Security

Microsoft security updates and public advisory evidence: affected products, fixing updates, exploitation and source coverage.

Security Update Guide CISA KEV

Advisory catalog

Public source statements across vendors. Explicit aliases connect records; each publisher keeps its own state, severity and affected-version evidence.

Collected statements

699106 source statements · aliases may refer to the same vulnerability

CVE-2026-3894Published

Out-of-bounds Read vulnerability in RTI Connext Professional (Core Libraries) allows Overread Buffers.

cve-program ·

Vendor product: connext_professional

CVSS 4.0 9.2 · CVSS 4.0 8.2Source modified 22 Sep 2026Recorded 23 Oct 2026

CVE-2026-2675Published

Missing Authentication for Critical Function vulnerability in RTI Connext Professional (Security Plugins) allows Fake the Source of Data.

cve-program ·

Vendor product: connext_professional

CVSS 4.0 6.0Source modified 22 Sep 2026Recorded 23 Oct 2026

CVE-2026-2674Published

Out-of-bounds Write vulnerability in RTI Connext Professional (Queueing Service,Core Libraries,Persistence Service) allows Overflow Buffers.

cve-program ·

Vendor product: connext_professional

CVSS 4.0 4.8Source modified 22 Sep 2026Recorded 23 Oct 2026

CVE-2026-2467Published

Heap-based Buffer Overflow vulnerability in RTI Connext Professional (Core Libraries) allows Overflow Variables and Tags.

cve-program ·

Vendor product: connext_professional

CVSS 4.0 9.2 · CVSS 4.0 8.2Source modified 22 Sep 2026Recorded 23 Oct 2026

CVE-2026-2394Published

Buffer Over-read vulnerability in RTI Connext Professional (Core Libraries) allows Overread Buffers.

cve-program ·

Vendor product: connext_professional

CVSS 4.0 6.3 · CVSS 4.0 4.8Source modified 22 Sep 2026Recorded 23 Oct 2026

CVE-2025-14543Published

Improper Restriction of XML External Entity Reference vulnerability in RTI Connext Professional (Core Libraries) allows Serialized Data External Linking.

cve-program ·

Vendor product: connext_professional

CVSS 4.0 8.8 · CVSS 4.0 6.9Source modified 22 Sep 2026Recorded 23 Oct 2026

CVE-2025-10450Published

Exposure of Private Personal Information to an Unauthorized Actor vulnerability in RTI Connext Professional (Core Libraries) allows Sniffing Network Traffic.

cve-program ·

Vendor product: connext_professional

CVSS 4.0 8.3 · CVSS 4.0 6.1Source modified 22 Sep 2026Recorded 23 Oct 2026

CVE-2025-8410Published

Use After Free vulnerability in RTI Connext Professional (Security Plugins) allows File Manipulation.

cve-program ·

Vendor product: connext_professional

CVSS 4.0 5.8Source modified 22 Sep 2026Recorded 23 Oct 2026

CVE-2025-4993Published

Untrusted Pointer Dereference vulnerability in RTI Connext Professional (Core Libraries) allows Pointer Manipulation.

cve-program ·

Vendor product: connext_professional

CVSS 4.0 8.3Source modified 22 Sep 2026Recorded 23 Oct 2026

CVE-2025-4582Published

Buffer Over-read, Off-by-one Error vulnerability in RTI Connext Professional (Core Libraries) allows File Manipulation, Overread Buffers.

cve-program ·

Vendor product: connext_professional

CVSS 4.0 4.8Source modified 22 Sep 2026Recorded 23 Oct 2026

CVE-2025-1255Published

Untrusted Pointer Dereference vulnerability in RTI Connext Professional (Core Libraries) allows Pointer Manipulation.

cve-program ·

Vendor product: connext_professional

CVSS 4.0 8.3Source modified 22 Sep 2026Recorded 23 Oct 2026

CVE-2025-1254Published

Out-of-bounds Read, Out-of-bounds Write vulnerability in RTI Connext Professional (Recording Service) allows Overflow Buffers, Overread Buffers.

cve-program ·

Vendor product: connext_professional

CVSS 4.0 7.7 · CVSS 4.0 7.3Source modified 22 Sep 2026Recorded 23 Oct 2026

CVE-2025-1253Published

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow'), Stack-based Buffer Overflow vulnerability in RTI Connext Professional (Core Libraries) allows Overflow Variables and Tags.

cve-program ·

Vendor product: connext_professional

CVSS 4.0 6.9Source modified 22 Sep 2026Recorded 23 Oct 2026

CVE-2026-93959Published

SourceCodester Online Reviewer Management System btn_functions.php sql injection

cve-program ·

Vendor product: Online Reviewer Management System

CVSS 4.0 6.9 · CVSS 3.1 7.3 · CVSS 3.0 7.3 · CVSS 2.0 7.5Source modified 22 Sep 2026Recorded 23 Oct 2026

CVE-2026-94413Published

jshERP through 3.6 Password Hash Disclosure via /user/info

cve-program ·

Vendor product: jshERP

CVSS 3.1 6.5 · CVSS 4.0 7.1Source modified 22 Sep 2026Recorded 23 Oct 2026

CVE-2026-94497Published

jshERP through 3.6 Unauthorized Access via by-id Endpoints

cve-program ·

Vendor product: jshERP

CVSS 3.1 8.3 · CVSS 4.0 8.7Source modified 22 Sep 2026Recorded 23 Oct 2026

CVE-2026-94534Published

lamp-cloud through 5.10.0 Unauthorized Profile Modification via PUT endpoints

cve-program ·

Vendor product: lamp-cloud

CVSS 3.1 7.1 · CVSS 4.0 7.1Source modified 22 Sep 2026Recorded 23 Oct 2026

CVE-2026-94623Published

vLLM through 0.29.0 Denial of Service via NIXL Multi-Prompt Assertion Failure

cve-program ·

Vendor product: vllm

CVSS 4.0 8.7 · CVSS 3.1 7.5Source modified 22 Sep 2026Recorded 23 Oct 2026

CVE-2026-81881Published

radare2: Heap out-of-bounds read in radare2 Mach-O Swift metadata parser

cve-program ·

Vendor product: radare2

CVSS 3.1 3.3Source modified 22 Sep 2026Recorded 23 Oct 2026

CVE-2026-81886Published

radare2: Uncontrolled memory allocation in radare2 dmp64 parser

cve-program ·

Vendor product: radare2

CVSS 3.1 5.5Source modified 22 Sep 2026Recorded 23 Oct 2026

CVE-2026-79913Published

Cloudreve: SSRF guard bypass: checkIP does not decode IPv6-transition wrappers (NAT64, IPv4-compatible, 6to4) reaching internal and cloud-metadata addresses

cve-program ·

Vendor product: cloudreve

CVSS 3.1 6.5Source modified 22 Sep 2026Recorded 23 Oct 2026

CVE-2026-77637Published

Cloudreve: Privilege Scope Bypass: State-Mutating Admin Operations Accessible via Read-Only OAuth Scope

cve-program ·

Vendor product: cloudreve

CVSS 3.1 3.8Source modified 22 Sep 2026Recorded 23 Oct 2026

CVE-2026-75517Published

Novu: Cross-Environment Integration Manipulation (IDOR)

cve-program ·

Vendor product: novu · Vendor product: api-service

CVSS 3.1 6.5Source modified 22 Sep 2026Recorded 23 Oct 2026

CVE-2026-85734Published

LightRAG: No Rate Limiting on /login Endpoint Allows Brute-Force Attacks

cve-program ·

Vendor product: LightRAG

CVSS 3.1 9.1Source modified 22 Sep 2026Recorded 23 Oct 2026

CVE-2026-83803Published

Sentry: Unsafe pickle deserialization in Relocation Feature

cve-program ·

Vendor product: sentry

CVSS 4.0 7.7Source modified 22 Sep 2026Recorded 23 Oct 2026

CVE-2026-83599Published

Netdata: WebSocket Decompression Bomb

cve-program ·

Vendor product: netdata

CVSS 3.1 7.5Source modified 22 Sep 2026Recorded 23 Oct 2026

CVE-2026-83603Published

Netdata: Local Root via ndsudo Arbitrary socket_path → fail2ban-client Pickle RCE

cve-program ·

Vendor product: netdata

CVSS 3.1 8.4Source modified 22 Sep 2026Recorded 23 Oct 2026

CVE-2026-85995Published

Notepad++: Authenticode verification bypass allows modified updater execution

cve-program ·

Vendor product: notepad-plus-plus

CVSS 3.1 7.3Source modified 22 Sep 2026Recorded 23 Oct 2026

CVE-2026-86056Published

Notepad++: Null pointer dereference in NPPM_SAVESESSION message handler causes crash (DoS)

cve-program ·

Vendor product: notepad-plus-plus

CVSS 3.1 5.5Source modified 22 Sep 2026Recorded 23 Oct 2026

CVE-2026-82004Published

Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78)

cve-program ·

Vendor product: Adobe Campaign Classic

CVSS 3.1 10.0Source modified 22 Sep 2026Recorded 23 Oct 2026

CVE-2026-95656Published

dgtlmoon changedetection.io Preview Endpoint init.py add_watch_ui_snapshot server-side request forgery

cve-program ·

Vendor product: changedetection.io

CVSS 4.0 6.9 · CVSS 3.1 7.3 · CVSS 3.0 7.3 · CVSS 2.0 7.5Source modified 22 Sep 2026Recorded 23 Oct 2026

CVE-2025-1252Published

Heap-based Buffer Overflow vulnerability in RTI Connext Professional (Core Libraries) allows Overflow Variables and Tags.

cve-program ·

Vendor product: connext_professional

CVSS 4.0 6.9Source modified 22 Sep 2026Recorded 23 Oct 2026

CVE-2024-52059Published

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow'), Heap-based Buffer Overflow, Integer Overflow or Wraparound vulnerability in RTI Connext Professional (Security Plugins) allows Overflow Variables and Tags.

cve-program ·

Vendor product: connext_professional

CVSS 4.0 6.9Source modified 22 Sep 2026Recorded 23 Oct 2026

CVE-2026-56682Published

9Router: Login Brute-Force Lockout Bypass via Spoofable X-9r-Real-Ip Header

cve-program ·

Vendor product: 9router

CVSS 3.1 5.3Source modified 22 Sep 2026Recorded 23 Oct 2026

CVE-2026-83208Published

Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Migration). Supported versions that are affected are 17.0-26.7. Easily exploitable vulnerability allows low privileged attacker with network access via SQL…

cve-program ·

Vendor product: Siebel CRM Deployment

CVSS 3.1 8.8Source modified 22 Sep 2026Recorded 23 Oct 2026

CVE-2026-83210Published

Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.7. Easily exploitable vulnerability allows low privileged attacker with network ac…

cve-program ·

Vendor product: Siebel CRM Deployment

CVSS 3.1 8.8Source modified 22 Sep 2026Recorded 23 Oct 2026

CVE-2026-76819Rejected

Rejected reason: Further research determined the issue results from a dependency.

nvd ·

Source modified 22 Sep 2026Recorded 25 Oct 2026

CVE-2026-95623Published

Tauri framework v2 SSRF Protection Bypass via HTTP Redirects

cve-program ·

https://crates.io/crates/tauri-plugin-http: tauri-plugin-http

CVSS 3.1 5.6Source modified 22 Sep 2026Recorded 23 Oct 2026

GHSA-32gc-64m7-hj7vPublished

9Router has a Login Brute-Force Lockout Bypass via Spoofable X-9r-Real-Ip Header

osv · CVE-2026-56682

npm: 9router

MODERATESource modified 22 Sep 2026Recorded 24 Oct 2026

GHSA-5mj8-gf6m-fhw8Published

9Router has an Authentication Bypass in Public LLM API via Spoofable X-9r-Real-Ip Header

osv · CVE-2026-56681

npm: 9router

HIGHSource modified 22 Sep 2026Recorded 24 Oct 2026

CVE-2026-87238Published

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows low privileged attacker with netw…

cve-program ·

Vendor product: Oracle Hyperion Financial Management

CVSS 3.1 8.8Source modified 22 Sep 2026Recorded 23 Oct 2026

CVE-2026-86059Published

Dokploy: Git Provider Credential Exposure via Unprotected .one Endpoints and application.one

cve-program ·

Vendor product: dokploy

CVSS 3.1 9.6Source modified 22 Sep 2026Recorded 23 Oct 2026

CVE-2026-87207Published

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows high privileged attacker with net…

cve-program ·

Vendor product: Oracle Hyperion Financial Management

CVSS 3.1 7.2Source modified 22 Sep 2026Recorded 23 Oct 2026

CVE-2026-87202Published

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows low privileged attacker with netw…

cve-program ·

Vendor product: Oracle Hyperion Financial Management

CVSS 3.1 8.8Source modified 22 Sep 2026Recorded 23 Oct 2026

CVE-2026-87184Published

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows unauthenticated attacker with net…

cve-program ·

Vendor product: Oracle Hyperion Financial Management

CVSS 3.1 9.8Source modified 22 Sep 2026Recorded 23 Oct 2026

CVE-2026-87082Published

Net::IDN::Punycode versions before 2.590 for Perl hang, crash or return a wrong label via unvalidated malformed UTF-8 in encode_punycode

cve-program ·

https://cpan.org/modules: Net-IDN-Encode

Source modified 22 Sep 2026Recorded 23 Oct 2026

CVE-2026-87081Published

Net::IDN::UTS46 versions before 2.590 for Perl allow CPU exhaustion via quadratic punycode encoding of an overlong label before the length check in to_ascii

cve-program ·

https://cpan.org/modules: Net-IDN-Encode

Source modified 22 Sep 2026Recorded 23 Oct 2026

CVE-2026-87080Published

Net::IDN::Punycode::PP versions before 2.590 for Perl decode a truncated label to a name containing a character it never encoded in decode_punycode

cve-program ·

https://cpan.org/modules: Net-IDN-Encode

Source modified 22 Sep 2026Recorded 23 Oct 2026

CVE-2026-87079Published

Net::IDN::Punycode versions before 2.590 for Perl allow CPU exhaustion via quadratic insertion cost when decoding a long label in decode_punycode

cve-program ·

https://cpan.org/modules: Net-IDN-Encode

Source modified 22 Sep 2026Recorded 23 Oct 2026

CVE-2026-87078Published

Net::IDN::Punycode versions from 2.302 before 2.590 for Perl leak the output buffer on every rejected label in decode_punycode

cve-program ·

https://cpan.org/modules: Net-IDN-Encode

Source modified 22 Sep 2026Recorded 23 Oct 2026

A catalog match establishes published evidence, not applicability to your environment. Check resolved package dependencies, or open a Microsoft CVE for fixing KBs, releases and planning.