No access to your tenant or devices. Every item links to its source. What this means
Week 43 · 19 Oct – 25 Oct 2026 UTC · assess the changes, then plan the next dates.
SecurityWeb::Simple versions before 0.035 for Perl allocate a buffer sized by the Content-Length header for urlencoded body parameters
Newly collected advisory
CVE-2026-114629
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityWordPress Newsletters plugin <= 4.18.1 - PHP Object Injection vulnerability
Newly collected advisory
CVE-2026-94075
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityWordPress Newsletters plugin <= 4.18.1 - SQL Injection vulnerability
Newly collected advisory
CVE-2026-111402
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityWordPress Paytium plugin <= 5.0.5 - PHP Object Injection vulnerability
Newly collected advisory
CVE-2026-114196
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityWordPress Product Filter by WBW plugin <= 3.4.6 - SQL Injection vulnerability
Newly collected advisory
CVE-2026-112866
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityWordPress Relevanssi plugin <= 4.28.4 - PHP Object Injection vulnerability
Newly collected advisory
CVE-2026-114704
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityWordPress UPI QR Code Payment Gateway for WooCommerce plugin <= 1.6.3 - Broken Access Control vulnerability
Newly collected advisory
CVE-2026-114191
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityWordPress WpEvently plugin <= 5.7.8 - Broken Access Control vulnerability
Newly collected advisory
CVE-2026-114192
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityXiaozhi-esp32-server before 0.9.8 IDOR via device address-book endpoint
Newly collected advisory
CVE-2026-116017
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityaBlocks <= 2.17.0 - Authenticated (Contributor+) Privilege Escalation to 'roleSlug' Block Attribute
Newly collected advisory
CVE-2026-110018
Newly collected advisory; observed by ChangeIntel, not the original publication date.
Securitybtrfs: fix xattr replace when multiple xattrs are packed in the same item
Source changes critical severity rating
CVE-2026-98959
Source changes critical severity rating; observed by ChangeIntel, not the original publication date.
Securityipv4: free inet_opt and ireq_opt after an RCU grace period
Source changes critical severity rating
CVE-2026-98432
Source changes critical severity rating; observed by ChangeIntel, not the original publication date.
Securitynet/mlx5e: Prevent stale XSK buffer release on MPWQE refill retry
Source changes critical severity rating
CVE-2026-99078
Source changes critical severity rating; observed by ChangeIntel, not the original publication date.
Securitynet/mlx5e: Prevent stale XSK buffer release on refill retry
Source changes critical severity rating
CVE-2026-99079
Source changes critical severity rating; observed by ChangeIntel, not the original publication date.
Securitynet: openvswitch: conntrack: fix helper UAF due to extensions realloc
Source changes critical severity rating
CVE-2026-98490
Source changes critical severity rating; observed by ChangeIntel, not the original publication date.
Securitynfsd: fix XDR padding calculation in ff_encode_getdeviceinfo
Affected-version evidence changed
CVE-2026-89673
Affected-version evidence changed; observed by ChangeIntel, not the original publication date.
Securityopen62541 1.5.0 before 1.5.7 Integer Overflow Heap Buffer Overflow via Custom DataType
Newly collected advisory
CVE-2026-116014
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityphpIPAM Rack Link Creation show-rack-popup.php create_rack_link cross site scripting
Newly collected advisory
CVE-2026-115982
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityphpIPAM index.php cross site scripting
Newly collected advisory
CVE-2026-115981
Newly collected advisory; observed by ChangeIntel, not the original publication date.
Securitysctp: discard the rest of the packet on a stale-cookie error
Source changes critical severity rating
CVE-2026-98548
Source changes critical severity rating; observed by ChangeIntel, not the original publication date.
Securitytcp: prevent collapsing skbs across boundary in rtx queue
Source changes critical severity rating
CVE-2026-98549
Source changes critical severity rating; observed by ChangeIntel, not the original publication date.
Securityyudao-cloud through 2026.09 Data Permission Bypass via data-permission-enable Header
Newly collected advisory
CVE-2026-116016
Newly collected advisory; observed by ChangeIntel, not the original publication date.
Securityyudao-cloud through 2026.09 IDOR via after-sale-log list endpoint
Newly collected advisory
CVE-2026-116015
Newly collected advisory; observed by ChangeIntel, not the original publication date.
CommunityAskWoody
Community post · AskWoody
Groups collect records about the same product or named security topic on one UTC date. Open a record for its source and history; grouping alone does not establish a shared cause or impact.