Security

Microsoft security updates and public advisory evidence: affected products, fixing updates, exploitation and source coverage.

Security Update Guide CISA KEV

Advisory catalog

Public source statements across vendors. Explicit aliases connect records; each publisher keeps its own state, severity and affected-version evidence.

Collected statements

699171 source statements · aliases may refer to the same vulnerability

CVE-2026-93965Published

aiyiyi121 SxDevOps MCP STDIO Server Management services.py subprocess.Popen command injection

cve-program ·

Vendor product: SxDevOps

CVSS 4.0 5.1 · CVSS 3.1 6.6 · CVSS 3.0 6.6 · CVSS 2.0 5.8Source modified 21 Sep 2026Recorded 23 Oct 2026

CVE-2026-73546Published

Envoy: Stored XSS in Admin Stats Interface (/stats?format=html)

cve-program ·

Vendor product: envoy

CVSS 3.1 7.4Source modified 21 Sep 2026Recorded 23 Oct 2026

CVE-2026-55897Published

luci-app-advanced-reboot read ACL exposes /bin/sh through file.exec, allowing delegated users to run commands as root

cve-program ·

Vendor product: luci

CVSS 3.1 8.8Source modified 21 Sep 2026Recorded 23 Oct 2026

CVE-2026-61747Published

InvenTree: Authenticated IDOR in the data-import API exposes other users' imported rows (`row_data`/`data`) and column mappings

cve-program ·

Vendor product: InvenTree

CVSS 3.1 4.3Source modified 21 Sep 2026Recorded 23 Oct 2026

CVE-2026-93975Published

code-projects Assessment Management User Editing edit-user.php cross site scripting

cve-program ·

Vendor product: Assessment Management

CVSS 4.0 4.8 · CVSS 3.1 2.4 · CVSS 3.0 2.4 · CVSS 2.0 3.3Source modified 21 Sep 2026Recorded 23 Oct 2026

CVE-2026-48521Published

Envoy: HTTP/3 connection pool selection null-derefs in ProdClusterManagerFactory::allocateConnPool when transport_socket_options is null

cve-program ·

Vendor product: envoy

CVSS 3.1 5.9Source modified 21 Sep 2026Recorded 23 Oct 2026

CVE-2026-76669Published

Authorization Bypass Leading to Privilege Escalation in EdgeConnect SD-WAN Orchestrator

cve-program ·

Vendor product: EdgeConnect SD-WAN Gateways

CVSS 3.1 9.9Source modified 21 Sep 2026Recorded 23 Oct 2026

CVE-2026-76670Published

Authorization Bypass Leading to Privilege Escalation in EdgeConnect SD-WAN Orchestrator

cve-program ·

Vendor product: EdgeConnect SD-WAN Gateways

CVSS 3.1 9.9Source modified 21 Sep 2026Recorded 23 Oct 2026

CVE-2026-76674Published

Unauthenticated Buffer Overflow Vulnerabilities lead to Remote Code Execution in HPE Networking EdgeConnect SD-WAN Gateways

cve-program ·

Vendor product: EdgeConnect SD-WAN Gateways

CVSS 3.1 9.8Source modified 21 Sep 2026Recorded 23 Oct 2026

CVE-2026-76676Published

Unauthenticated Buffer Overflow Vulnerabilities lead to Remote Code Execution in EdgeConnect SD-WAN Gateways

cve-program ·

Vendor product: EdgeConnect SD-WAN Gateways

CVSS 3.1 8.8Source modified 21 Sep 2026Recorded 23 Oct 2026

CVE-2026-76683Published

Unauthenticated Buffer Overflow Vulnerabilities lead to Remote Code Execution in HPE Networking EdgeConnect SD-WAN Gateways

cve-program ·

Vendor product: EdgeConnect SD-WAN Gateways

CVSS 3.1 8.1Source modified 21 Sep 2026Recorded 23 Oct 2026

CVE-2026-76702Published

Authenticated Local Denial-of-Service Vulnerability in HPE Networking EdgeConnect SD-WAN Gateways

cve-program ·

Vendor product: EdgeConnect SD-WAN Gateways

CVSS 3.1 5.8Source modified 21 Sep 2026Recorded 23 Oct 2026

CVE-2026-76682Published

Unauthenticated Denial-of-Service Vulnerabilities in HPE Networking EdgeConnect SD-WAN Gateways

cve-program ·

Vendor product: EdgeConnect SD-WAN Gateways

CVSS 3.1 8.2Source modified 21 Sep 2026Recorded 23 Oct 2026

CVE-2026-76681Published

Authenticated Information Disclosure Vulnerability in HPE Networking EdgeConnect SD-WAN Orchestrator API

cve-program ·

Vendor product: EdgeConnect SD-WAN Gateways

CVSS 3.1 8.5Source modified 21 Sep 2026Recorded 23 Oct 2026

CVE-2026-76701Published

Unauthenticated Sensitive Information Disclosure in HPE Networking EdgeConnect SD-WAN Gateways

cve-program ·

Vendor product: EdgeConnect SD-WAN Gateways

CVSS 3.1 5.9Source modified 21 Sep 2026Recorded 23 Oct 2026

CVE-2026-76678Published

Authenticated Command Injection Vulnerability leads to Remote Code Execution in EdgeConnect SD-WAN Gateways

cve-program ·

Vendor product: EdgeConnect SD-WAN Gateways

CVSS 3.1 8.8Source modified 21 Sep 2026Recorded 23 Oct 2026

CVE-2026-76677Published

Authorization Bypass Leading to Privilege Escalation in HPE Networking EdgeConnect SD-WAN Gateways

cve-program ·

Vendor product: EdgeConnect SD-WAN Gateways

CVSS 3.1 8.8Source modified 21 Sep 2026Recorded 23 Oct 2026

CVE-2026-76675Published

Authenticated Command Injection Vulnerability Leads to Privilege Escalation in EdgeConnect SD-WAN Gateways

cve-program ·

Vendor product: EdgeConnect SD-WAN Gateways

CVSS 3.1 9.1Source modified 21 Sep 2026Recorded 23 Oct 2026

CVE-2026-76703Published

Authenticated Buffer Overflow Vulnerability in HPE Networking EdgeConnect SD-WAN Gateways Web-Based Management Interface Causes Denial-of-Service

cve-program ·

Vendor product: EdgeConnect SD-WAN Gateways

CVSS 3.1 5.5Source modified 21 Sep 2026Recorded 23 Oct 2026

CVE-2026-52835Published

Tautulli: Path traversal / arbitrary file write via unsanitized upload filename in import_config and import_database

cve-program ·

Vendor product: Tautulli

CVSS 4.0 7.0Source modified 21 Sep 2026Recorded 23 Oct 2026

CVE-2026-94043Published

Free5GC Gmm handler.go race condition

cve-program ·

Vendor product: Free5GC

CVSS 4.0 6.9 · CVSS 3.1 5.3 · CVSS 3.0 5.3 · CVSS 2.0 5.0Source modified 21 Sep 2026Recorded 23 Oct 2026

CVE-2026-76673Published

Authentication Bypass Vulnerabilities in API of EdgeConnect SD-WAN Orchestrator

cve-program ·

Vendor product: EdgeConnect SD-WAN Gateways

CVSS 3.1 9.8Source modified 21 Sep 2026Recorded 23 Oct 2026

CVE-2026-76684Published

Authentication Bypass Vulnerabilities in HPE Networking EdgeConnect SD-WAN Orchestrator API

cve-program ·

Vendor product: EdgeConnect SD-WAN Gateways

CVSS 3.1 8.1Source modified 21 Sep 2026Recorded 23 Oct 2026

CVE-2026-94048Published

CodeAstro QR Code Attendance Management System UserController.php save privileges management

cve-program ·

Vendor product: QR Code Attendance Management System

CVSS 4.0 5.1 · CVSS 3.1 6.6 · CVSS 3.0 6.6 · CVSS 2.0 5.8Source modified 21 Sep 2026Recorded 23 Oct 2026

CVE-2026-76679Published

Unauthenticated Denial-of-Service Vulnerabilities in HPE Networking EdgeConnect SD-WAN Gateways

cve-program ·

Vendor product: EdgeConnect SD-WAN Gateways

CVSS 3.1 8.6Source modified 21 Sep 2026Recorded 23 Oct 2026

CVE-2026-76680Published

Authenticated Server-Side Request Forgery Vulnerabilities Leading to Information Disclosure in EdgeConnect SD-WAN Orchestrator

cve-program ·

Vendor product: EdgeConnect SD-WAN Gateways

CVSS 3.1 8.5Source modified 21 Sep 2026Recorded 23 Oct 2026

CVE-2026-87134Published

Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows low privileged…

cve-program ·

Vendor product: Oracle Hyperion Data Relationship Management

CVSS 3.1 7.7Source modified 21 Sep 2026Recorded 23 Oct 2026

CVE-2026-94090Published

JusticeRage Manalyze PE Parser pe.cpp _parse_debug integer underflow

cve-program ·

Vendor product: Manalyze

CVSS 4.0 5.3 · CVSS 3.1 6.3 · CVSS 3.0 6.3 · CVSS 2.0 7.5Source modified 21 Sep 2026Recorded 23 Oct 2026

CVE-2026-87132Published

Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows low privileged…

cve-program ·

Vendor product: Oracle Hyperion Data Relationship Management

CVSS 3.1 7.6Source modified 21 Sep 2026Recorded 23 Oct 2026

CVE-2026-94128Published

BioStar VIVID LED DJ IOCTL BS_LED64.sys sub_1105C write-what-where

cve-program ·

Vendor product: VIVID LED DJ

CVSS 4.0 9.3 · CVSS 3.1 8.8 · CVSS 3.0 8.8 · CVSS 2.0 6.8Source modified 21 Sep 2026Recorded 23 Oct 2026

CVE-2026-87131Published

Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows low privileged…

cve-program ·

Vendor product: Oracle Hyperion Data Relationship Management

CVSS 3.1 7.6Source modified 21 Sep 2026Recorded 23 Oct 2026

CVE-2026-5883Published

Use after free in Media in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Medium)

cve-program ·

Vendor product: Chrome

Source modified 21 Sep 2026Recorded 23 Oct 2026

CVE-2026-34486Published

Apache Tomcat: Fix for CVE-2026-29146 allowed bypass of EncryptInterceptor

cve-program ·

Vendor product: Apache Tomcat

Source modified 21 Sep 2026Recorded 23 Oct 2026

CVE-2026-26731Published

TOTOLINK A3002RU V2.1.1-B20211108.1455 was discovered to contain a stack-based buffer overflow via the routernamer`parameter in the formDnsv6 function.

cve-program ·

Vendor product: n/a

Source modified 21 Sep 2026Recorded 23 Oct 2026

CVE-2026-87146Published

Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows low privileged…

cve-program ·

Vendor product: Oracle Hyperion Data Relationship Management

CVSS 3.1 7.1Source modified 21 Sep 2026Recorded 23 Oct 2026

CVE-2026-94038Published

NonceGeek dim-sum-app Deno Backend main.tsx textSearchV2Handler server-side request forgery

cve-program ·

Vendor product: dim-sum-app

CVSS 4.0 6.9 · CVSS 3.1 7.3 · CVSS 3.0 7.3 · CVSS 2.0 7.5Source modified 21 Sep 2026Recorded 23 Oct 2026

CVE-2026-2771Published

Undefined behavior in the DOM: Core & HTML component

cve-program ·

Vendor product: Firefox · Vendor product: Thunderbird

Source modified 21 Sep 2026Recorded 23 Oct 2026

CVE-2026-87135Published

Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows low privileged…

cve-program ·

Vendor product: Oracle Hyperion Data Relationship Management

CVSS 3.1 7.1Source modified 21 Sep 2026Recorded 23 Oct 2026

CVE-2026-87161Published

Vulnerability in the Oracle HRMS (India) product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with net…

cve-program ·

Vendor product: Oracle HRMS (India)

CVSS 3.1 8.5Source modified 21 Sep 2026Recorded 23 Oct 2026

CVE-2026-94210Published

Hyve5 Leantime Kanban Board Tickets.php getAllGrouped cross site scripting

cve-program ·

Vendor product: Leantime

CVSS 4.0 5.1 · CVSS 3.1 3.5 · CVSS 3.0 3.5 · CVSS 2.0 4.0Source modified 21 Sep 2026Recorded 23 Oct 2026

CVE-2026-87160Published

Vulnerability in the Oracle HRMS (India) product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with net…

cve-program ·

Vendor product: Oracle HRMS (India)

CVSS 3.1 7.1Source modified 21 Sep 2026Recorded 23 Oct 2026

CVE-2026-94185Published

nvm alias resolution follows `..` and discloses files outside $NVM_DIR/alias

cve-program ·

https://github.com/nvm-sh/nvm: nvm

CVSS 3.1 5.5 · CVSS 4.0 6.7Source modified 21 Sep 2026Recorded 23 Oct 2026

CVE-2026-90860Published

The Canva Mobile App for HarmonyOS before v1.15.1 did not restrict the headers returned to an external origin running in a privileged WebView. A threat actor with control of the WebView could access a user’s session.

cve-program ·

Vendor product: Canva

CVSS 3.1 7.1Source modified 21 Sep 2026Recorded 23 Oct 2026

CVE-2026-77021Published

Missing decompression size limit in agent receiver allows memory exhaustion via push agent data

cve-program ·

Vendor product: Checkmk

CVSS 4.0 5.3Source modified 21 Sep 2026Recorded 23 Oct 2026

CVE-2026-84285Published

OS Command Injection vulnerability affecting Tuleap Enterprise Edition from 17.3 through 17.5

cve-program ·

Vendor product: Tuleap Enterprise Edition

CVSS 3.1 8.8Source modified 21 Sep 2026Recorded 23 Oct 2026

CVE-2026-83346Published

Vulnerability in the Oracle Fusion Middleware Control product of Oracle Fusion Middleware (component: Framework). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged a…

cve-program ·

Vendor product: Oracle Fusion Middleware Control

CVSS 3.1 5.4Source modified 21 Sep 2026Recorded 23 Oct 2026

CVE-2026-94095Published

Netcore NBR200V2 Traceroute Diagnostic Feature network_tools command injection

cve-program ·

Vendor product: NBR200V2

CVSS 4.0 9.4 · CVSS 3.1 9.9 · CVSS 3.0 9.9 · CVSS 2.0 9.0Source modified 21 Sep 2026Recorded 23 Oct 2026

CVE-2026-83437Published

Vulnerability in the Oracle Engineering product of Oracle E-Business Suite (component: Change Management). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with networ…

cve-program ·

Vendor product: Oracle Engineering

CVSS 3.1 7.7Source modified 21 Sep 2026Recorded 23 Oct 2026

CVE-2026-94142Published

BioStar Temperature Monitor Utility IOCTL BS_HWMIO64_W10.sys sub_1105C write-what-where

cve-program ·

Vendor product: Temperature Monitor Utility

CVSS 4.0 9.3 · CVSS 3.1 8.8 · CVSS 3.0 8.8 · CVSS 2.0 6.8Source modified 21 Sep 2026Recorded 23 Oct 2026

CVE-2026-83436Published

Vulnerability in the Oracle Depot Repair product of Oracle E-Business Suite (component: Recall Management). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with netwo…

cve-program ·

Vendor product: Oracle Depot Repair

CVSS 3.1 7.1Source modified 21 Sep 2026Recorded 23 Oct 2026

A catalog match establishes published evidence, not applicability to your environment. Check resolved package dependencies, or open a Microsoft CVE for fixing KBs, releases and planning.