No access to your tenant or devices. Every item links to its source. What this means
Week 43 · 19 Oct – 25 Oct 2026 UTC · assess the changes, then plan the next dates.
SecurityAdvanced Custom Fields: Extended 0.9.2.7 - Unauthenticated Non-Administrator Account Takeover via Front-End User Update Action
Newly collected advisory
CVE-2026-94262
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityAdvanced Custom Fields: Extended < 0.9.2.8 - Unauthenticated RCE via Front-End Post Update Action
Newly collected advisory
CVE-2026-94267
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityAesGcmCryptor.Open passes attacker-controlled nonce to cipher.AEAD.Open without length check, causing panic on wrong-size IV
Newly collected advisory
CVE-2026-89312
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityAider through 0.86.2 Command Execution via Repository .aider.conf.yml Settings
Newly collected advisory
CVE-2026-115726
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityAn OS command injection vulnerability in the /htdocs/web/diagnostic.php endpoint of D-Link DAP1160L A1_FW101WWb04 allows attackers to execute arbitrary commands via injecting arbitrary shell metacharacters.
Newly collected advisory
CVE-2026-52356
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityAn issue in @justice8096/sagemath-mcp-server 1.0.1 allows a remote attacker to execute arbitrary code via the escapeShellString and sanitizeCode functions.
Newly collected advisory
CVE-2026-106763
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityAn issue in @rog0x/mcp-docker-tools 1.0.1 allows a remote attacker to execute arbitrary code via the handleImageList function.
Newly collected advisory
CVE-2026-106765
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityAn issue in @rog0x/mcp-git-tools 1.0.1 allows a remote attacker to execute arbitrary code via the resolveBaseBranch function.
Newly collected advisory
CVE-2026-106764
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityAn issue in Nitro Software, Inc Nitro PDF Pro for macOS v.14.7 allows a local attacker to execute arbitrary code via a crafted PDF
Newly collected advisory
CVE-2025-45528
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityAnti-Spam by CleanTalk <= 6.89.1 - Unauthenticated Stored Cross-Site Scripting via 'user_email' Registration Parameter
Newly collected advisory
CVE-2026-109198
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityAuthentication Bypass via IP Spoofing in CGM CLININET rsyncd
Newly collected advisory
CVE-2025-30052
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityAuthentication Source Verification Issue in Okta Access Gateway
Newly collected advisory
CVE-2026-115546
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityAutotune: kruize/autotune: kruize/autotune: datasources credential disclosure
Newly collected advisory
CVE-2026-110975
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityBaserow 2.2.0 through 2.3.3 - SQL injection in formula index() JSONB array extraction2 source records
Advisory content revised
CVE-2026-19754
Advisory content revised; observed by ChangeIntel, not the original publication date.
Advisory content revised
CVE-2026-19754
Advisory content revised; observed by ChangeIntel, not the original publication date.
SecurityBlueSpiceUserManager: Missing authorization in REST endpoints for blocking and unblocking users
Newly collected advisory
CVE-2026-25716
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityBluetooth: ISO: Reject concurrent BIS listener setup
Newly collected advisory
CVE-2026-99013
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityBluetooth: ISO: Serialize concurrent connect calls
Newly collected advisory
CVE-2026-99012
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityBluetooth: RFCOMM: Fix NULL tty_dev dereference in rfcomm_dev_shutdown
Newly collected advisory
CVE-2026-99008
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityBluetooth: RFCOMM: connect the session socket without rfcomm_mutex
Newly collected advisory
CVE-2026-99009
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityBluetooth: RFCOMM: free the skb when the DLC has no owner
Newly collected advisory
CVE-2026-99010
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityBluetooth: SCO: serialise sco_conn lifetime against sco_recv_scodata()
Newly collected advisory
CVE-2026-99011
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityBluetooth: hci_sock: Serialize dead-device detachment
Newly collected advisory
CVE-2026-99015
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityBluetooth: hci_sync: Fix command skb lifetime during scan setup
Newly collected advisory
CVE-2026-99014
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityCacti: Authenticated RCE on Data Input
Newly collected advisory
CVE-2026-39902
Newly collected advisory; observed by ChangeIntel, not the original publication date.
Groups collect records about the same product or named security topic on one UTC date. Open a record for its source and history; grouping alone does not establish a shared cause or impact.