Security

Microsoft security updates and public advisory evidence: affected products, fixing updates, exploitation and source coverage.

Security Update Guide CISA KEV

Advisory catalog

Public source statements across vendors. Explicit aliases connect records; each publisher keeps its own state, severity and affected-version evidence.

Collected statements

698800 source statements · aliases may refer to the same vulnerability

CVE-2026-101090Published

Nezha through 2.2.3 Host Header Injection via OAuth2 redirect_uri

cve-program ·

Vendor product: nezha

CVSS 4.0 9.3 · CVSS 3.1 9.8Source modified 28 Sep 2026Recorded 23 Oct 2026

CVE-2026-100881Published

zhistaredu StarTraining application.yml cross site scripting

cve-program ·

Vendor product: StarTraining

CVSS 4.0 2.1 · CVSS 3.1 2.6 · CVSS 3.0 2.6 · CVSS 2.0 2.1Source modified 28 Sep 2026Recorded 23 Oct 2026

CVE-2026-100899Published

DevaslanPHP project-management Timesheet Dashboard MonthlyReport.php whereRaw sql injection

cve-program ·

Vendor product: project-management

CVSS 4.0 5.3 · CVSS 3.1 6.3 · CVSS 3.0 6.3 · CVSS 2.0 6.5Source modified 28 Sep 2026Recorded 23 Oct 2026

CVE-2026-100896Published

TOTOLINK N150RT Web Management formWlSiteSurvey system os command injection

cve-program ·

Vendor product: N150RT

CVSS 4.0 9.4 · CVSS 3.1 9.9 · CVSS 3.0 9.9 · CVSS 2.0 9.0Source modified 28 Sep 2026Recorded 23 Oct 2026

CVE-2026-100893Published

Privoce VoceChat Server open_graphic_parse Endpoint resource.rs fetch server-side request forgery

cve-program ·

Vendor product: VoceChat Server

CVSS 4.0 6.9 · CVSS 3.1 7.3 · CVSS 3.0 7.3 · CVSS 2.0 7.5Source modified 28 Sep 2026Recorded 23 Oct 2026

CVE-2026-100890Published

Trusted Domain Project OpenDMARC SPF Parser opendmarc_spf.c opendmarc_spf_ipv6_explode null pointer dereference

cve-program ·

Vendor product: OpenDMARC

CVSS 4.0 6.9 · CVSS 3.1 5.3 · CVSS 3.0 5.3 · CVSS 2.0 5.0Source modified 28 Sep 2026Recorded 23 Oct 2026

CVE-2026-100884Published

Krayin laravel-crm attachment-download Endpoint acl.php resource injection

cve-program ·

Vendor product: laravel-crm

CVSS 4.0 5.3 · CVSS 3.1 4.3 · CVSS 3.0 4.3 · CVSS 2.0 4.0Source modified 28 Sep 2026Recorded 23 Oct 2026

CVE-2026-100887Published

amirsanni Mini-Inventory-and-Sales-Management-System Database Query Builder DB_query_builder.php order_by sql injection

cve-program ·

Vendor product: Mini-Inventory-and-Sales-Management-System

CVSS 4.0 5.3 · CVSS 3.1 6.3 · CVSS 3.0 6.3 · CVSS 2.0 6.5Source modified 28 Sep 2026Recorded 23 Oct 2026

CVE-2026-101011Published

aaPanel BaoTa Domain domainMod.py get_domain_status sql injection

cve-program ·

Vendor product: BaoTa

CVSS 4.0 5.1 · CVSS 3.1 4.7 · CVSS 3.0 4.7 · CVSS 2.0 5.8Source modified 28 Sep 2026Recorded 23 Oct 2026

CVE-2026-100898Published

DevaslanPHP project-management Timesheet Dashboard ActivitiesReport.php whereRaw sql injection

cve-program ·

Vendor product: project-management

CVSS 4.0 5.3 · CVSS 3.1 6.3 · CVSS 3.0 6.3 · CVSS 2.0 6.5Source modified 28 Sep 2026Recorded 23 Oct 2026

CVE-2026-101008Published

aaPanel BaoTa File Merge files.py merge_split_file command injection

cve-program ·

Vendor product: BaoTa

CVSS 4.0 9.4 · CVSS 3.1 9.1 · CVSS 3.0 9.1 · CVSS 2.0 8.3Source modified 28 Sep 2026Recorded 23 Oct 2026

CVE-2026-101005Published

October CMS SSRF Protection ResizeImages.php validateExternalImageHost server-side request forgery

cve-program ·

Vendor product: October CMS

CVSS 4.0 6.9 · CVSS 3.1 7.3 · CVSS 3.0 7.3 · CVSS 2.0 7.5Source modified 28 Sep 2026Recorded 23 Oct 2026

CVE-2026-101002Published

Netcore NBR200V2 Tools Ping network_tools system os command injection

cve-program ·

Vendor product: NBR200V2

CVSS 4.0 9.4 · CVSS 3.1 9.9 · CVSS 3.0 9.9 · CVSS 2.0 9.0Source modified 28 Sep 2026Recorded 23 Oct 2026

CVE-2026-100909Published

OctoberCMS ResizeImages.php getSourcePathForResize server-side request forgery

cve-program ·

Vendor product: OctoberCMS

CVSS 4.0 6.9 · CVSS 3.1 7.3 · CVSS 3.0 7.3 · CVSS 2.0 7.5Source modified 28 Sep 2026Recorded 23 Oct 2026

CVE-2026-100906Published

Eyeplus ONVIF Device GetUsers information disclosure

cve-program ·

Vendor product: Eyeplus

CVSS 4.0 6.9 · CVSS 3.1 5.3 · CVSS 3.0 5.3 · CVSS 2.0 5.0Source modified 28 Sep 2026Recorded 23 Oct 2026

CVE-2026-101066Published

dbgate Archive Link Creation archive.js createLink path traversal

cve-program ·

Vendor product: dbgate

CVSS 4.0 6.9 · CVSS 3.1 7.3 · CVSS 3.0 7.3 · CVSS 2.0 7.5Source modified 28 Sep 2026Recorded 23 Oct 2026

CVE-2026-101053Published

Thinkware U3000 TCP Service wpa_supplicant.conf PUT_FILE access control

cve-program ·

Vendor product: U3000

CVSS 4.0 6.9 · CVSS 3.1 7.3 · CVSS 3.0 7.3 · CVSS 2.0 7.5Source modified 28 Sep 2026Recorded 23 Oct 2026

CVE-2026-100901Published

athlon1600 youtube-downloader stream.php stream server-side request forgery

cve-program ·

Vendor product: youtube-downloader

CVSS 4.0 6.9 · CVSS 3.1 7.3 · CVSS 3.0 7.3 · CVSS 2.0 7.5Source modified 28 Sep 2026Recorded 23 Oct 2026

CVE-2026-101039Published

FAST FAC1900R devdiscover Service copy_msg_element stack-based overflow

cve-program ·

Vendor product: FAC1900R

CVSS 4.0 10.0 · CVSS 3.1 10.0 · CVSS 3.0 10.0 · CVSS 2.0 10.0Source modified 28 Sep 2026Recorded 23 Oct 2026

CVE-2026-91839Published

Networkmanager-fortisslvpn: networkmanager-fortisslvpn: local privilege escalation to root via crlf injection in vpn profile credentials

cve-program ·

https://gitlab.gnome.org/GNOME/NetworkManager-fortisslvpn: network-manager-fortisslvpn

CVSS 3.1 7.8Source modified 28 Sep 2026Recorded 23 Oct 2026

CVE-2026-101036Published

FLB-Music FLB-Music-Player createParsedTrack.ts path.join path traversal

cve-program ·

Vendor product: FLB-Music-Player

CVSS 4.0 4.8 · CVSS 3.1 5.3 · CVSS 3.0 5.3 · CVSS 2.0 4.3Source modified 28 Sep 2026Recorded 23 Oct 2026

CVE-2026-91840Published

Networkmanager-vpnc: networkmanager-vpnc: local privilege escalation to root via newline injection in vpn username

cve-program ·

https://gitlab.gnome.org/GNOME/NetworkManager-vpnc: network-manager-vpnc

CVSS 3.1 7.8Source modified 28 Sep 2026Recorded 23 Oct 2026

CVE-2026-101017Published

Trusted Domain Project OpenDMARC opendmarc_policy.c strcasecmp exceptional condition

cve-program ·

Vendor product: OpenDMARC

CVSS 4.0 6.9 · CVSS 3.1 6.5 · CVSS 3.0 6.5 · CVSS 2.0 6.4Source modified 28 Sep 2026Recorded 23 Oct 2026

CVE-2026-91841Published

Networkmanager-vpnc: networkmanager-vpnc: incomplete fix for cve-2018-10900 allows root privilege escalation via ca-file path newline injection

cve-program ·

https://gitlab.gnome.org/GNOME/NetworkManager-vpnc: network-manager-vpnc

CVSS 3.1 7.8Source modified 28 Sep 2026Recorded 23 Oct 2026

CVE-2026-101014Published

Trusted Domain Project OpenDMARC DMARC Record opendmarc_util.c opendmarc_util_cleanup off-by-one

cve-program ·

Vendor product: OpenDMARC

CVSS 4.0 6.9 · CVSS 3.1 7.3 · CVSS 3.0 7.3 · CVSS 2.0 7.5Source modified 28 Sep 2026Recorded 23 Oct 2026

CVE-2026-85029Published

IBM Guardium Data Protection is affected by multiple vulnerabilities.

cve-program ·

Vendor product: Guardium Data Protection

CVSS 3.1 7.5Source modified 28 Sep 2026Recorded 23 Oct 2026

CVE-2026-100904Published

amirsanni mini-inventory-and-sales-management-system Items Management Items.php cross site scripting

cve-program ·

Vendor product: mini-inventory-and-sales-management-system

CVSS 4.0 5.1 · CVSS 3.1 3.5 · CVSS 3.0 3.5 · CVSS 2.0 4.0Source modified 28 Sep 2026Recorded 23 Oct 2026

CVE-2026-93647Published

Zimbra Collaboration Suite Classic Web Client Stored Cross-Site Scripting via Crafted Calendar COUNTER Message From Address

cve-program ·

Vendor product: Zimbra Collaboration Suite (ZCS)

CVSS 3.1 9.3Source modified 28 Sep 2026Recorded 23 Oct 2026

CVE-2026-84884Published

IBM Guardium Data Protection is affected by multiple vulnerabilities.

cve-program ·

Vendor product: Guardium Data Protection

CVSS 3.1 7.5Source modified 28 Sep 2026Recorded 23 Oct 2026

CVE-2026-84862Published

IBM Guardium Data Protection is affected by multiple vulnerabilities.

cve-program ·

Vendor product: Guardium Data Protection

CVSS 3.1 7.2Source modified 28 Sep 2026Recorded 23 Oct 2026

CVE-2026-100908Published

Eyeplus p2pcam HTTP stack-based overflow

cve-program ·

Vendor product: Eyeplus

CVSS 4.0 8.7 · CVSS 3.1 7.5 · CVSS 3.0 7.5 · CVSS 2.0 7.8Source modified 28 Sep 2026Recorded 23 Oct 2026

CVE-2026-101001Published

Netcore NBR200V2 Web Management network_tools eval os command injection

cve-program ·

Vendor product: NBR200V2

CVSS 4.0 10.0 · CVSS 3.1 10.0 · CVSS 3.0 10.0 · CVSS 2.0 10.0Source modified 28 Sep 2026Recorded 23 Oct 2026

CVE-2026-101004Published

notionnext-org NotionNext Authentication Guard cache.js cleanCache missing authentication

cve-program ·

Vendor product: NotionNext

CVSS 4.0 6.9 · CVSS 3.1 5.3 · CVSS 3.0 5.3 · CVSS 2.0 5.0Source modified 28 Sep 2026Recorded 23 Oct 2026

CVE-2026-101052Published

refly-ai refly JWT Token app.config.ts hard-coded credentials

cve-program ·

Vendor product: refly

CVSS 4.0 6.9 · CVSS 3.1 7.3 · CVSS 3.0 7.3 · CVSS 2.0 7.5Source modified 28 Sep 2026Recorded 23 Oct 2026

CVE-2026-78428Published

Flaw in Neuvector can result in one user receiving another user's authenticated session when multiple SSO login attempts occur concurrently

cve-program ·

Vendor product: neuvector

CVSS 4.0 8.8Source modified 28 Sep 2026Recorded 23 Oct 2026

CVE-2026-78427Published

Admission Control Bypass via Hardcoded Sidecar Image Exemption

cve-program ·

Vendor product: github.com/neuvector/neuvector

CVSS 4.0 5.3Source modified 28 Sep 2026Recorded 23 Oct 2026

CVE-2026-78425Published

SAML Audience Confusion Allows Cross-SP Authentication

cve-program ·

Vendor product: github.com/neuvector/neuvector

CVSS 4.0 7.6Source modified 28 Sep 2026Recorded 23 Oct 2026

CVE-2026-78426Published

Logout bypass via alternate JWT spelling

cve-program ·

Vendor product: neuvector

CVSS 4.0 2.0Source modified 28 Sep 2026Recorded 23 Oct 2026

GHSA-vw82-7fv8-r6gpPublished

Obot has an authorization bypass in /mcp-connect/{id} that allows any authenticated user to use any registered MCP server

osv · CVE-2026-101084 · GO-2026-5678

Go: github.com/obot-platform/obot

CRITICALSource modified 28 Sep 2026Recorded 24 Oct 2026

GO-2026-5678Published

Obot has an authorization bypass in /mcp-connect/{id} that allows any authenticated user to use any registered MCP server in github.com/obot-platform/obot

osv · CVE-2026-101084 · GHSA-vw82-7fv8-r6gp

Go: github.com/obot-platform/obot

Source modified 28 Sep 2026Recorded 24 Oct 2026

CVE-2026-101007Published

aaPanel BaoTa Database Backup database.py InputSql os command injection

cve-program ·

Vendor product: BaoTa

CVSS 4.0 9.3 · CVSS 3.1 8.4 · CVSS 3.0 8.4 · CVSS 2.0 8.3Source modified 28 Sep 2026Recorded 23 Oct 2026

CVE-2026-101010Published

aaPanel BaoTa data.py getData sql injection

cve-program ·

Vendor product: BaoTa

CVSS 4.0 5.1 · CVSS 3.1 4.7 · CVSS 3.0 4.7 · CVSS 2.0 5.8Source modified 28 Sep 2026Recorded 23 Oct 2026

CVE-2026-101013Published

mathurvishal CloudClassroom-PHP-Project updateresultdetails.php sql injection

cve-program ·

Vendor product: CloudClassroom-PHP-Project

CVSS 4.0 6.9 · CVSS 3.1 7.3 · CVSS 3.0 7.3 · CVSS 2.0 7.5Source modified 28 Sep 2026Recorded 23 Oct 2026

CVE-2026-101016Published

Trusted Domain Project OpenDMARC opendmarc_policy.c opendmarc_policy_parse_dmarc exceptional condition

cve-program ·

Vendor product: OpenDMARC

CVSS 4.0 6.9 · CVSS 3.1 6.5 · CVSS 3.0 6.5 · CVSS 2.0 6.4Source modified 28 Sep 2026Recorded 23 Oct 2026

GO-2023-2102Published

HTTP/2 rapid reset can cause excessive work in net/http

osv · BIT-golang-2023-39325 · CVE-2023-39325 · GHSA-4374-p667-p6c8

Go: stdlib · Go: golang.org/x/net

Source modified 28 Sep 2026Recorded 24 Oct 2026

CVE-2026-101035Published

aligungr UERANSIM nr-gnb encode.cpp DecodePlainMmMessage uncaught exception

cve-program ·

Vendor product: UERANSIM

CVSS 4.0 6.9 · CVSS 3.1 5.3 · CVSS 3.0 5.3 · CVSS 2.0 5.0Source modified 28 Sep 2026Recorded 23 Oct 2026

CVE-2026-101038Published

FAST FAC1200R MmtAtePrase stack-based overflow

cve-program ·

Vendor product: FAC1200R

CVSS 4.0 9.4 · CVSS 3.1 9.9 · CVSS 3.0 9.9 · CVSS 2.0 9.0Source modified 28 Sep 2026Recorded 23 Oct 2026

CVE-2025-68475Published

Fedify is a TypeScript library for building federated server apps powered by ActivityPub. Prior to versions 1.6.13, 1.7.14, 1.8.15, and 1.9.2, a Regular Expression Denial of Service (ReDoS) vulnerability exists in Fedify's document loader. …

nvd ·

CVSS 3.1 · [email protected] · Secondary 7.5Source modified 28 Sep 2026Recorded 25 Oct 2026

CVE-2025-40592Published

A vulnerability has been identified in Mendix Studio Pro 10 (All versions < V10.24.24 for Windows), Mendix Studio Pro 10 (All versions < V10.24.24 for Mac), Mendix Studio Pro 11 (All versions < V11.13.0 for Windows), Mendix Studio Pro 11 (A…

cve-program ·

Vendor product: Mendix Studio Pro 10 · Vendor product: Mendix Studio Pro 10 · Vendor product: Mendix Studio Pro 11

CVSS 3.1 6.1 · CVSS 4.0 4.6Source modified 28 Sep 2026Recorded 23 Oct 2026

CVE-2026-18950Published

Odh-dashboard: odh-dashboard: confused-deputy privilege escalation via unchecked roleref in rolebinding creation

cve-program ·

https://catalog.redhat.com/software/containers/: rhoai/odh-dashboard-rhel9 · https://catalog.redhat.com/software/containers/: rhoai/odh-dashboard-rhel9 · https://catalog.redhat.com/software/containers/: rhoai/odh-dashboard-rhel9

CVSS 3.1 8.8Source modified 28 Sep 2026Recorded 23 Oct 2026

A catalog match establishes published evidence, not applicability to your environment. Check resolved package dependencies, or open a Microsoft CVE for fixing KBs, releases and planning.