krupalshah EmployeeRecruitmentSystem Registration registerform1.php mysql_query sql injection
Newly collected advisory
CVE-2026-116048
Assessment context
Newly collected advisory; observed by ChangeIntel, not the original publication date.
Weekly briefing
Week 43 · 19 Oct – 25 Oct 2026 UTC · assess the changes, then plan the next dates.
All dated changes in this period
1120 source records · 1005 groupsSecuritymansi-k Restaurant_IMS lsmodal.php mysqli_connect sql injection
mansi-k Restaurant_IMS lsmodal.php mysqli_connect sql injection
Newly collected advisory
CVE-2026-115999
Assessment context
Newly collected advisory; observed by ChangeIntel, not the original publication date.
Securityonyx-dot-app Onyx PreviewTab.tsx cross site scripting
onyx-dot-app Onyx PreviewTab.tsx cross site scripting
Newly collected advisory
CVE-2026-116004
Assessment context
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityphpMyFAQ before 4.1.10 Authorization Bypass via /api/faq/create openQuestionID
phpMyFAQ before 4.1.10 Authorization Bypass via /api/faq/create openQuestionID
Newly collected advisory
CVE-2026-116183
Assessment context
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityphpMyFAQ before 4.1.10 SSRF via PDF Export Image Fetching
phpMyFAQ before 4.1.10 SSRF via PDF Export Image Fetching
Newly collected advisory
CVE-2026-116182
Assessment context
Newly collected advisory; observed by ChangeIntel, not the original publication date.
Securitypig-mesh pig SqlFilterArgumentResolver.java orderItem.getColumn sql injection
pig-mesh pig SqlFilterArgumentResolver.java orderItem.getColumn sql injection
Newly collected advisory
CVE-2026-115997
Assessment context
Newly collected advisory; observed by ChangeIntel, not the original publication date.
Securityprasathmani TinyFileManager Remote URL File Upload tinyfilemanager.php unrestricted upload
prasathmani TinyFileManager Remote URL File Upload tinyfilemanager.php unrestricted upload
Newly collected advisory
CVE-2026-116044
Assessment context
Newly collected advisory; observed by ChangeIntel, not the original publication date.
Securityrclone 1.55.0 before 1.75.2 selfupdate Signature Verification Bypass via SHA256SUMS
rclone 1.55.0 before 1.75.2 selfupdate Signature Verification Bypass via SHA256SUMS
Newly collected advisory
CVE-2026-116189
Assessment context
Newly collected advisory; observed by ChangeIntel, not the original publication date.
Securityrclone from 1.37 before 1.74.2 SSRF via --rc-serve scheme-relative remote roots
rclone from 1.37 before 1.74.2 SSRF via --rc-serve scheme-relative remote roots
Newly collected advisory
CVE-2026-116192
Assessment context
Newly collected advisory; observed by ChangeIntel, not the original publication date.
Securityrclone serve s3 1.75.0 before 1.75.2 Memory Limit Bypass via Multipart Overflow
rclone serve s3 1.75.0 before 1.75.2 Memory Limit Bypass via Multipart Overflow
Newly collected advisory
CVE-2026-116188
Assessment context
Newly collected advisory; observed by ChangeIntel, not the original publication date.
Securityrclone v1.56.0 before v1.75.2 WebDAV Credential Header Leak on Redirect
rclone v1.56.0 before v1.75.2 WebDAV Credential Header Leak on Redirect
Newly collected advisory
CVE-2026-116190
Assessment context
Newly collected advisory; observed by ChangeIntel, not the original publication date.
Securityrotki before 1.44.2 Weak Key Derivation for Premium Cloud Backup Encryption
rotki before 1.44.2 Weak Key Derivation for Premium Cloud Backup Encryption
Newly collected advisory
CVE-2026-116071
Assessment context
Newly collected advisory; observed by ChangeIntel, not the original publication date.
Securitysmg-project smg llm-multimodal jpeg_turbo.rs decode_jpeg_rgb memory allocation
smg-project smg llm-multimodal jpeg_turbo.rs decode_jpeg_rgb memory allocation
Newly collected advisory
CVE-2026-116095
Assessment context
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityvLLM 0.10.2 before 0.25.0 DoS via Nemotron-VL Processor Decompression-Bomb Guard Bypass
vLLM 0.10.2 before 0.25.0 DoS via Nemotron-VL Processor Decompression-Bomb Guard Bypass
Newly collected advisory
CVE-2026-116177
Assessment context
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityvLLM 0.18.0 before 0.31.0 Memory Exhaustion via media_io_kwargs num_frames Override
vLLM 0.18.0 before 0.31.0 Memory Exhaustion via media_io_kwargs num_frames Override
Newly collected advisory
CVE-2026-116179
Assessment context
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityvLLM 0.19.0 before 0.24.0 Audio Decompression Bomb DoS via Chat Completions
vLLM 0.19.0 before 0.24.0 Audio Decompression Bomb DoS via Chat Completions
Newly collected advisory
CVE-2026-116175
Assessment context
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityvLLM 0.20.0 before 0.30.0 DoS via /inference/v1/generate mm_placeholders
vLLM 0.20.0 before 0.30.0 DoS via /inference/v1/generate mm_placeholders
Newly collected advisory
CVE-2026-116178
Assessment context
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityvLLM 0.20.1 before 0.29.0 DoS and GPU Out-of-Bounds Write via stop_token_ids
vLLM 0.20.1 before 0.29.0 DoS and GPU Out-of-Bounds Write via stop_token_ids
Newly collected advisory
CVE-2026-116181
Assessment context
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityvLLM 0.22.0 before 0.24.0 Denial of Service via Rust gRPC Generate
vLLM 0.22.0 before 0.24.0 Denial of Service via Rust gRPC Generate
Newly collected advisory
CVE-2026-116174
Assessment context
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityvLLM 0.22.0 before 0.24.0 Denial of Service via gRPC output_candidates.token_ids
vLLM 0.22.0 before 0.24.0 Denial of Service via gRPC output_candidates.token_ids
Newly collected advisory
CVE-2026-116173
Assessment context
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityvLLM 0.22.0 before 0.24.0 DoS via Rust gRPC CandidateTokens.top_n
vLLM 0.22.0 before 0.24.0 DoS via Rust gRPC CandidateTokens.top_n
Newly collected advisory
CVE-2026-116172
Assessment context
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityvLLM 0.9.2 before 0.24.0 SSRF via X-Request-Id in P2pNcclConnector
vLLM 0.9.2 before 0.24.0 SSRF via X-Request-Id in P2pNcclConnector
Newly collected advisory
CVE-2026-116176
Assessment context
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityvLLM from 0.8.5 before 0.31.0 Cross-Tenant DoS via Uninitialized LogprobsTensors
vLLM from 0.8.5 before 0.31.0 Cross-Tenant DoS via Uninitialized LogprobsTensors
Newly collected advisory
CVE-2026-116180
Assessment context
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityMalicious code in @fcsmc/commercial-analytics (npm)
Malicious code in @fcsmc/commercial-analytics (npm)
Advisory content revised
MAL-2026-17928
Assessment context
Advisory content revised; observed by ChangeIntel, not the original publication date.
Groups collect records about the same product or named security topic on one UTC date. Open a record for its source and history; grouping alone does not establish a shared cause or impact.