Security

Microsoft security updates and public advisory evidence: affected products, fixing updates, exploitation and source coverage.

Security Update Guide CISA KEV

Advisory catalog

Public source statements across vendors. Explicit aliases connect records; each publisher keeps its own state, severity and affected-version evidence.

Collected statements

698866 source statements · aliases may refer to the same vulnerability

CVE-2026-71986Published

MSI Radix AXE6600 v781521 Command Injection via dmz Function

cve-program ·

Vendor product: Radix AXE6600

CVSS 4.0 9.3 · CVSS 3.1 9.8Source modified 24 Sep 2026Recorded 23 Oct 2026

CVE-2026-71985Published

MSI Radix AXE6600 v781521 Command Injection via accesscontrol Function

cve-program ·

Vendor product: Radix AXE6600

CVSS 4.0 9.3 · CVSS 3.1 9.8Source modified 24 Sep 2026Recorded 23 Oct 2026

CVE-2026-71984Published

MSI Radix AXE6600 v781521 Command Injection via urlfilter

cve-program ·

Vendor product: Radix AXE6600

CVSS 4.0 9.3 · CVSS 3.1 9.8Source modified 24 Sep 2026Recorded 23 Oct 2026

CVE-2026-71983Published

MSI Radix AXE6600 v781521 Command Injection via wps.cgi

cve-program ·

Vendor product: Radix AXE6600

CVSS 4.0 9.3 · CVSS 3.1 9.8Source modified 24 Sep 2026Recorded 23 Oct 2026

CVE-2026-70561Published

TestLink 1.9.20 and prior Authenticated IDOR via attachmentdownload.php

cve-program ·

Vendor product: TestLink

CVSS 4.0 7.1 · CVSS 3.1 6.5Source modified 24 Sep 2026Recorded 23 Oct 2026

CVE-2026-70556Published

Hubzilla version prior to 11.4 CSRF via OAuth2 /authorize Endpoint App Registration

cve-program ·

Vendor product: Hubzilla

CVSS 4.0 5.1 · CVSS 3.1 4.3Source modified 24 Sep 2026Recorded 23 Oct 2026

CVE-2026-70554Published

MaxSite CMS Unauthenticated PHP Object Injection via maxsite_comuser Cookie

cve-program ·

Vendor product: MaxSite CMS

CVSS 4.0 9.3 · CVSS 3.1 9.8Source modified 24 Sep 2026Recorded 23 Oct 2026

CVE-2026-70552Published

MaxSite CMS 109.5 Unauthenticated AJAX Dispatcher Bypass via ajax.php

cve-program ·

Vendor product: MaxSite CMS

CVSS 4.0 9.3 · CVSS 3.1 9.8Source modified 24 Sep 2026Recorded 23 Oct 2026

CVE-2026-69704Published

Atals-Livre SQL Injection via Unsanitized GET Parameter in supp()

cve-program ·

Vendor product: Atals-Livre

CVSS 4.0 7.0 · CVSS 3.1 6.5Source modified 24 Sep 2026Recorded 23 Oct 2026

CVE-2026-69703Published

Atlas-Livre Unauthenticated Access via Admin Controllers Missing Exit

cve-program ·

Vendor product: Atals-Livre

CVSS 4.0 9.3 · CVSS 3.1 9.8Source modified 24 Sep 2026Recorded 23 Oct 2026

CVE-2026-69702Published

SnailJob 1.7.0 Denial of Service via FuryUtil.deserialize OOM

cve-program ·

Vendor product: SnailJob (snail-job)

CVSS 4.0 7.1 · CVSS 3.1 6.5Source modified 24 Sep 2026Recorded 23 Oct 2026

CVE-2026-69101Published

Datavane TIS v5.0.0 XXE Injection via doEditWorkflow Endpoint

cve-program ·

Vendor product: tis

CVSS 4.0 8.3 · CVSS 3.1 7.7Source modified 24 Sep 2026Recorded 23 Oct 2026

CVE-2026-66421Published

OpenClaw Dashboard Stored XSS via lastMessage Session Field

cve-program ·

Vendor product: openclaw-dashboard

CVSS 4.0 8.8 · CVSS 3.1 9.3Source modified 24 Sep 2026Recorded 23 Oct 2026

CVE-2026-66420Published

MeshCentral Cross-Site WebSocket Hijacking via Origin Validation Bypass on Self-Signed Certificate Deployments

cve-program ·

Vendor product: MeshCentral

CVSS 4.0 8.6 · CVSS 3.1 8.8Source modified 24 Sep 2026Recorded 23 Oct 2026

CVE-2026-66418Published

OpenClaw Dashboard v3.0.0 Stored XSS via Failed Login Username Field

cve-program ·

Vendor product: openclaw-dashboard

CVSS 4.0 9.3 · CVSS 3.1 9.3Source modified 24 Sep 2026Recorded 23 Oct 2026

CVE-2026-66416Published

Leantime CSRF Protection Globally Disabled by Omission of Laravel VerifyCsrfToken Middleware

cve-program ·

Vendor product: Leantime

CVSS 4.0 8.6 · CVSS 3.1 8.8Source modified 24 Sep 2026Recorded 23 Oct 2026

CVE-2026-66415Published

Leantime Server-Side Request Forgery and Local File Inclusion in Blueprints::import()

cve-program ·

Vendor product: Leantime

CVSS 4.0 8.4 · CVSS 3.1 8.5Source modified 24 Sep 2026Recorded 23 Oct 2026

CVE-2026-66414Published

Leantime Open Redirect in Login Controller via redirectUrl Parameter

cve-program ·

Vendor product: Leantime

CVSS 4.0 5.1 · CVSS 3.1 6.1Source modified 24 Sep 2026Recorded 23 Oct 2026

CVE-2026-65319Published

Feedbin Unauthenticated Entry Content Disclosure via GET /api/v2/entries/:id/text

cve-program ·

Vendor product: Feedbin

CVSS 4.0 8.7 · CVSS 3.1 7.5Source modified 24 Sep 2026Recorded 23 Oct 2026

CVE-2026-65318Published

Verba (goldenverba) Unauthenticated Server-Side Request Forgery via WebSocket Import Endpoint HTMLReader

cve-program ·

Vendor product: Verba

CVSS 4.0 9.2 · CVSS 3.1 8.6Source modified 24 Sep 2026Recorded 23 Oct 2026

CVE-2026-65317Published

Verba (goldenverba) Server-Side Request Forgery via /api/connect and Same-Origin Middleware Bypass

cve-program ·

Vendor product: Verba

CVSS 4.0 9.2 · CVSS 3.1 8.6Source modified 24 Sep 2026Recorded 23 Oct 2026

CVE-2026-65316Published

xxl-job Cross-Job-Group Log Disclosure via Missing Authorization Check in /joblog/logDetailCat

cve-program ·

Vendor product: xxl-job

CVSS 4.0 7.1 · CVSS 3.1 6.5Source modified 24 Sep 2026Recorded 23 Oct 2026

CVE-2026-65057Published

Keep Unauthenticated Server-Side Request Forgery via POST /providers/healthcheck

cve-program ·

Vendor product: keep

CVSS 4.0 9.2 · CVSS 3.1 9.3Source modified 24 Sep 2026Recorded 23 Oct 2026

CVE-2026-65056Published

mcp-webresearch Server-Side Request Forgery in visit_page Due to Missing Internal-IP Filtering

cve-program ·

Vendor product: mcp-webresearch

CVSS 4.0 8.3 · CVSS 3.1 8.2Source modified 24 Sep 2026Recorded 23 Oct 2026

CVE-2026-63729Published

TeX Live SyncTeX Parser Heap Use-After-Free via Malformed SyncTeX File

cve-program ·

Vendor product: TeX Live

CVSS 4.0 6.8 · CVSS 3.1 6.6Source modified 24 Sep 2026Recorded 23 Oct 2026

CVE-2026-63728Published

Gitleaks Secret Exfiltration via Non-Hermetic Sprig Template Functions in Report Template Feature

cve-program ·

Vendor product: gitleaks

CVSS 4.0 8.1 · CVSS 3.1 6.3Source modified 24 Sep 2026Recorded 23 Oct 2026

CVE-2026-61463Published

Shiori Authenticated Privilege Escalation via PATCH /api/v1/auth/account

cve-program ·

Vendor product: shiori

CVSS 4.0 8.7 · CVSS 3.1 8.8Source modified 24 Sep 2026Recorded 23 Oct 2026

CVE-2026-59713Published

Leantime - OIDC Login CSRF via Unconditional State Verification Stub

cve-program ·

Vendor product: Leantime

CVSS 4.0 8.6 · CVSS 3.1 8.1Source modified 24 Sep 2026Recorded 23 Oct 2026

CVE-2026-59709Published

Ghostfolio - Unauthorized Portfolio Holding Tag Modification via Missing Permission Check

cve-program ·

Vendor product: Ghostfolio

CVSS 4.0 5.3 · CVSS 3.1 4.3Source modified 24 Sep 2026Recorded 23 Oct 2026

CVE-2026-59708Published

Ghostfolio - Unauthorized Portfolio Data Exposure via Public Endpoint

cve-program ·

Vendor product: ghostfolio

CVSS 4.0 8.7 · CVSS 3.1 7.5Source modified 24 Sep 2026Recorded 23 Oct 2026

CVE-2026-59707Published

LocalAI - Server-Side Request Forgery via POST /models/apply

cve-program ·

Vendor product: LocalAI

CVSS 4.0 9.2 · CVSS 3.1 8.6Source modified 24 Sep 2026Recorded 23 Oct 2026

CVE-2026-59706Published

mem0 - Unauthenticated Config API Exposure and SSRF via ollama_base_url

cve-program ·

Vendor product: mem0

CVSS 4.0 9.2 · CVSS 3.1 9.3Source modified 24 Sep 2026Recorded 23 Oct 2026

CVE-2026-59705Published

mem0 - OpenMemory API Unauthenticated Access via Memory Endpoints

cve-program ·

Vendor product: mem0

CVSS 4.0 9.3 · CVSS 3.1 9.8Source modified 24 Sep 2026Recorded 23 Oct 2026

CVE-2026-59703Published

repomix - Local File Inclusion via file:// URL Scheme in Git Clone Endpoint

cve-program ·

Vendor product: repomix

CVSS 4.0 8.7 · CVSS 3.1 7.5Source modified 24 Sep 2026Recorded 23 Oct 2026

CVE-2026-59702Published

repomix - Server-Side Request Forgery via Unvalidated Repository URLs in POST /api/pack

cve-program ·

Vendor product: repomix

CVSS 4.0 9.2 · CVSS 3.1 9.3Source modified 24 Sep 2026Recorded 23 Oct 2026

CVE-2026-59262Published

AFFiNE - Unauthorized Document Edit History Access via GraphQL histories Field

cve-program ·

Vendor product: monorepo

CVSS 4.0 7.1 · CVSS 3.1 6.5Source modified 24 Sep 2026Recorded 23 Oct 2026

CVE-2026-66070Published

RabbitMQ: CORS * reflects Origin with Allow-Credentials

cve-program ·

Vendor product: rabbitmq-server

CVSS 4.0 7.6Source modified 24 Sep 2026Recorded 23 Oct 2026

CVE-2026-59261Published

OpenClaw < 2026.5.28 - Credential Override via Workspace Dotenv Files

cve-program ·

Vendor product: OpenClaw

CVSS 4.0 8.4 · CVSS 3.1 7.1Source modified 24 Sep 2026Recorded 23 Oct 2026

CVE-2026-57862Published

Kanboard 1.2.52 and prior SSRF Filter Bypass via Hexadecimal IP Notation

cve-program ·

Vendor product: Kanboard

CVSS 4.0 8.4 · CVSS 3.1 8.5Source modified 24 Sep 2026Recorded 23 Oct 2026

CVE-2026-57851Published

MSI KernCoreLib64.sys Privilege Escalation via IOCTL Handlers

cve-program ·

Vendor product: KernCoreLib64.sys

CVSS 4.0 8.5 · CVSS 3.1 7.8Source modified 24 Sep 2026Recorded 23 Oct 2026

CVE-2026-56785Published

FlatPress - Stored Cross-Site Scripting via Unescaped Comment and Contact Form Fields

cve-program ·

Vendor product: FlatPress

CVSS 4.0 8.4 · CVSS 3.1 8.2Source modified 24 Sep 2026Recorded 23 Oct 2026

CVE-2026-56259Published

Crawl4AI - LLM Credential Exfiltration via base_url and Environment Variable Resolution

cve-program ·

Vendor product: Crawl4AI

CVSS 4.0 8.8 · CVSS 3.1 8.2Source modified 24 Sep 2026Recorded 23 Oct 2026

CVE-2026-52759Published

Ghidra < 12.1.1 - Denial of Service via Uncontrolled Memory Allocation in Mach-O Parser

cve-program ·

Vendor product: Ghidra

CVSS 4.0 6.7 · CVSS 3.1 5.5Source modified 24 Sep 2026Recorded 23 Oct 2026

CVE-2026-44118Published

OpenClaw < 2026.4.22 - Owner Context Spoofing via Bearer Token Header

cve-program ·

Vendor product: OpenClaw

CVSS 4.0 8.5 · CVSS 3.1 7.8Source modified 24 Sep 2026Recorded 23 Oct 2026

CVE-2026-44117Published

OpenClaw < 2026.4.20 - Server-Side Request Forgery in QQBot Direct Media Upload

cve-program ·

Vendor product: OpenClaw

CVSS 4.0 6.3 · CVSS 3.1 5.8Source modified 24 Sep 2026Recorded 23 Oct 2026

CVE-2026-44116Published

OpenClaw < 2026.4.22 - Server-Side Request Forgery in Zalo Photo URL Validation

cve-program ·

Vendor product: OpenClaw

CVSS 4.0 6.9 · CVSS 3.1 8.6Source modified 24 Sep 2026Recorded 23 Oct 2026

CVE-2026-44115Published

OpenClaw < 2026.4.22 - Shell Expansion Bypass in Unquoted Heredocs via Exec Allowlist

cve-program ·

Vendor product: OpenClaw

CVSS 4.0 8.7 · CVSS 3.1 8.8Source modified 24 Sep 2026Recorded 23 Oct 2026

CVE-2026-44114Published

OpenClaw < 2026.4.20 - Environment Variable Namespace Collision via Workspace dotenv

cve-program ·

Vendor product: OpenClaw

CVSS 4.0 8.5 · CVSS 3.1 7.8Source modified 24 Sep 2026Recorded 23 Oct 2026

CVE-2026-44113Published

OpenClaw < 2026.4.22 - Time-of-Check/Time-of-Use Race Condition in OpenShell FS Bridge

cve-program ·

Vendor product: OpenClaw

CVSS 4.0 8.3 · CVSS 3.1 7.7Source modified 24 Sep 2026Recorded 23 Oct 2026

CVE-2026-44112Published

OpenClaw < 2026.4.22 - Symlink Swap Race Condition in OpenShell FS Bridge Writes

cve-program ·

Vendor product: OpenClaw

CVSS 4.0 8.4 · CVSS 3.1 9.6Source modified 24 Sep 2026Recorded 23 Oct 2026

A catalog match establishes published evidence, not applicability to your environment. Check resolved package dependencies, or open a Microsoft CVE for fixing KBs, releases and planning.