Security

Microsoft security updates and public advisory evidence: affected products, fixing updates, exploitation and source coverage.

Security Update Guide CISA KEV

Advisory catalog

Public source statements across vendors. Explicit aliases connect records; each publisher keeps its own state, severity and affected-version evidence.

Collected statements

698811 source statements · aliases may refer to the same vulnerability

CVE-2026-84882Published

IBM Guardium Data Protection is affected by multiple vulnerabilities.

cve-program ·

Vendor product: Guardium Data Protection

CVSS 3.1 7.5Source modified 26 Sep 2026Recorded 23 Oct 2026

CVE-2026-93643Published

Zimbra Collaboration Suite OnlyOffice Integration Path Traversal Leading to Remote Code Execution via Unauthenticated /downloadas Request

cve-program ·

Vendor product: Zimbra Collaboration Suite (ZCS)

CVSS 3.1 9.8Source modified 26 Sep 2026Recorded 23 Oct 2026

CVE-2026-67279Published

SSH Pre-Authentication Rekey State Bypass in MikroTik RouterOS

cve-program ·

Vendor product: RouterOS

CVSS 4.0 6.9Source modified 26 Sep 2026Recorded 23 Oct 2026

CVE-2026-82164Published

Dell Trusted Device Client, versions prior to 8.1.359.0, contain an Incorrect Permission Assignment for Critical Resource vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to In…

cve-program ·

Vendor product: Trusted Device Client,

CVSS 3.1 7.1Source modified 26 Sep 2026Recorded 23 Oct 2026

CVE-2026-89325Published

Rapid7 Insight Agent: Uncontrolled search path element in InsightVM assessment content leads to local privilege escalation

cve-program ·

Vendor product: Insight Agent

CVSS 3.1 7.8Source modified 26 Sep 2026Recorded 23 Oct 2026

CVE-2026-96749Published

Heap out-of-bounds write via signed size overflow in BSON document encoding

cve-program ·

Vendor product: Python Driver

CVSS 4.0 7.5 · CVSS 3.1 8.4Source modified 26 Sep 2026Recorded 23 Oct 2026

CVE-2026-62985Published

request-filtering-agent is an http(s).Agent implementation that blocks requests to Private/Reserved IP addresses. Prior to 3.2.1, RequestFilteringHttpAgent and RequestFilteringHttpsAgent synchronously threw from createConnection when reject…

nvd ·

CVSS 3.1 · [email protected] · Secondary 7.5Source modified 26 Sep 2026Recorded 25 Oct 2026

CVE-2026-96258Published

onSite internet GmbH Auktion NG Auktionssoftware Public Password Reset Endpoint forgotpasswd.html cross site scripting

cve-program ·

Vendor product: Auktion NG Auktionssoftware

CVSS 4.0 5.3 · CVSS 3.1 4.3 · CVSS 3.0 4.3 · CVSS 2.0 5.0Source modified 26 Sep 2026Recorded 23 Oct 2026

CVE-2026-95929Published

iFlytek astron-agent getBotList API endpoint ChatBotMarketMapper.xml sql injection

cve-program ·

Vendor product: astron-agent

CVSS 4.0 5.3 · CVSS 3.1 6.3 · CVSS 3.0 6.3 · CVSS 2.0 6.5Source modified 26 Sep 2026Recorded 23 Oct 2026

CVE-2026-77633Published

Cloudreve is a self-hosted file management and sharing system. Prior to 4.18.0, PrepareUpload in pkg/filemanager/fs/dbfs/upload.go checks a stale in-memory user storage value through validateUserCapacity and later applies an unconditional s…

nvd ·

CVSS 3.1 · [email protected] · Secondary 7.1Source modified 26 Sep 2026Recorded 25 Oct 2026

CVE-2026-76803Published

Nuclei is a vulnerability scanner built on a simple YAML-based DSL. From 3.0.0 until 3.10.0, the nuclei/mysql JavaScript library does not enforce the local-file sandbox when a JavaScript template supplies the allowAllFiles MySQL DSN option.…

nvd ·

CVSS 3.1 · [email protected] · Secondary 5.3Source modified 26 Sep 2026Recorded 25 Oct 2026

CVE-2026-95924Published

SourceCodester Online Reviewer Management System btn_functions.php add sql injection

cve-program ·

Vendor product: Online Reviewer Management System

CVSS 4.0 6.9 · CVSS 3.1 7.3 · CVSS 3.0 7.3 · CVSS 2.0 7.5Source modified 26 Sep 2026Recorded 23 Oct 2026

CVE-2026-95829Published

TDuckCloud tduck-platform Pagination Inner Interceptor MybatisPlusConfig.java PaginationInnerInterceptor.concatOrderBy sql injection

cve-program ·

Vendor product: tduck-platform

CVSS 4.0 5.3 · CVSS 3.1 6.3 · CVSS 3.0 6.3 · CVSS 2.0 6.5Source modified 26 Sep 2026Recorded 23 Oct 2026

CVE-2026-57576Published

plone.app.dexterity and plone.app.contenttypes have a Denial of Service due to excessive title or description length

cve-program ·

Vendor product: plone.app.dexterity · Vendor product: plone.app.contenttypes

CVSS 3.1 6.5Source modified 26 Sep 2026Recorded 23 Oct 2026

CVE-2026-95813Published

e621ng before 26.09.16 Open Redirect via URL Parameters

cve-program ·

https://github.com/e621ng/e621ng: e621ng

CVSS 4.0 5.3 · CVSS 3.1 6.1Source modified 26 Sep 2026Recorded 23 Oct 2026

CVE-2026-62364Published

wlc may disclose API tokens to project-configured URLs

cve-program ·

Vendor product: wlc

CVSS 3.1 2.3Source modified 26 Sep 2026Recorded 23 Oct 2026

CVE-2025-10619Published

A vulnerability was detected in sequa-ai sequa-mcp up to 1.0.13. This affects the function redirectToAuthorization of the file src/helpers/node-oauth-client-provider.ts of the component OAuth Server Discovery. Performing manipulation result…

nvd ·

CVSS 4.0 · [email protected] · Secondary 2.1 · CVSS 3.1 · [email protected] · Secondary 6.3 · CVSS 2.0 · [email protected] · Secondary 6.5Source modified 26 Sep 2026Recorded 25 Oct 2026

CVE-2025-4437Published

There's a vulnerability in the CRI-O application where when container is launched with securityContext.runAsUser specifying a non-existent user, CRI-O attempts to create the user, reading the container's entire /etc/passwd file into memory.…

nvd ·

CVSS 3.1 · [email protected] · Secondary 5.7Source modified 26 Sep 2026Recorded 25 Oct 2026

CVE-2025-56236Published

FormCms v0.5.5 contains a stored cross-site scripting (XSS) vulnerability in the avatar upload feature. Authenticated users can upload .html files containing malicious JavaScript, which are accessible via a public URL. When a privileged use…

nvd ·

CVSS 3.1 · 134c704f-9b21-4f2e-91b3-4a467353bcc0 · Secondary 6.1Source modified 26 Sep 2026Recorded 25 Oct 2026

CVE-2025-58047Published

Volto is a React based frontend for the Plone Content Management System. In versions from 19.0.0-alpha.1 to before 19.0.0-alpha.4, 18.0.0 to before 18.24.0, 17.0.0 to before 17.22.1, and prior to 16.34.0, an anonymous user could cause the N…

nvd ·

CVSS 3.1 · [email protected] · Secondary 7.5Source modified 26 Sep 2026Recorded 25 Oct 2026

CVE-2025-58058Published

xz is a pure golang package for reading and writing xz-compressed files. Prior to version 0.5.14, it is possible to put data in front of an LZMA-encoded byte stream without detecting the situation while reading the header. This can lead to …

nvd ·

CVSS 3.1 · [email protected] · Secondary 5.3Source modified 26 Sep 2026Recorded 25 Oct 2026

CVE-2025-6203Published

A malicious user may submit a specially-crafted complex payload that otherwise meets the default request size limit which results in excessive memory and CPU consumption of Vault. This may lead to a timeout in Vault’s auditing subroutine, p…

nvd ·

CVSS 3.1 · [email protected] · Secondary 7.5Source modified 26 Sep 2026Recorded 25 Oct 2026

CVE-2026-83805Published

Nautobot: Authorization bypass in approval workflow REST API allows self-approval and unauthorized activation of scheduled jobs

cve-program ·

Vendor product: nautobot

CVSS 3.1 6.4Source modified 26 Sep 2026Recorded 23 Oct 2026

CVE-2026-62985Published

request-filtering-agent: Synchronous throw from createConnection() for literal private-IP hosts bypasses req.on('error'), crashing the Node.js process

cve-program ·

Vendor product: request-filtering-agent

CVSS 3.1 7.5Source modified 26 Sep 2026Recorded 23 Oct 2026

CVE-2026-63386Published

js-toml: Uncontrolled recursion in `load()` causes `RangeError` (stack exhaustion) on deeply nested input

cve-program ·

Vendor product: js-toml

CVSS 3.1 5.3Source modified 26 Sep 2026Recorded 23 Oct 2026

CVE-2026-75745Published

Adobe Experience Manager Forms JEE | Incorrect Authorization (CWE-863)

cve-program ·

Vendor product: AEM 6.5 Forms JEE · Vendor product: AEM 6.5 LTS Forms JEE

CVSS 3.1 10.0Source modified 26 Sep 2026Recorded 23 Oct 2026

CVE-2026-75689Published

Adobe Connect | Cross-site Scripting (Stored XSS) (CWE-79)

cve-program ·

Vendor product: Adobe Connect · Vendor product: Adobe Connect Android Mobile App

CVSS 3.1 9.3Source modified 26 Sep 2026Recorded 23 Oct 2026

CVE-2026-75638Published

CAI Content Credentials | Improper Input Validation (CWE-20)

cve-program ·

Vendor product: Content Credentials Rust SDK · Vendor product: Content Credentials Command-Line Tool

CVSS 3.1 6.5Source modified 26 Sep 2026Recorded 23 Oct 2026

CVE-2026-77259Published

MCP Atlassian: Arbitrary file read via confluence_upload_attachment allows exfiltration of server credentials

cve-program ·

Vendor product: mcp-atlassian

CVSS 3.1 7.7Source modified 26 Sep 2026Recorded 23 Oct 2026

CVE-2026-84396Published

InDesign Desktop | NULL Pointer Dereference (CWE-476)

cve-program ·

Vendor product: InDesign Desktop · Vendor product: InDesign Desktop

CVSS 3.1 5.5Source modified 26 Sep 2026Recorded 23 Oct 2026

CVE-2026-77269Published

MCP Atlassian: Path traversal in upload_attachment allows arbitrary file read (incomplete fix for CVE-2026-27825)

cve-program ·

Vendor product: mcp-atlassian

CVSS 3.1 6.5Source modified 26 Sep 2026Recorded 23 Oct 2026

CVE-2026-77255Published

MCP Atlassian: Arbitrary File Read & Exfiltration (Confused Deputy) in JIRA update_issue

cve-program ·

Vendor product: mcp-atlassian

CVSS 3.1 8.6Source modified 26 Sep 2026Recorded 23 Oct 2026

CVE-2026-77260Published

MCP Atlassian: Arbitrary local file READ via unconstrained file_path in upload_attachment (Confluence + Jira)

cve-program ·

Vendor product: mcp-atlassian

CVSS 4.0 8.3Source modified 25 Sep 2026Recorded 23 Oct 2026

CVE-2026-77251Published

MCP Atlassian: JIRA_PROJECTS_FILTER / CONFLUENCE_SPACES_FILTER allow forbidden-project content exfiltration (one LIVE-proven on Atlassian Cloud)

cve-program ·

Vendor product: mcp-atlassian

CVSS 4.0 8.3Source modified 25 Sep 2026Recorded 23 Oct 2026

CVE-2026-95657Published

dgtlmoon Changedetection.io Visual Selector visual-selector.js setCurrentSelectedText cross site scripting

cve-program ·

Vendor product: Changedetection.io

CVSS 4.0 5.1 · CVSS 3.1 3.5 · CVSS 3.0 3.5 · CVSS 2.0 4.0Source modified 25 Sep 2026Recorded 23 Oct 2026

CVE-2026-83660Published

Adobe Campaign Classic (ACC) | Server-Side Request Forgery (SSRF) (CWE-918)

cve-program ·

Vendor product: Adobe Campaign Classic

CVSS 3.1 9.9Source modified 25 Sep 2026Recorded 23 Oct 2026

CVE-2026-82009Published

Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)

cve-program ·

Vendor product: Adobe Campaign Classic

CVSS 3.1 9.1Source modified 25 Sep 2026Recorded 23 Oct 2026

CVE-2026-75721Published

Adobe Campaign Classic (ACC) | Improper Control of Generation of Code ('Code Injection') (CWE-94)

cve-program ·

Vendor product: Adobe Campaign Classic

CVSS 3.1 10.0Source modified 25 Sep 2026Recorded 23 Oct 2026

CVE-2026-77258Published

MCP Atlassian: Arbitrary file read/exfiltration via upload_attachment missing validate_safe_path()

cve-program ·

Vendor product: mcp-atlassian

CVSS 3.1 7.7Source modified 25 Sep 2026Recorded 23 Oct 2026

CVE-2026-85288Published

Notepad++: Shortcuts.xml macro HMAC bypass still reachable via the "Run a Macro Multiple Times" dialog

cve-program ·

Vendor product: notepad-plus-plus

CVSS 3.1 6.7Source modified 25 Sep 2026Recorded 23 Oct 2026

CVE-2026-83601Published

Netdata: Streaming protocol dimension slot has no upper-bound guard, allowing integer overflow and out-of-bounds write

cve-program ·

Vendor product: netdata

CVSS 3.1 6.5Source modified 25 Sep 2026Recorded 23 Oct 2026

CVE-2026-84301Published

FastGPT safe axios SSRF guard still allows DNS rebinding TOCTOU on protected outbound requests

cve-program ·

Vendor product: FastGPT

CVSS 3.1 6.3Source modified 25 Sep 2026Recorded 23 Oct 2026

CVE-2026-76803Published

Nuclei: Local File Read via MySQL Client Sandbox Bypass

cve-program ·

Vendor product: nuclei

CVSS 3.1 5.3Source modified 25 Sep 2026Recorded 23 Oct 2026

CVE-2026-85725Published

LightRAG: Plaintext Passwords Compared Without Constant-Time Function

cve-program ·

Vendor product: LightRAG

CVSS 3.1 5.9Source modified 25 Sep 2026Recorded 23 Oct 2026

CVE-2026-75511Published

Novu: Server-Side Request Forgery (SSRF) via Chat Provider Webhook URLs

cve-program ·

Vendor product: novu · Vendor product: api-service

CVSS 4.0 5.3Source modified 25 Sep 2026Recorded 23 Oct 2026

CVE-2026-77633Published

Cloudreve: Storage-quota TOCTOU race allows quota bypass and storage-based denial of service

cve-program ·

Vendor product: cloudreve

CVSS 3.1 7.1Source modified 25 Sep 2026Recorded 23 Oct 2026

CVE-2026-95653Published

Concrete CMS Community Store before 2.7.8 Predictable Digital Download Token

cve-program ·

Vendor product: community_store

CVSS 4.0 8.7 · CVSS 3.1 7.5Source modified 25 Sep 2026Recorded 23 Oct 2026

CVE-2026-80146Published

Lantronix Autonomous Out-of-Band Devices Stack-Based Buffer Overflow via mfc eeprom read

cve-program ·

Vendor product: SLC8000 · Vendor product: EMG8500 · Vendor product: EMG7500

CVSS 4.0 9.4 · CVSS 3.1 9.9Source modified 25 Sep 2026Recorded 23 Oct 2026

CVE-2026-77621Published

Vector: Arbitrary file write in the file sink via templated path (path traversal).

cve-program ·

Vendor product: vector

CVSS 4.0 9.3Source modified 25 Sep 2026Recorded 23 Oct 2026

CVE-2026-81885Published

radare2: Infinite relocation-chain loop causes denial of service in radare2 NE parser

cve-program ·

Vendor product: radare2

CVSS 3.1 5.5Source modified 25 Sep 2026Recorded 23 Oct 2026

A catalog match establishes published evidence, not applicability to your environment. Check resolved package dependencies, or open a Microsoft CVE for fixing KBs, releases and planning.