Infinity for Reddit through 8.3.4 OAuth Login CSRF via LoginChromeCustomTabActivity
Newly collected advisory
CVE-2026-116072
Assessment context
Newly collected advisory; observed by ChangeIntel, not the original publication date.
No access to your tenant or devices. Every item links to its source. What this means
Week 43 · 19 Oct – 25 Oct 2026 UTC · assess the changes, then plan the next dates.
SecurityInfinity for Reddit through 8.3.4 OAuth Login CSRF via LoginChromeCustomTabActivity
Newly collected advisory
CVE-2026-116072
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityInstaWP Connect < 0.1.4.2 - Authenticated Plugin Settings Update via instawp_update_settings
Newly collected advisory
CVE-2026-114743
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityKodCloud KodExplorer Online Editor Save Endpoint editor.class.php unrestricted upload
Newly collected advisory
CVE-2026-116057
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityKodCloud KodExplorer Remote Download web.function.php request_url_safe server-side request forgery
Newly collected advisory
CVE-2026-116056
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityLeon before commit 50df142 Path Traversal via /download model Command
Newly collected advisory
CVE-2026-116073
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityLinkStackOrg LinkStack cross-site request forgery
Newly collected advisory
CVE-2026-116052
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityLoading a through relationship with a limit of 1 in Ash ignores the through path and returns unrelated destination records
Newly collected advisory
CVE-2026-114214
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityMalicious code in @blueskydataplatform/shared-ui (npm)
Affected-version evidence changed
MAL-2026-18212
Affected-version evidence changed; observed by ChangeIntel, not the original publication date.
SecurityMalicious code in @capsense/ccx-welcome-page (npm)
Newly collected advisory
MAL-2026-18294
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityMalicious code in @capsense/core-ui (npm)
Newly collected advisory
MAL-2026-18295
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityMalicious code in @cecm-web-sdk/core (npm)
Affected-version evidence changed
MAL-2026-18213
Affected-version evidence changed; observed by ChangeIntel, not the original publication date.
SecurityMalicious code in @drone-js-ext/core (npm)
Newly collected advisory
MAL-2026-18276
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityMalicious code in @drone-js-ext/vip-badge (npm)
Newly collected advisory
MAL-2026-18277
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityMalicious code in @eforms/forms-api (npm)2 source records
Affected-version evidence changed
MAL-2026-18252
Affected-version evidence changed; observed by ChangeIntel, not the original publication date.
Newly collected advisory
MAL-2026-18252
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityMalicious code in @factiii/runner (npm)2 source records
Affected-version evidence changed
MAL-2026-18204
Affected-version evidence changed; observed by ChangeIntel, not the original publication date.
Affected-version evidence changed
MAL-2026-18204
Affected-version evidence changed; observed by ChangeIntel, not the original publication date.
SecurityMalicious code in @factoryz/apollo (npm)
Newly collected advisory
MAL-2026-18278
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityMalicious code in @fmr-ap153177/apex-kit-icons (npm)
Newly collected advisory
MAL-2026-18279
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityMalicious code in @futurae-public/adaptive-js (npm)
Newly collected advisory
MAL-2026-18280
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityMalicious code in @generic-means/ing-feat-scanner-libs (npm)
Newly collected advisory
MAL-2026-18281
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityMalicious code in @greenlake/common-context (npm)
Newly collected advisory
MAL-2026-18282
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityMalicious code in @greenlake/session (npm)
Newly collected advisory
MAL-2026-18283
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityMalicious code in @jm-telefonica/multibrand-components (npm)
Newly collected advisory
MAL-2026-18284
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityMalicious code in @postex/common (npm)
Newly collected advisory
MAL-2026-18285
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityMalicious code in @ppa-web-components/ppa-banner (npm)2 source records
Newly collected advisory
MAL-2026-18272
Newly collected advisory; observed by ChangeIntel, not the original publication date.
Affected-version evidence changed
MAL-2026-18272
Affected-version evidence changed; observed by ChangeIntel, not the original publication date.
Groups collect records about the same product or named security topic on one UTC date. Open a record for its source and history; grouping alone does not establish a shared cause or impact.