… Published 2026-11-09. https://nvd.nist.gov/vuln/detail/CVE-2026-125181
- **CVE-2026-124001** (high, CVSS 8.1, EPSS 0.52%) nasa-jpl ION-DTN: NASA JPL ION-DTN 2.2.1b through 4.2.0 contains an integer overflow vulnerability in the Datagram Retransmission (DGR) convergence layer that allows attackers to corrupt heap memory by sending a maliciously crafted 64-bit svcDataLength value that wraps a 32-bit allocation size calculation. Attackers can exploit the… Published 2026-11-09. https://nvd.nist.gov/vuln/detail/CVE-2026-124001
- **CVE-2026-124079** (critical, CVSS 9.8, EPSS 0.62%) rConfig rConfig Core: rConfig Core 8.0.0 before 8.2.19 and rConfig Pro before 8.4.1 contain a deserialization of untrusted data vulnerability that allows unauthenticated network attackers to execute arbitrary code by pushing a crafted serialized job onto the Redis-backed Laravel Horizon queue, which runs without authentication in affected… Published 2026-11-09. https://nvd.nist.gov/vuln/detail/CVE-2026-124079
- **CVE-2026-19121** (high, CVSS 8.3, EPSS 0.37%) IBM API Connect: IBM API Connect 12.1.0.0 through 12.1.1.2 could allow an authenticated attacker to gain unauthorized access due to improper authorization. Tenant context is not sufficiently verified against the authenticated user, which could allow access to another tenant's resources. Published 2026-11-07. https://nvd.nist.gov/vuln/detail/CVE-2026-19121
- **CVE-2026-17411** (high, CVSS 7.6, EPSS 0.32%) IBM API Connect: IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow an authenticated attacker to view, add, modify, or delete information in the back-end database due to SQL injection. Input is not properly neutralized before it is used in database queries. Published 2026-11-07. https://nvd.nist.gov/vuln/detail/CVE-2026-17411
- **CVE-2026-17410** (critical, CVSS 9.9, EPSS 0.66%) IBM API Connect: IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to access and modify other tenants' portal data due to improper neutralization of argument delimiters. Published 2026-11-07. https://nvd.nist.gov/vuln/detail/CVE-2026-17410
- **CVE-2026-17407** (high, CVSS 8.5, EPSS 0.46%) IBM API Connect: IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to execute arbitrary SQL commands due to SQL injection. Values received during sign-in are not properly neutralized before being used in a database query, which could allow SQL commands to run. Published 2026-11-07. https://nvd.nist.gov/vuln/detail/CVE-2026-17407
- **CVE-2026-17356** (high, CVSS 8.7, EPSS 0.31%) IBM API Connect: IBM API Connect 12.1.0.0 through 12.1.1.2 could allow a local attacker to obtain sensitive information due to the use of a hard-coded cryptographic key. Published 2026-11-07. https://nvd.nist.gov/vuln/detail/CVE-2026-17356
- **CVE-2026-17326** (high, CVSS 8.1, EPSS 0.58%) IBM API Connect: IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to bypass security restrictions due to improper authentication. Published 2026-11-07. https://nvd.nist.gov/vuln/detail/CVE-2026-17326
- **CVE-2026-17306** (high, CVSS 8.6, EPSS 0.43%) IBM API Connect: IBM API Connect 12.1.0.0 through 12.1.1.2 could allow a remote attacker to obtain sensitive information from internal network resources due to server-side request forgery. Published 2026-11-07. https://nvd.nist.gov/vuln/detail/CVE-2026-17306
- **CVE-2026-17301** (critical, CVSS 9.8, EPSS 0.41%) IBM API Connect: IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow an unauthenticated attacker to bypass authentication due to improper verification of a cryptographic signature. Published 2026-11-07. https://nvd.nist.gov/vuln/detail/CVE-2026-17301
- **CVE-2026-17299** (high, CVSS 8.1, EPSS 0.44%) IBM API Connect: IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to perform arbitrary file reads and server-side request forgery due to unrestricted resolution of external references. Externally referenced content in submitted definitions is not sufficiently… Published 2026-11-07. https://nvd.nist.gov/vuln/detail/CVE-2026-17299
- **CVE-2026-17298** (high, CVSS 7.7, EPSS 0.50%) IBM API Connect: IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information due to server-side request forgery. Published 2026-11-07. https://nvd.nist.gov/vuln/detail/CVE-2026-17298
- **CVE-2026-17293** (high, CVSS 8.5, EPSS 0.35%) IBM API Connect: IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to modify user profile information due to broken object-level authorization. Access checks do not confirm that the user is permitted to change the targeted profile. Published 2026-11-07. https://nvd.nist.gov/vuln/detail/CVE-2026-17293
- **CVE-2026-17291** (critical, CVSS 9.0, EPSS 0.53%) IBM API Connect: IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to perform account takeover due to an open redirect vulnerability. The redirect address used during OAuth 2.0 sign-in is not sufficiently validated, which could allow authentication results to be sent… Published 2026-11-07. https://nvd.nist.gov/vuln/detail/CVE-2026-17291
- **CVE-2026-17290** (high, CVSS 8.5, EPSS 0.35%) IBM API Connect: IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to create unauthorized user accounts due to improper verification of cryptographic signatures. Identity information from a login provider is accepted without its signature being fully verified, so… Published 2026-11-07. https://nvd.nist.gov/vuln/detail/CVE-2026-17290
- **CVE-2026-17284** (high, CVSS 8.5, EPSS 0.33%) IBM API Connect: IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to perform unauthorized operations in other tenants' environments due to improper validation of client-supplied information. Tenant context is not sufficiently verified, which could allow actions on… Published 2026-11-07. https://nvd.nist.gov/vuln/detail/CVE-2026-17284
- **CVE-2026-17280** (critical, CVSS 9.1, EPSS 0.57%) IBM API Connect: IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote attacker to perform unauthenticated brute-force attacks to obtain valid credentials due to improper restriction of excessive authentication attempts. Published 2026-11-07. https://nvd.nist.gov/vuln/detail/CVE-2026-17280
- **CVE-2026-17278** (high, CVSS 7.5, EPSS 0.66%) IBM API Connect: IBM API Connect 12.1.0.0 through 12.1.1.2 could allow a remote attacker to gain unauthorized access to sensitive API catalog and runtime configuration data due to improper authentication. Information supplied by the client is not sufficiently verified, which could allow a caller to appear as a trusted party. Published 2026-11-07. https://nvd.nist.gov/vuln/detail/CVE-2026-17278
- **CVE-2026-17239** (high, CVSS 8.8, EPSS 0.85%) IBM API Connect: IBM API Connect 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to execute arbitrary code due to a path traversal vulnerability. Published 2026-11-07. https://nvd.nist.gov/vuln/detail/CVE-2026-17239
- **CVE-2026-17147** (high, CVSS 8.8, EPSS 0.95%) IBM API Connect: IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to execute arbitrary code and perform unauthorized administrative actions due to a path traversal vulnerability. Published 2026-11-07. https://nvd.nist.gov/vuln/detail/CVE-2026-17147
- **CVE-2026-17134** (high, CVSS 8.8, EPSS 0.46%) IBM API Connect: IBM API Connect 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to execute arbitrary SQL commands due to SQL injection. Published 2026-11-07. https://nvd.nist.gov/vuln/detail/CVE-2026-17134

To get a briefing and a fix pull request when one of these is in your own dependencies, see https://zeusqa.ai/features/vulnerability-watch.