Security

Microsoft security updates and public advisory evidence: affected products, fixing updates, exploitation and source coverage.

Security Update Guide CISA KEV

Advisory catalog

Public source statements across vendors. Explicit aliases connect records; each publisher keeps its own state, severity and affected-version evidence.

Collected statements

699016 source statements · aliases may refer to the same vulnerability

CVE-2026-77756Published

Apache Tomcat: Transfer-Encoding honored for HTTP/1.0 requests

cve-program ·

Vendor product: Apache Tomcat

Source modified 23 Sep 2026Recorded 23 Oct 2026

CVE-2026-75973Published

Apache Tomcat: Cross-context authentication mix-up with Jakarta Authentication configured

cve-program ·

Vendor product: Apache Tomcat

Source modified 23 Sep 2026Recorded 23 Oct 2026

CVE-2026-93337Published

NetworkManager-l2tp Privilege Escalation via pppd Plugin Injection

cve-program ·

Vendor product: NetworkManager-l2tp

CVSS 4.0 8.5 · CVSS 3.1 7.8Source modified 23 Sep 2026Recorded 23 Oct 2026

CVE-2026-55456Rejected

This CVE is a duplicate of another CVE.

cve-program ·

Source modified 23 Sep 2026Recorded 23 Oct 2026

CVE-2026-96513Published

Neethuharii CafeManagement AddProductCode.php unrestricted upload

cve-program ·

Vendor product: CafeManagement

CVSS 4.0 6.9 · CVSS 3.1 7.3 · CVSS 3.0 7.3 · CVSS 2.0 7.5Source modified 23 Sep 2026Recorded 23 Oct 2026

CVE-2026-95848Published

Moquette fails open when configured authentication or authorization classes cannot load

cve-program ·

Vendor product: moquette

CVSS 4.0 9.3Source modified 23 Sep 2026Recorded 23 Oct 2026

CVE-2026-95843Published

Moquette malformed shared subscriptions can crash command processing

cve-program ·

Vendor product: moquette

CVSS 4.0 8.7Source modified 23 Sep 2026Recorded 23 Oct 2026

CVE-2026-93307Published

O-RAN-SC SMO OAM VES Collector memory allocation

cve-program ·

Vendor product: SMO OAM

CVSS 4.0 5.3 · CVSS 3.1 4.3 · CVSS 3.0 4.3 · CVSS 2.0 4.0Source modified 23 Sep 2026Recorded 23 Oct 2026

CVE-2026-93739Published

Totolink A3002MU formWlAc buffer overflow

cve-program ·

Vendor product: A3002MU

CVSS 4.0 9.4 · CVSS 3.1 9.9 · CVSS 3.0 9.9 · CVSS 2.0 9.0Source modified 23 Sep 2026Recorded 23 Oct 2026

CVE-2026-95958Published

JusticeRage Manalyze PE Parser pe.cpp _parse_relocations integer underflow

cve-program ·

Vendor product: Manalyze

CVSS 4.0 4.8 · CVSS 3.1 3.3 · CVSS 3.0 3.3 · CVSS 2.0 1.7Source modified 23 Sep 2026Recorded 23 Oct 2026

CVE-2026-96757Published

orval before 8.29.0 Code Injection via unescaped OpenAPI media-type

cve-program ·

Vendor product: orval

CVSS 4.0 9.3 · CVSS 3.1 9.8Source modified 23 Sep 2026Recorded 23 Oct 2026

CVE-2026-95927Published

SourceCodester Online Reviewer Management System exam-delete.php sql injection

cve-program ·

Vendor product: Online Reviewer Management System

CVSS 4.0 6.9 · CVSS 3.1 7.3 · CVSS 3.0 7.3 · CVSS 2.0 7.5Source modified 23 Sep 2026Recorded 23 Oct 2026

CVE-2026-19267Published

IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities

cve-program ·

Vendor product: Financial Transaction Manager (FTM) for RedHat OpenShift

CVSS 3.1 6.2Source modified 23 Sep 2026Recorded 23 Oct 2026

CVE-2026-18505Published

IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities

cve-program ·

Vendor product: Financial Transaction Manager (FTM) for RedHat OpenShift

CVSS 3.1 5.4Source modified 23 Sep 2026Recorded 23 Oct 2026

CVE-2026-18944Rejected

REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-18944. Reason: This candidate is a reservation duplicate of CVE-2026-18944. Notes: All CVE users should reference CVE-2026-18944 instead of this candidate. All references a…

cve-program ·

Source modified 23 Sep 2026Recorded 23 Oct 2026

CVE-2026-18180Published

IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities

cve-program ·

Vendor product: Financial Transaction Manager (FTM) for RedHat OpenShift

CVSS 3.1 6.5Source modified 23 Sep 2026Recorded 23 Oct 2026

CVE-2026-96675Published

alsa-lib through 1.2.16.1 Denial of Service via pcm_multi

cve-program ·

Vendor product: alsa-lib

CVSS 4.0 4.8 · CVSS 3.1 3.3Source modified 23 Sep 2026Recorded 23 Oct 2026

CVE-2026-80047Published

Hugging Face Transformers library writes remote code to disk prior to consent check

cve-program ·

Vendor product: Transformers

Source modified 23 Sep 2026Recorded 23 Oct 2026

CVE-2026-96775Published

MLflow dspy bypasses pickle deserialization control

cve-program ·

Vendor product: MLflow

Source modified 23 Sep 2026Recorded 23 Oct 2026

CVE-2026-85651Published

Trigger.dev versions before 4.5.2 fail to validate environment membership during run replay operations, allowing authenticated attackers to inject task runs into arbitrary environments. Attackers can replay their own runs into other organiz…

nvd ·

CVSS 4.0 · [email protected] · Secondary 8.4 · CVSS 3.1 · [email protected] · Secondary 8.5Source modified 23 Sep 2026Recorded 25 Oct 2026

CVE-2026-85650Published

Trigger.dev before 4.5.2 contains a server-side request forgery vulnerability in webhook alert channel delivery URLs that are fetched without validation or SSRF protection. Authenticated users with organization membership can create alert c…

nvd ·

CVSS 4.0 · [email protected] · Secondary 5.3 · CVSS 3.1 · [email protected] · Secondary 5.4Source modified 23 Sep 2026Recorded 25 Oct 2026

CVE-2026-61834Published

scim-patch is a library for applying SCIM patch operations. Prior to 0.9.2, navigate() reads inherited properties and assign() uses prototype-chain membership checks while resolving attacker-controlled SCIM PATCH paths. A path or one of the…

nvd ·

CVSS 3.1 · [email protected] · Secondary 4.3Source modified 23 Sep 2026Recorded 25 Oct 2026

CVE-2026-96443Published

Apache Doris: JDBC driver URL validation bypass leads to remote code execution

cve-program ·

Vendor product: Apache Doris

Source modified 23 Sep 2026Recorded 23 Oct 2026

CVE-2026-94251Published

Apache Sling Security Bundle: ContentDispositionFilter mediates only one address/API shape of a resource

cve-program ·

Vendor product: Apache Sling Security Bundle

Source modified 23 Sep 2026Recorded 23 Oct 2026

CVE-2026-94243Published

Apache Sling Security Bundle: RefererFilter accepts weaker-than-origin evidence

cve-program ·

Vendor product: Apache Sling Security Bundle

Source modified 23 Sep 2026Recorded 23 Oct 2026

CVE-2026-92001Published

Apache Sling XSS: Missing parser resource limits

cve-program ·

Vendor product: Apache Sling XSS

Source modified 23 Sep 2026Recorded 23 Oct 2026

CVE-2026-91999Published

Apache Sling XSS: Improper escaping in the XSS Webconsole plugin

cve-program ·

Vendor product: Apache Sling XSS

Source modified 23 Sep 2026Recorded 23 Oct 2026

CVE-2026-91928Published

Apache Sling XSS: Sanitizer bypass, uncontrolled resource consumption and failure pf protection mechanisms

cve-program ·

Vendor product: Apache Sling XSS

Source modified 23 Sep 2026Recorded 23 Oct 2026

CVE-2026-91852Published

Apache Sling XSS: CWE-79 multiple raw-string break-outs and ReDOS in XSSImpl

cve-program ·

Vendor product: Apache Sling XSS

Source modified 23 Sep 2026Recorded 23 Oct 2026

CVE-2026-73192Published

Apache Sling XSS: XSS possible through XSSAPI.getValidHref()

cve-program ·

Vendor product: Apache Sling XSS

Source modified 23 Sep 2026Recorded 23 Oct 2026

CVE-2026-31377Published

Apache Doris: Improper Authentication Allows Unauthorized Access to FE Meta Service

cve-program ·

Vendor product: Apache Doris

CVSS 3.1 7.5Source modified 23 Sep 2026Recorded 23 Oct 2026

CVE-2023-4061Published

Wildfly-core: management user rbac permission allows unexpected reading of system-properties to an unauthorized actor

cve-program ·

https://access.redhat.com/jbossnetwork/restricted/listSoftware.html: org.wildfly.core/wildfly-controller · https://access.redhat.com/downloads/content/package-browser/: eap7-wildfly · https://access.redhat.com/downloads/content/package-browser/: eap7-wildfly-elytron

CVSS 3.1 6.5Source modified 23 Sep 2026Recorded 23 Oct 2026

CVE-2026-37603Published

Improper Restriction of Excessive Authentication Attempts in the administration login of pH7Software pH7Builder (pH7 Social Dating CMS) through 19.2.0. The CAPTCHA escalation flag is stored in the PHP session as captcha_admin_enabled and th…

cve-program ·

Vendor product: n/a

Source modified 23 Sep 2026Recorded 23 Oct 2026

CVE-2026-95847Published

Moquette client IDs can cause cross-session H2 durable-queue corruption

cve-program ·

Vendor product: moquette

CVSS 4.0 8.8Source modified 23 Sep 2026Recorded 23 Oct 2026

CVE-2026-95842Published

Moquette uncaught MQTT command exceptions can terminate shared session event loops

cve-program ·

Vendor product: moquette

CVSS 4.0 8.7Source modified 23 Sep 2026Recorded 23 Oct 2026

CVE-2026-96755Published

orval @orval/effect 8.14.0 through 8.28.1 Code Injection

cve-program ·

Vendor product: orval

CVSS 4.0 9.3 · CVSS 3.1 9.8Source modified 23 Sep 2026Recorded 23 Oct 2026

CVE-2026-76979Published

XML Injection vulnerability

cve-program ·

Vendor product: ManageEngine OpManager · Vendor product: ManageEngine Firewall Analyzer

CVSS 3.1 7.7Source modified 23 Sep 2026Recorded 23 Oct 2026

CVE-2026-86679Published

Broken Access Control vulnerability

cve-program ·

Vendor product: ManageEngine Applications Manager

CVSS 3.1 7.1Source modified 23 Sep 2026Recorded 23 Oct 2026

CVE-2026-6668Published

Integer overflow causes an infinite loop in packet buffer growth in PgBouncer

cve-program ·

Vendor product: PgBouncer

CVSS 3.1 7.5Source modified 23 Sep 2026Recorded 23 Oct 2026

CVE-2026-6669Published

Unbounded SCRAM iteration count causes CPU exhaustion in PgBouncer

cve-program ·

Vendor product: PgBouncer

CVSS 3.1 5.9Source modified 23 Sep 2026Recorded 23 Oct 2026

CVE-2026-19888Published

NULL pointer dereference in SCRAM client-final-message parsing in PgBouncer

cve-program ·

Vendor product: PgBouncer

CVSS 3.1 7.5Source modified 23 Sep 2026Recorded 23 Oct 2026

CVE-2026-96651Published

Plex Media Server path traversal

cve-program ·

Vendor product: Media Server

CVSS 3.1 6.5 · CVSS 4.0 7.1Source modified 23 Sep 2026Recorded 23 Oct 2026

CVE-2026-93769Published

HumHub 1.18.5 - Stored XSS in Profile Field Category title via HForm#renderForm leading to System Administrator account takeover

cve-program ·

Vendor product: Humhub

CVSS 4.0 7.2Source modified 23 Sep 2026Recorded 23 Oct 2026

CVE-2026-6327Published

Multiple Vulnerabilities in IBM Concert Software

cve-program ·

Vendor product: Concert

CVSS 3.1 4.3Source modified 23 Sep 2026Recorded 23 Oct 2026

CVE-2026-19087Published

IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities

cve-program ·

Vendor product: Financial Transaction Manager (FTM) for RedHat OpenShift

CVSS 3.1 4.4Source modified 23 Sep 2026Recorded 23 Oct 2026

CVE-2026-18185Published

IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities

cve-program ·

Vendor product: Financial Transaction Manager (FTM) for RedHat OpenShift

CVSS 3.1 7.3Source modified 23 Sep 2026Recorded 23 Oct 2026

CVE-2026-54687Published

n8n-nodes-sqlite3 is a node for operating a local SQLite database from n8n. Prior to 1.0.0, nodes/SqliteNode/v1/SqliteV1.node.ts exposes the db_path database file path as a node parameter that permits data expressions from upstream workflow…

nvd ·

CVSS 4.0 · [email protected] · Secondary 6.1 · CVSS 3.1 · [email protected] · Primary 9.8Source modified 23 Sep 2026Recorded 25 Oct 2026

CVE-2026-95868Published

AdithyaYelloju Restaurant-Management-System Search Form display_menu.php mysqli_query sql injection

cve-program ·

Vendor product: Restaurant-Management-System

CVSS 4.0 5.3 · CVSS 3.1 6.3 · CVSS 3.0 6.3 · CVSS 2.0 6.5Source modified 23 Sep 2026Recorded 23 Oct 2026

CVE-2026-88974Published

WPGraphQL: Contributor can publish and modify posts without the required capabilities via updatePost

cve-program ·

Vendor product: wp-graphql

CVSS 3.1 5.4Source modified 23 Sep 2026Recorded 23 Oct 2026

CVE-2026-61834Published

scim-patch: Mutation of Inherited Built-in Method Objects

cve-program ·

Vendor product: scim-patch

CVSS 3.1 4.3Source modified 23 Sep 2026Recorded 23 Oct 2026

A catalog match establishes published evidence, not applicability to your environment. Check resolved package dependencies, or open a Microsoft CVE for fixing KBs, releases and planning.