RISC-V: KVM: Synchronize hrtimer callback during teardown
Source changes critical severity rating
CVE-2026-98464
Assessment context
Source changes critical severity rating; observed by ChangeIntel, not the original publication date.
Weekly briefing
Week 43 · 19 Oct – 25 Oct 2026 UTC · assess the changes, then plan the next dates.
All dated changes in this period
1120 source records · 1005 groupsSecurityRosarioSIS before 12.9.1 Missing Authorization in Teacher Save Handlers
RosarioSIS before 12.9.1 Missing Authorization in Teacher Save Handlers
Newly collected advisory
CVE-2026-116010
Assessment context
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityTravisun Opptrix Import Endpoint import code injection
Travisun Opptrix Import Endpoint import code injection
Newly collected advisory
CVE-2026-115970
Assessment context
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityTravisun Opptrix Schedule API setup command injection
Travisun Opptrix Schedule API setup command injection
Newly collected advisory
CVE-2026-115969
Assessment context
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityTravisun Opptrix preParsing handler webhook Buffer.concat denial of service
Travisun Opptrix preParsing handler webhook Buffer.concat denial of service
Newly collected advisory
CVE-2026-115971
Assessment context
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported versions that are affected are Oracle Java SE: 8u511-b32, 8u511-perf-b32, 11.0.33.0.2, 17…
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported versions that are affected are Oracle Java SE: 8u511-b32, 8u511-perf-b32, 11.0.33.0.2, 17…
Newly collected advisory
CVE-2026-114820
Assessment context
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityWeb::Simple versions before 0.035 for Perl allocate a buffer sized by the Content-Length header for urlencoded body parameters
Web::Simple versions before 0.035 for Perl allocate a buffer sized by the Content-Length header for urlencoded body parameters
Newly collected advisory
CVE-2026-114629
Assessment context
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityWordPress Newsletters plugin <= 4.18.1 - PHP Object Injection vulnerability
WordPress Newsletters plugin <= 4.18.1 - PHP Object Injection vulnerability
Newly collected advisory
CVE-2026-94075
Assessment context
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityWordPress Newsletters plugin <= 4.18.1 - SQL Injection vulnerability
WordPress Newsletters plugin <= 4.18.1 - SQL Injection vulnerability
Newly collected advisory
CVE-2026-111402
Assessment context
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityWordPress Paytium plugin <= 5.0.5 - PHP Object Injection vulnerability
WordPress Paytium plugin <= 5.0.5 - PHP Object Injection vulnerability
Newly collected advisory
CVE-2026-114196
Assessment context
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityWordPress Product Filter by WBW plugin <= 3.4.6 - SQL Injection vulnerability
WordPress Product Filter by WBW plugin <= 3.4.6 - SQL Injection vulnerability
Newly collected advisory
CVE-2026-112866
Assessment context
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityWordPress Relevanssi plugin <= 4.28.4 - PHP Object Injection vulnerability
WordPress Relevanssi plugin <= 4.28.4 - PHP Object Injection vulnerability
Newly collected advisory
CVE-2026-114704
Assessment context
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityWordPress UPI QR Code Payment Gateway for WooCommerce plugin <= 1.6.3 - Broken Access Control vulnerability
WordPress UPI QR Code Payment Gateway for WooCommerce plugin <= 1.6.3 - Broken Access Control vulnerability
Newly collected advisory
CVE-2026-114191
Assessment context
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityWordPress WpEvently plugin <= 5.7.8 - Broken Access Control vulnerability
WordPress WpEvently plugin <= 5.7.8 - Broken Access Control vulnerability
Newly collected advisory
CVE-2026-114192
Assessment context
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityXiaozhi-esp32-server before 0.9.8 IDOR via device address-book endpoint
Xiaozhi-esp32-server before 0.9.8 IDOR via device address-book endpoint
Newly collected advisory
CVE-2026-116017
Assessment context
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityaBlocks <= 2.17.0 - Authenticated (Contributor+) Privilege Escalation to 'roleSlug' Block Attribute
aBlocks <= 2.17.0 - Authenticated (Contributor+) Privilege Escalation to 'roleSlug' Block Attribute
Newly collected advisory
CVE-2026-110018
Assessment context
Newly collected advisory; observed by ChangeIntel, not the original publication date.
Securitybtrfs: fix xattr replace when multiple xattrs are packed in the same item
btrfs: fix xattr replace when multiple xattrs are packed in the same item
Source changes critical severity rating
CVE-2026-98959
Assessment context
Source changes critical severity rating; observed by ChangeIntel, not the original publication date.
Securityipv4: free inet_opt and ireq_opt after an RCU grace period
ipv4: free inet_opt and ireq_opt after an RCU grace period
Source changes critical severity rating
CVE-2026-98432
Assessment context
Source changes critical severity rating; observed by ChangeIntel, not the original publication date.
Securitynet/mlx5e: Prevent stale XSK buffer release on MPWQE refill retry
net/mlx5e: Prevent stale XSK buffer release on MPWQE refill retry
Source changes critical severity rating
CVE-2026-99078
Assessment context
Source changes critical severity rating; observed by ChangeIntel, not the original publication date.
Securitynet/mlx5e: Prevent stale XSK buffer release on refill retry
net/mlx5e: Prevent stale XSK buffer release on refill retry
Source changes critical severity rating
CVE-2026-99079
Assessment context
Source changes critical severity rating; observed by ChangeIntel, not the original publication date.
Securitynet: openvswitch: conntrack: fix helper UAF due to extensions realloc
net: openvswitch: conntrack: fix helper UAF due to extensions realloc
Source changes critical severity rating
CVE-2026-98490
Assessment context
Source changes critical severity rating; observed by ChangeIntel, not the original publication date.
Securitynfsd: fix XDR padding calculation in ff_encode_getdeviceinfo
nfsd: fix XDR padding calculation in ff_encode_getdeviceinfo
Affected-version evidence changed
CVE-2026-89673
Assessment context
Affected-version evidence changed; observed by ChangeIntel, not the original publication date.
Securityopen62541 1.5.0 before 1.5.7 Integer Overflow Heap Buffer Overflow via Custom DataType
open62541 1.5.0 before 1.5.7 Integer Overflow Heap Buffer Overflow via Custom DataType
Newly collected advisory
CVE-2026-116014
Assessment context
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityphpIPAM Rack Link Creation show-rack-popup.php create_rack_link cross site scripting
phpIPAM Rack Link Creation show-rack-popup.php create_rack_link cross site scripting
Newly collected advisory
CVE-2026-115982
Assessment context
Newly collected advisory; observed by ChangeIntel, not the original publication date.
Groups collect records about the same product or named security topic on one UTC date. Open a record for its source and history; grouping alone does not establish a shared cause or impact.