GeoDirectory < 2.8.194 - Unauthenticated Non-Public Listing Disclosure via Marker Popup REST Endpoint
Newly collected advisory
CVE-2026-113490
Assessment context
Newly collected advisory; observed by ChangeIntel, not the original publication date.
Weekly briefing
Week 43 · 19 Oct – 25 Oct 2026 UTC · assess the changes, then plan the next dates.
All dated changes in this period
1120 source records · 1005 groupsSecurityGeoDirectory < 2.8.194 - Unauthenticated Non-Public Listing Disclosure via Recently Viewed Listings AJAX Action
GeoDirectory < 2.8.194 - Unauthenticated Non-Public Listing Disclosure via Recently Viewed Listings AJAX Action
Newly collected advisory
CVE-2026-113492
Assessment context
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityHCL BigFix Platform is affected by security vulnerability around intermediate CA certificate bundle (CVE ID)
HCL BigFix Platform is affected by security vulnerability around intermediate CA certificate bundle (CVE ID)
Newly collected advisory
CVE-2026-108013
Assessment context
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityHID: alps: fix use-after-free on input2 registration failure
HID: alps: fix use-after-free on input2 registration failure
Advisory content revised
CVE-2026-98501
Assessment context
Advisory content revised; observed by ChangeIntel, not the original publication date.
SecurityHID: steam: Rearrange teardown sequence
HID: steam: Rearrange teardown sequence
Advisory content revised
CVE-2026-98945
Assessment context
Advisory content revised; observed by ChangeIntel, not the original publication date.
SecurityHID: steam: Refactor registration
HID: steam: Refactor registration
Advisory content revised
CVE-2026-98944
Assessment context
Advisory content revised; observed by ChangeIntel, not the original publication date.
SecurityHID: wacom: fix OOB read in wacom_wac_pen_serial_enforce()
HID: wacom: fix OOB read in wacom_wac_pen_serial_enforce()
Advisory content revised
CVE-2026-98499
Assessment context
Advisory content revised; observed by ChangeIntel, not the original publication date.
SecurityIDOR: User reads and modifies findings from other people's projects
IDOR: User reads and modifies findings from other people's projects
Newly collected advisory
CVE-2026-115998
Assessment context
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityInternScience InternAgent LoRA Loading experiment.py train inclusion of functionality from untrusted control sphere
InternScience InternAgent LoRA Loading experiment.py train inclusion of functionality from untrusted control sphere
Newly collected advisory
CVE-2026-115802
Assessment context
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityKVM: SEV: Do cache maintenance on the source VM during intra-host migration
KVM: SEV: Do cache maintenance on the source VM during intra-host migration
Advisory content revised
CVE-2026-98471
Assessment context
Advisory content revised; observed by ChangeIntel, not the original publication date.
SecurityKVM: arm64: Fix AArch32 DBGBXVR<n> handling
KVM: arm64: Fix AArch32 DBGBXVR<n> handling
Advisory content revised
CVE-2026-98469
Assessment context
Advisory content revised; observed by ChangeIntel, not the original publication date.
SecurityKVM: arm64: Transfer the hyp stack pages out of the host stage-2
KVM: arm64: Transfer the hyp stack pages out of the host stage-2
Advisory content revised
CVE-2026-98466
Assessment context
Advisory content revised; observed by ChangeIntel, not the original publication date.
SecurityKVM: arm64: nv: Delay freeing of shadow S2 structures until VM destruction
KVM: arm64: nv: Delay freeing of shadow S2 structures until VM destruction
Advisory content revised
CVE-2026-98440
Assessment context
Advisory content revised; observed by ChangeIntel, not the original publication date.
SecurityKVM: arm64: nv: Fix life cycle of the nested_mmus array
KVM: arm64: nv: Fix life cycle of the nested_mmus array
Advisory content revised
CVE-2026-98927
Assessment context
Advisory content revised; observed by ChangeIntel, not the original publication date.
SecurityKVM: x86: Use active memslots for the per-vCPU MMIO cache
KVM: x86: Use active memslots for the per-vCPU MMIO cache
Advisory content revised
CVE-2026-99082
Assessment context
Advisory content revised; observed by ChangeIntel, not the original publication date.
SecurityMAS Videos <= 1.3.4 - Subscriber+ Arbitrary Post Deletion via delete_video/delete_playlist
MAS Videos <= 1.3.4 - Subscriber+ Arbitrary Post Deletion via delete_video/delete_playlist
Newly collected advisory
CVE-2026-107907
Assessment context
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityMongoDB Compass trusts certificates issued by recoverable eMudhra intermediate CAs
MongoDB Compass trusts certificates issued by recoverable eMudhra intermediate CAs
Newly collected advisory
CVE-2026-115929
Assessment context
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityNews Kit Addons For Elementor < 1.4.9 - Subscriber+ Plugin Installation and Activation via nekit_install_importer
News Kit Addons For Elementor < 1.4.9 - Subscriber+ Plugin Installation and Activation via nekit_install_importer
Newly collected advisory
CVE-2026-97352
Assessment context
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityNews Kit Addons For Elementor <= 1.4.7 - Subscriber+ Arbitrary Post Meta Update via nekit_update_mega_menu_form
News Kit Addons For Elementor <= 1.4.7 - Subscriber+ Arbitrary Post Meta Update via nekit_update_mega_menu_form
Newly collected advisory
CVE-2026-97353
Assessment context
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityOracle Database / Oracle E-Business Suite / Oracle Java / Oracle WebLogic Server2 source records
Security advisory · 2 entries
- Oracle Security Alert CVE-2026-114820
Security advisory · Oracle security alert directory
- Oracle Security Alert for CVE-2026-114820
Security news · Oracle Security Alerts
SecurityPixel Tag Manager for WooCommerce < 2.2.3 - Contributor+ Stored XSS via Google Tag Manager Container ID
Pixel Tag Manager for WooCommerce < 2.2.3 - Contributor+ Stored XSS via Google Tag Manager Container ID
Newly collected advisory
CVE-2026-105199
Assessment context
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityRISC-V: KVM: Serialize IMSIC attributes with vCPU migration
RISC-V: KVM: Serialize IMSIC attributes with vCPU migration
Advisory content revised
CVE-2026-98465
Assessment context
Advisory content revised; observed by ChangeIntel, not the original publication date.
SecurityScada-LTS AmCharts Data API AmChartValuesAPI.java HttpServletRequest.getParameter authorization
Scada-LTS AmCharts Data API AmChartValuesAPI.java HttpServletRequest.getParameter authorization
Newly collected advisory
CVE-2026-115803
Assessment context
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityStored XSS in the “Notes” field of project checklists
Stored XSS in the “Notes” field of project checklists
Newly collected advisory
CVE-2026-115993
Assessment context
Newly collected advisory; observed by ChangeIntel, not the original publication date.
Groups collect records about the same product or named security topic on one UTC date. Open a record for its source and history; grouping alone does not establish a shared cause or impact.