No access to your tenant or devices. Every item links to its source. What this means
Week 44 · 26 Oct – 26 Oct 2026 UTC · assess the changes, then plan the next dates.
SecurityOpenssh: double free in red hat enterprise linux versions of openssh dh-gex client path during fips known-group validation leads to client-side denial of service
Affected-version evidence changed
CVE-2026-55653
Affected-version evidence changed; observed by ChangeIntel, not the original publication date.
SecurityOpenssh: local mitm of x11 forwarding via abstract unix socket pre-binding in red hat enterprise linux openssh client versions
Affected-version evidence changed
CVE-2026-55655
Affected-version evidence changed; observed by ChangeIntel, not the original publication date.
SecurityQuantGeekDev docker-mcp docker_executor.py _build_windows_command os command injection
Newly collected advisory
CVE-2026-116102
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityRace condition in tempfile.TemporaryDirectory cleanup allows deleting files outside the temporary directory
Affected-version evidence changed
CVE-2026-12345
Affected-version evidence changed; observed by ChangeIntel, not the original publication date.
SecuritySony Neural Network Libraries Encode Param encode_decode_param.py load_param_in_txt code injection
Newly collected advisory
CVE-2026-116103
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecuritySony Neural Network Libraries NNP Converter utils.py func_set_nnabla_version_decorate code injection
Newly collected advisory
CVE-2026-116104
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecuritySteelRaven7 Ravenfield RFL Custom Map Handler/RFLD Custom Map cacheCoverPoints deserialization
Newly collected advisory
CVE-2026-116098
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityYoosee GM8135S Camera Live UDP H.264 Video Stream npc cleartext transmission
Newly collected advisory
CVE-2026-116114
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityYoosee GM8135S Camera Secure Boot signature verification
Newly collected advisory
CVE-2026-116116
Newly collected advisory; observed by ChangeIntel, not the original publication date.
SecurityYoosee GM8135S Camera WiFi Configuration wpa_supplicantX.conf initialization
Newly collected advisory
CVE-2026-116115
Newly collected advisory; observed by ChangeIntel, not the original publication date.
Securitycontinuedev Continue MCP Server Transport ConfigHandler.ts MCPManagerSingleton.setConnections os command injection
Newly collected advisory
CVE-2026-116109
Newly collected advisory; observed by ChangeIntel, not the original publication date.
Securityggml-org llama.cpp Pocket-TTS pockettts-gen.cpp list_pockettts_state_slots out-of-bounds write
Newly collected advisory
CVE-2026-116096
Newly collected advisory; observed by ChangeIntel, not the original publication date.
Securitygougucms User Level Level.php add cross site scripting
Newly collected advisory
CVE-2026-116100
Newly collected advisory; observed by ChangeIntel, not the original publication date.
Securityitsourcecode Online Cake Ordering System deletetransac.php sql injection
Newly collected advisory
CVE-2026-116101
Newly collected advisory; observed by ChangeIntel, not the original publication date.
Securityopenbq-org OpenBB Local API Server api_settings.py access control
Newly collected advisory
CVE-2026-116108
Newly collected advisory; observed by ChangeIntel, not the original publication date.
Securitytar filter allows writing outside destination via empty-named symlink
Affected-version evidence changed
CVE-2026-114583
Affected-version evidence changed; observed by ChangeIntel, not the original publication date.
ReleasesDefender
New version · Microsoft Defender Antivirus releases
SecurityAn issue in Systrome Validation & Certification 1.0 allows an attacker to cause a denial of service via the t URL parameter in the qrcode_auth.html component
Advisory content revised
CVE-2026-107079
Advisory content revised; observed by ChangeIntel, not the original publication date.
SecurityMalicious code in @ppa-web-components/ppa-banner (npm)
Advisory content revised
MAL-2026-18272
Advisory content revised; observed by ChangeIntel, not the original publication date.
SecurityMalicious code in @ppa-web-components/ppa-builder (npm)
Advisory content revised
MAL-2026-18273
Advisory content revised; observed by ChangeIntel, not the original publication date.
SecurityMalicious code in @ppa-web-components/ppa-headerfooter (npm)
Advisory content revised
MAL-2026-18274
Advisory content revised; observed by ChangeIntel, not the original publication date.
SecurityMalicious code in @ppa-web-components/ppa-hotel-collection (npm)
Advisory content revised
MAL-2026-18275
Advisory content revised; observed by ChangeIntel, not the original publication date.
SecurityMalicious code in @ppa-web-components/ppa-navigation (npm)
Advisory content revised
MAL-2026-18286
Advisory content revised; observed by ChangeIntel, not the original publication date.
SecurityMalicious code in @ppa-web-components/ppa-searchform (npm)
Advisory content revised
MAL-2026-18287
Advisory content revised; observed by ChangeIntel, not the original publication date.
Groups collect records about the same product or named security topic on one UTC date. Open a record for its source and history; grouping alone does not establish a shared cause or impact.