CyberStack

NIST

CVE intelligence

Cached from NVD. 2026-10-26 00:40 Perth time (AWST). Critical.

1756KEV listed
209Published, last 14 days
654Critical
981High
CVETitleVendorPublishedCVSSKEV listed
CVE-2026-114625Arista VeloCloud Orchestrator SQL Injection VulnerabilityArista2026-10-222026-10-23
CVE-2026-102764BeyondTrust Remote Support Authentication Bypass by Spoofing VulnerabilityBeyondtrust2026-10-152026-10-16
CVE-2026-76519Cisco Secure Email Gateway Relative Path Traversal VulnerabilityCisco2026-10-142026-10-14
CVE-2026-110447Collabora Online – Built-in CODE Server OS Command Injection Vulnerability—2026-10-142026-10-23
CVE-2026-86717The Insurify WordPress plugin through 1.0 does not have authorisation and nonce checks on one of its AJAX actions, allowing unauthenticated —2026-10-11—
CVE-2026-86706The Quick quotes WordPress plugin through 1.0.0 does not perform any capability or nonce check on one of its AJAX actions and lets the calle—2026-10-11—
CVE-2026-85121The Insurify WordPress plugin through 1.0 does not have authorisation and nonce checks on one of its AJAX actions, allowing unauthenticated —2026-10-11—
CVE-2026-85118The AI Content Generator Marketing WordPress plugin through 1.0.0 does not enforce a nonce or capability check on some of its AJAX actions, —2026-10-11—
CVE-2026-84737The Freeton WP WordPress plugin through 1.0.0 does not correctly validate the activation code when authenticating a user, allowing unauthent—2026-10-11—
CVE-2026-84734The Mindstien Quick Login WordPress plugin through 1.0 does not correctly validate a value supplied in the request against the visitor's own—2026-10-11—
CVE-2026-84254The click5 CRM add-on to Contact Form 7 WordPress plugin through 1.0.4 does not have authorisation and CSRF checks when updating options via—2026-10-11—
CVE-2026-84253The click5 CRM add-on to Gravity Forms WordPress plugin through 1.0.3 does not have authorisation and CSRF checks when updating options via —2026-10-11—
CVE-2026-84252The click5 CRM add-on to WPForms WordPress plugin through 1.0.3 does not have authorisation and CSRF checks when updating options via a REST—2026-10-11—
CVE-2026-84251The click5 CRM add-on to Ninja Forms WordPress plugin through 1.0.1 does not have authorisation and CSRF checks when updating options via a —2026-10-11—
CVE-2026-81649The Fundiin cho WooCommerce WordPress plugin through 3.4.0 does not have proper authorisation on several of its REST API routes, relying ins—2026-10-11—
CVE-2026-108860BotSharp through 5.2.0 contains an authentication bypass vulnerability that allows unauthenticated remote attackers to forge bearer tokens u—2026-10-11—
CVE-2026-108753Agnaistic agnai through 1.0.555 contains a hard-coded credentials vulnerability in self-host.docker-compose.yml, which sets a fixed admin pa—2026-10-11—
CVE-2026-108707Wukong_HRM through commit 186115e contains an authentication bypass vulnerability in ParamAspect that allows unauthenticated attackers to ca—2026-10-11—
CVE-2026-108576A vulnerability was found in TOZED X300 up to 6.01.3. This vulnerability affects the function process_ping of the component IPPingDiagnostic—2026-10-11—
CVE-2026-104028The Anton Extensions WordPress plugin through 1.2.2 does not perform any capability check, nonce verification, or file-type validation befor—2026-10-11—
CVE-2026-21589Atlassian Multiple Products Files or Directories Accessible to External Parties VulnerabilityAtlassian2026-10-052026-10-15
CVE-2026-105134Ahsay AhsayCBS Command Injection VulnerabilityAhsay2026-10-042026-10-14
CVE-2026-104286Fortinet FortiMail Path Traversal VulnerabilityFortinet2026-10-012026-10-01
CVE-2026-76504Cisco Catalyst SD-WAN Manager Hex Encoding VulnerabilityCisco2026-09-302026-09-30
CVE-2026-102490Zammad GmbH Zammad Improper Privilege Management VulnerabilityZammad2026-09-302026-10-02
CVE-2026-102489Zammad GmbH Zammad Session Fixation VulnerabilityZammad2026-09-302026-10-02
CVE-2026-88772Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer VulnerabilityCitrix2026-09-272026-09-27
CVE-2026-88771Citrix NetScaler Improper Input Validation VulnerabilityCitrix2026-09-272026-09-27
CVE-2026-94127F5 BIG-IP APM Heap-based Buffer Overflow VulnerabilityF52026-09-222026-09-22
CVE-2026-93952Arista VeloCloud Orchestrator Improper Input Validation VulnerabilityArista2026-09-222026-09-22
CVE-2026-93616Check Point Multiple Products Path Traversal VulnerabilityCheckpoint2026-09-222026-09-22
CVE-2026-76460Cisco Identity Services Engine Incorrect Use of Privileged APIs VulnerabilityCisco2026-09-162026-09-16
CVE-2026-76461Cisco Secure Email Gateway SQL Injection VulnerabilityCisco2026-09-142026-09-14
CVE-2026-85706GitLab Community Edition and Enterprise Edition Path Traversal VulnerabilityGitlab2026-09-122026-09-11
CVE-2026-85102Check Point Multiple Products Improper Certificate Validation VulnerabilityCheckpoint2026-09-092026-09-22
CVE-2026-84869ConnectWise ScreenConnect Improper Privilege Management and Missing Authorization VulnerabilityConnectwise2026-09-082026-09-11
CVE-2026-75650Adobe Commerce and Magento Improper Neutralization of Special Elements Used in a Template Engine VulnerabilityAdobe2026-09-072026-09-08
CVE-2026-86218N-able N-central Static Code Injection VulnerabilityN-able2026-09-062026-09-08
CVE-2026-86060MikroTik RouterOS Improper Neutralization of Argument Delimiters in a Command VulnerabilityMikrotik2026-09-052026-09-10
CVE-2026-83548SonicWall SMA1000 Appliances Server-Side Request Forgery VulnerabilitySonicwall2026-09-012026-09-02

1–40 of 654Next