Security

Microsoft security updates and public advisory evidence: affected products, fixing updates, exploitation and source coverage.

Security Update Guide CISA KEV

Advisory catalog

Public source statements across vendors. Explicit aliases connect records; each publisher keeps its own state, severity and affected-version evidence.

Collected statements

699106 source statements · aliases may refer to the same vulnerability

CVE-2026-75703Published

Adobe Campaign Classic (ACC) | Improper Control of Generation of Code ('Code Injection') (CWE-94)

cve-program ·

Vendor product: Adobe Campaign Classic

CVSS 3.1 10.0Source modified 22 Sep 2026Recorded 23 Oct 2026

CVE-2026-82443Published

Adobe Campaign Classic (ACC) | Server-Side Request Forgery (SSRF) (CWE-918)

cve-program ·

Vendor product: Adobe Campaign Classic

CVSS 3.1 9.6Source modified 22 Sep 2026Recorded 23 Oct 2026

CVE-2026-77270Published

MCP Atlassian: Arbitrary File Read via Upload Attachment Tools

cve-program ·

Vendor product: mcp-atlassian

CVSS 3.1 6.5Source modified 22 Sep 2026Recorded 23 Oct 2026

CVE-2026-84412Published

Adobe Campaign Classic (ACC) | Improper Control of Generation of Code ('Code Injection') (CWE-94)

cve-program ·

Vendor product: Adobe Campaign Classic

CVSS 3.1 10.0Source modified 22 Sep 2026Recorded 23 Oct 2026

CVE-2026-82008Published

Adobe Campaign Classic (ACC) | Improper Input Validation (CWE-20)

cve-program ·

Vendor product: Adobe Campaign Classic

CVSS 3.1 9.9Source modified 22 Sep 2026Recorded 23 Oct 2026

CVE-2026-75723Published

Adobe Campaign Classic (ACC) | Incorrect Authorization (CWE-863)

cve-program ·

Vendor product: Adobe Campaign Classic

CVSS 3.1 10.0Source modified 22 Sep 2026Recorded 23 Oct 2026

CVE-2026-77274Published

MCP Atlassian: SSRF Protection Bypass

cve-program ·

Vendor product: mcp-atlassian

CVSS 4.0 8.8Source modified 22 Sep 2026Recorded 23 Oct 2026

CVE-2026-82010Published

Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)

cve-program ·

Vendor product: Adobe Campaign Classic

CVSS 3.1 9.9Source modified 22 Sep 2026Recorded 23 Oct 2026

CVE-2026-73638Published

Imager versions from 0.45_02 before 1.035 for Perl read outside the EXIF block via unchecked start offsets in tiff_load_ifd

cve-program ·

https://cpan.org/modules: Imager

Source modified 22 Sep 2026Recorded 23 Oct 2026

CVE-2026-73639Published

Imager::File::PNG versions from 1.003 before 1.004 for Perl write past the end of the row buffer reading a PNG with a tRNS transparency chunk in read_direct8

cve-program ·

https://cpan.org/modules: Imager-File-PNG · https://cpan.org/modules: Imager

Source modified 22 Sep 2026Recorded 23 Oct 2026

CVE-2026-85279Published

Notepad++: Stack Buffer Overflow in Plugin Lexer Loading via Unchecked GetLexerCount() Return Value

cve-program ·

Vendor product: notepad-plus-plus

CVSS 3.1 8.6Source modified 22 Sep 2026Recorded 23 Oct 2026

CVE-2026-88623Published

NUUO Network Video Recorder 2.0.0 is vulnerable to arbitrary file read. In up.php, the url parameter submitted by the user via POST is received, and fopen() is used to open the URL in binary read-only mode. The content is then written to th…

cve-program ·

Vendor product: n/a

Source modified 22 Sep 2026Recorded 23 Oct 2026

CVE-2026-93018Published

Imager versions before 1.036 for Perl disclose uninitialised heap memory reading a paletted image with pixel indexes past its colour map in i_gpix_p and i_glin_p

cve-program ·

https://cpan.org/modules: Imager

Source modified 22 Sep 2026Recorded 23 Oct 2026

CVE-2026-94084Published

Suricata before 8.0.7 has an Http2ThreadMultiBuf use-after-free when a transaction is inspected by rules that use http.response_header with and without a transform.

cve-program ·

Vendor product: Suricata

CVSS 3.1 9.4Source modified 22 Sep 2026Recorded 23 Oct 2026

CVE-2026-94384Published

Missing Authorization in sfExecuteAWSService Lambda Dispatcher in Amazon Connect Salesforce Lambda

cve-program ·

Vendor product: amazon-connect-salesforce-lambda

CVSS 3.1 8.1 · CVSS 4.0 6.4Source modified 22 Sep 2026Recorded 23 Oct 2026

CVE-2026-93312Published

Freedesktop Poppler JBIG2Stream.cc rewind null pointer dereference

cve-program ·

Vendor product: Poppler

CVSS 4.0 5.3 · CVSS 3.1 4.3 · CVSS 3.0 4.3 · CVSS 2.0 5.0Source modified 22 Sep 2026Recorded 23 Oct 2026

CVE-2026-83600Published

Netdata: Streaming protocol chart slot guard off-by-one allows ~16 GiB allocation request, crashing parent agent

cve-program ·

Vendor product: netdata

CVSS 3.1 6.5Source modified 22 Sep 2026Recorded 23 Oct 2026

CVE-2026-95818Published

AT_SECURE program buffer overflow via $ORIGIN processing

cve-program ·

Vendor product: glibc

CVSS 3.1 3.6Source modified 22 Sep 2026Recorded 23 Oct 2026

CVE-2026-76700Published

Unauthenticated Denial-of-Service Vulnerabilities in HPE Networking EdgeConnect SD-WAN Gateways

cve-program ·

Vendor product: EdgeConnect SD-WAN Gateways

CVSS 3.1 5.9Source modified 22 Sep 2026Recorded 23 Oct 2026

CVE-2026-93960Published

Pixelfed OAuth Scope ApiV1Controller.php instancePeers missing authentication

cve-program ·

Vendor product: Pixelfed

CVSS 4.0 5.3 · CVSS 3.1 4.3 · CVSS 3.0 4.3 · CVSS 2.0 4.0Source modified 22 Sep 2026Recorded 23 Oct 2026

CVE-2026-76805Published

Nuclei: Environment Variable Disclosure via Response-Derived Data in DAST/Fuzz Mode

cve-program ·

Vendor product: nuclei

CVSS 3.1 5.3Source modified 22 Sep 2026Recorded 23 Oct 2026

CVE-2026-76699Published

Unauthenticated Buffer Overflow Vulnerability leads to Denial-of-Service in HPE Networking EdgeConnect SD-WAN Gateways

cve-program ·

Vendor product: EdgeConnect SD-WAN Gateways

CVSS 3.1 6.4Source modified 22 Sep 2026Recorded 23 Oct 2026

CVE-2026-79913Published

Cloudreve is a self-hosted file management and sharing system. Prior to 4.18.0, the ValidateExternalURL server-side request forgery guard in pkg/request/ssrf.go passes resolved addresses to checkIP without decoding NAT64, IPv4-compatible, a…

nvd ·

CVSS 3.1 · [email protected] · Secondary 6.5Source modified 22 Sep 2026Recorded 25 Oct 2026

CVE-2026-77637Published

Cloudreve is a self-hosted file management and sharing system. Prior to 4.18.0, tool.GET("wopi") and tool.POST("mail") in routers/router.go inherit ScopeAdminRead but omit the RequiredScopes(types.ScopeAdminWrite) middleware applied to neig…

nvd ·

CVSS 3.1 · [email protected] · Secondary 3.8Source modified 22 Sep 2026Recorded 25 Oct 2026

CVE-2026-56682Published

9Router is an AI router & token saver. Prior to 0.5.6, 9Router deployments that allow requests to reach Next.js without the sanitizing custom-server.js wrapper use the client-supplied X-9r-Real-Ip value as the bucket key in getClientIp, che…

nvd ·

CVSS 3.1 · [email protected] · Secondary 5.3Source modified 22 Sep 2026Recorded 25 Oct 2026

CVE-2026-76685Published

Unauthenticated Buffer Overflow Vulnerability leads to Remote Code Execution or Denial-of-Service in HPE Networking EdgeConnect SD-WAN Gateways

cve-program ·

Vendor product: EdgeConnect SD-WAN Gateways

CVSS 3.1 8.1Source modified 22 Sep 2026Recorded 23 Oct 2026

CVE-2026-86062Published

LightRAG: Stored Cross-Site Scripting (XSS) in the LightRAG WebUI chat/answer renderer via ingested content

cve-program ·

Vendor product: LightRAG

CVSS 3.1 6.1Source modified 22 Sep 2026Recorded 23 Oct 2026

CVE-2026-94455Published

Unauthenticated /enterprise/create-user mints lifetime top-tier organizations and discloses their API key

cve-program ·

Vendor product: postiz-app

CVSS 3.1 7.1Source modified 22 Sep 2026Recorded 23 Oct 2026

CVE-2026-81897Published

Concrete CMS below version 9.5.3 is vulnerable to Stored XSS via Express form Text control save_control

cve-program ·

https://github.com/concretecms/concretecms: Concrete CMS

CVSS 4.0 7.7Source modified 22 Sep 2026Recorded 23 Oct 2026

CVE-2026-81896Published

Concrete CMS below version 9.5.3 is vulnerable to Stored XSS in Concrete CMS Form Submissions Report via Unescaped Question Label

cve-program ·

https://github.com/concretecms/concretecms: Concrete CMS

CVSS 4.0 8.4Source modified 22 Sep 2026Recorded 23 Oct 2026

CVE-2026-85709Published

LightRAG: Sensitive Information Exposure Through Raw Exception Messages in API Error Responses

cve-program ·

Vendor product: LightRAG

CVSS 3.1 5.3Source modified 22 Sep 2026Recorded 23 Oct 2026

CVE-2026-94456Published

Unauthenticated recovery of the Math.random() state behind OAuth tokens, authorization codes, client secrets and organization API keys

cve-program ·

Vendor product: postiz-app

CVSS 3.1 9.1Source modified 22 Sep 2026Recorded 23 Oct 2026

CVE-2026-94491Published

Yonyou KSOA search_list.jsp sql injection

cve-program ·

Vendor product: KSOA

CVSS 4.0 6.9 · CVSS 3.1 7.3 · CVSS 3.0 7.3 · CVSS 2.0 7.5Source modified 22 Sep 2026Recorded 23 Oct 2026

CVE-2026-18111Published

Concrete CMS below 9.5.4 allows privilege escalation because adding users and assigning groups do not require additional identity verification

cve-program ·

https://github.com/concretecms/concretecms: Concrete CMS

CVSS 4.0 8.5Source modified 22 Sep 2026Recorded 23 Oct 2026

CVE-2026-81895Published

Concrete CMS 9.5.2 and below is vulnerable to Stored SQL Injection in Concrete CMS Document Library Block via `fsID[]` in `setMode=any`

cve-program ·

https://github.com/concretecms/concretecms: Concrete CMS

CVSS 4.0 8.5Source modified 22 Sep 2026Recorded 23 Oct 2026

CVE-2026-95501Published

mtrano APENCMS Template weasel.php eval code injection

cve-program ·

Vendor product: APENCMS

CVSS 4.0 4.8 · CVSS 3.1 4.3 · CVSS 3.0 4.3 · CVSS 2.0 5.8Source modified 22 Sep 2026Recorded 23 Oct 2026

CVE-2026-86698Published

Refresh tokens accepted as private repository credentials at the CDN

cve-program ·

https://hex.pm: hex.pm · https://github.com: hexpm/hexpm

CVSS 4.0 2.3Source modified 22 Sep 2026Recorded 23 Oct 2026

CVE-2026-81894Published

Concrete CMS 9.5.2 and below is vulnerable to Stored DOM-based Cross-site Scripting (XSS) in the Gallery block image Caption field

cve-program ·

https://github.com/concretecms/concretecms: Concrete CMS

CVSS 4.0 8.5Source modified 22 Sep 2026Recorded 23 Oct 2026

CVE-2026-95272Published

dgtlmoon changedetection.io Screenshot flask_app.py static_content path traversal

cve-program ·

Vendor product: changedetection.io

CVSS 4.0 6.3 · CVSS 3.1 3.7 · CVSS 3.0 3.7 · CVSS 2.0 2.6Source modified 22 Sep 2026Recorded 23 Oct 2026

CVE-2026-94424Published

Moore Threads MTT S80 Driver Package IOCTL mtdispkm64.sys sub_140001000 heap-based overflow

cve-program ·

Vendor product: MTT S80 Driver Package

CVSS 4.0 9.3 · CVSS 3.1 8.8 · CVSS 3.0 8.8 · CVSS 2.0 6.8Source modified 22 Sep 2026Recorded 23 Oct 2026

CVE-2026-18110Published

Concrete CMS 9.0.0 through 9.5.2 is vulnerable to missing authorization in the user selector autocomplete endpoint (/ccm/system/user/autocomplete), allowing an unauthenticated attacker to retrieve the complete backend user directory — internal ID, username

cve-program ·

https://github.com/concretecms/concretecms: Concrete CMS

CVSS 4.0 8.7Source modified 22 Sep 2026Recorded 23 Oct 2026

CVE-2026-19780Published

Koha Eval Code Injection Remote Code Execution Vulnerability

cve-program ·

Vendor product: Koha

CVSS 3.0 8.8Source modified 22 Sep 2026Recorded 23 Oct 2026

CVE-2026-81878Published

radare2: Integer overflow causes heap out-of-bounds write in radare2 PYC parser

cve-program ·

Vendor product: radare2

CVSS 3.1 5.5Source modified 22 Sep 2026Recorded 23 Oct 2026

CVE-2026-83598Published

Netdata: Local Privilege Escalation in Netdata Agent Windows installer via PowerShell Profile Hijack in MSI Repair

cve-program ·

Vendor product: netdata

CVSS 3.1 7.8Source modified 22 Sep 2026Recorded 23 Oct 2026

CVE-2026-83597Published

Netdata: Local Privilege Escalation in Netdata Windows Agent installer via MSI Repair Execution

cve-program ·

Vendor product: netdata

CVSS 3.1 7.0Source modified 22 Sep 2026Recorded 23 Oct 2026

CVE-2026-30803Published

Integer Underflow (Wrap or Wraparound) vulnerability in RTI Connext Micro (Core Libraries) allows Overread Buffers.

cve-program ·

Vendor product: connext_micro

CVSS 4.0 8.8Source modified 22 Sep 2026Recorded 23 Oct 2026

CVE-2026-30802Published

Out-of-bounds Read vulnerability in RTI Connext Micro (Core Libraries) allows Overread Buffers.

cve-program ·

Vendor product: connext_micro

CVSS 4.0 8.8Source modified 22 Sep 2026Recorded 23 Oct 2026

CVE-2026-30799Published

Missing Authentication for Critical Function vulnerability in RTI Connext Professional (Security Plugins) allows Identity Spoofing.

cve-program ·

Vendor product: connext_professional

CVSS 4.0 6.1Source modified 22 Sep 2026Recorded 23 Oct 2026

CVE-2026-7300Published

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in RTI Connext Professional (Web Integration Service) allows Filter Failure through Buffer Overflow.

cve-program ·

Vendor product: connext_professional

CVSS 4.0 8.8Source modified 22 Sep 2026Recorded 23 Oct 2026

CVE-2026-4374Published

Improper Restriction of XML External Entity Reference vulnerability in RTI Connext Professional (Recording Service,Routing Service,Queueing Service,Cloud Discovery Service,Observability Collector) allows Serialized Data External Linking, Data Serializat...

cve-program ·

Vendor product: connext_professional

CVSS 4.0 8.8 · CVSS 4.0 7.0Source modified 22 Sep 2026Recorded 23 Oct 2026

A catalog match establishes published evidence, not applicability to your environment. Check resolved package dependencies, or open a Microsoft CVE for fixing KBs, releases and planning.