Security

Microsoft security updates and public advisory evidence: affected products, fixing updates, exploitation and source coverage.

Security Update Guide CISA KEV

Advisory catalog

Public source statements across vendors. Explicit aliases connect records; each publisher keeps its own state, severity and affected-version evidence.

Collected statements

699348 source statements · aliases may refer to the same vulnerability

CVE-2026-92465Published

WordPress WP Mega Menu plugin <= 1.4.2 - SQL Injection vulnerability

cve-program ·

https://wordpress.org/plugins: wp-megamenu

CVSS 3.1 7.6Source modified 16 Sep 2026Recorded 23 Oct 2026

CVE-2026-79970Published

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Verification of Cryptographic Signature vulnerability. An unauthenticated attacker with remote access could …

cve-program ·

Vendor product: Secure Connect Gateway 5.0 - Application · Vendor product: Secure Connect Gateway 5.0 - Appliance

CVSS 3.1 5.6Source modified 16 Sep 2026Recorded 23 Oct 2026

CVE-2026-79770Published

Nokogiri before 1.19.3 ReDoS via CSS selector tokenizer

cve-program ·

Vendor product: nokogiri

CVSS 4.0 8.7 · CVSS 3.1 7.5Source modified 16 Sep 2026Recorded 23 Oct 2026

CVE-2026-91964Published

FreeRDP 2.0.0 through 3.30.0 Heap Buffer Overflow via RoutingToken

cve-program ·

Vendor product: FreeRDP · Vendor product: FreeRDP

CVSS 4.0 8.7 · CVSS 3.1 8.8Source modified 16 Sep 2026Recorded 23 Oct 2026

CVE-2026-88765Published

Improper Neutralization of Special Elements used in a Command ('Command Injection') in GitLab

cve-program ·

Vendor product: GitLab

CVSS 3.1 8.5Source modified 16 Sep 2026Recorded 23 Oct 2026

CVE-2026-81236Published

Dell Wyse Management Suite, versions prior to 2605.0.3.683, contain an Unrestricted Upload of File with Dangerous Type vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Re…

cve-program ·

Vendor product: Wyse Management Suite

CVSS 3.1 8.6Source modified 16 Sep 2026Recorded 23 Oct 2026

CVE-2026-73467Published

On affected platforms running Arista EOS, under certain circumstances plaintext shared secrets for configured Terminal Access Controller Access-Control System Plus (TACACS+) servers

cve-program ·

Vendor product: EOS

CVSS 3.1 6.3 · CVSS 4.0 6.0Source modified 16 Sep 2026Recorded 23 Oct 2026

CVE-2026-92362Published

ag-ui-protocol ag-ui SSE Frame sse.rs resource consumption

cve-program ·

Vendor product: ag-ui

CVSS 4.0 6.9 · CVSS 3.1 7.3 · CVSS 3.0 7.3 · CVSS 2.0 7.5Source modified 16 Sep 2026Recorded 23 Oct 2026

CVE-2026-50166Published

Kuma: kumactl connects to control plane without verifying TLS certificate when no CA is configured

cve-program ·

Vendor product: kuma

CVSS 4.0 5.5Source modified 16 Sep 2026Recorded 23 Oct 2026

CVE-2025-14871Published

Allocation of Resources Without Limits or Throttling in GitLab

cve-program ·

Vendor product: GitLab

CVSS 3.1 7.5Source modified 16 Sep 2026Recorded 23 Oct 2026

CVE-2026-61590Published

djust's observability endpoints are network-exposed: the localhost gate is an opt-in middleware the docs omit, and the views enforce only DEBUG

cve-program ·

Vendor product: djust

CVSS 3.1 7.4Source modified 16 Sep 2026Recorded 23 Oct 2026

CVE-2026-50024Published

GitHacker: Path traversal in ref/hash parsing enables existence oracle and hex-fragment exfiltration via a malicious .git server

cve-program ·

Vendor product: GitHacker

CVSS 3.1 5.3Source modified 16 Sep 2026Recorded 23 Oct 2026

CVE-2026-1168Published

Allocation of Resources Without Limits or Throttling in GitLab

cve-program ·

Vendor product: GitLab

CVSS 3.1 7.5Source modified 16 Sep 2026Recorded 23 Oct 2026

CVE-2026-55302Published

In multiple locations, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.

cve-program ·

Vendor product: Android

Source modified 16 Sep 2026Recorded 23 Oct 2026

CVE-2026-88064Published

Backstage: Improper input validation in TechDocs MkDocs configuration

cve-program ·

Vendor product: backstage

CVSS 3.1 8.8Source modified 16 Sep 2026Recorded 23 Oct 2026

CVE-2026-3855Published

Improper Control of Resource Identifiers ('Resource Injection') in GitLab

cve-program ·

Vendor product: GitLab

CVSS 3.1 3.1Source modified 16 Sep 2026Recorded 23 Oct 2026

CVE-2026-92380Published

WuzhiCMS Remote Image Fetch index.php saveRemote server-side request forgery

cve-program ·

Vendor product: WuzhiCMS

CVSS 4.0 6.9 · CVSS 3.1 7.3 · CVSS 3.0 7.3 · CVSS 2.0 7.5Source modified 16 Sep 2026Recorded 23 Oct 2026

CVE-2026-7514Published

Missing Authorization in GitLab

cve-program ·

Vendor product: GitLab

CVSS 3.1 4.3Source modified 16 Sep 2026Recorded 23 Oct 2026

CVE-2026-8030Published

Missing Authorization in GitLab

cve-program ·

Vendor product: GitLab

CVSS 3.1 4.3Source modified 16 Sep 2026Recorded 23 Oct 2026

CVE-2026-55691Published

EmbedVideo Extension : Stored XSS via unsanitized class passed to template

cve-program ·

Vendor product: mediawiki-extensions-EmbedVideo

CVSS 3.1 8.6Source modified 16 Sep 2026Recorded 23 Oct 2026

CVE-2026-77403Published

RabbitMQ amqp091-go: Denial of Service via Sub-Spec Frame Size Negotiation

cve-program ·

Vendor product: amqp091-go

CVSS 4.0 8.9Source modified 16 Sep 2026Recorded 23 Oct 2026

CVE-2026-16794Published

Missing Authorization in GitLab

cve-program ·

Vendor product: GitLab

CVSS 3.1 4.3Source modified 16 Sep 2026Recorded 23 Oct 2026

CVE-2026-55864Published

GeoNetwork: Unauthenticaded Server-Side Request Forgery in SLD Tool

cve-program ·

Vendor product: core-geonetwork

CVSS 4.0 7.8Source modified 16 Sep 2026Recorded 23 Oct 2026

CVE-2026-78252Published

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab

cve-program ·

Vendor product: GitLab

CVSS 3.1 8.2Source modified 16 Sep 2026Recorded 23 Oct 2026

CVE-2026-77410Published

RabbitMQ amqp091-go: Resource Exhaustion (OOM) via Unbounded Body Buffer Allocation

cve-program ·

Vendor product: amqp091-go

CVSS 4.0 8.9Source modified 16 Sep 2026Recorded 23 Oct 2026

CVE-2026-91947Published

FreeRDP Server before 3.31.0 Use-After-Free via DRDYNVC

cve-program ·

Vendor product: FreeRDP

CVSS 4.0 7.7 · CVSS 3.1 7.5Source modified 16 Sep 2026Recorded 23 Oct 2026

CVE-2026-79708Published

Incorrect Authorization in GitLab

cve-program ·

Vendor product: GitLab

CVSS 3.1 8.5Source modified 16 Sep 2026Recorded 23 Oct 2026

CVE-2026-63127Published

RMCP: Missing Resource Field Validation in OAuth Protected Resource Metadata Discovery

cve-program ·

Vendor product: rust-sdk

CVSS 3.1 8.2Source modified 16 Sep 2026Recorded 23 Oct 2026

CVE-2026-59157Published

webhookd: Unrestricted HTTP Header to Shell Variable Injection

cve-program ·

Vendor product: webhookd

CVSS 3.1 6.5Source modified 16 Sep 2026Recorded 23 Oct 2026

CVE-2026-53658Published

Fabric CA: LDAP Injection via Unescaped Username in GetUser Filter

cve-program ·

Vendor product: fabric-ca

CVSS 4.0 6.3Source modified 16 Sep 2026Recorded 23 Oct 2026

CVE-2026-27557Published

Path Traversal in /index.php/view_uploaded_iodd_file

cve-program ·

Vendor product: ICE2-8IOL1-G65L-V1D · Vendor product: ICE2-8IOL-G65L-V1D · Vendor product: ICE2-8IOL-K45P-RJ45

CVSS 3.1 7.5Source modified 16 Sep 2026Recorded 23 Oct 2026

CVE-2026-23939Published

Path Traversal in Local File Store Backend

cve-program ·

https://github.com: hexpm/hexpm

CVSS 4.0 6.9Source modified 16 Sep 2026Recorded 23 Oct 2026

CVE-2025-36591Published

Dell ECS versions 3.8.1.0 through 3.8.1.7, and Dell ObjectScale versions prior to 4.4.0.0, contains an Use of a Broken or Risky Cryptographic Algorithm vulnerability. A high privileged attacker with local access could potentially exploit th…

cve-program ·

Vendor product: Elastic Cloud Storage (ECS)

CVSS 3.1 4.4Source modified 16 Sep 2026Recorded 23 Oct 2026

CVE-2026-78227Published

Use-after-free in DoQ stream output buffer on reset re-transmission

cve-program ·

Vendor product: Unbound

CVSS 3.1 6.5Source modified 16 Sep 2026Recorded 23 Oct 2026

CVE-2026-73435Published

Security Advisory 0171

cve-program ·

Vendor product: EOS

CVSS 3.1 8.2 · CVSS 4.0 7.0Source modified 16 Sep 2026Recorded 23 Oct 2026

CVE-2026-92364Published

itsourcecode Leave Management System index.php sql injection

cve-program ·

Vendor product: Leave Management System

CVSS 4.0 5.3 · CVSS 3.1 6.3 · CVSS 3.0 6.3 · CVSS 2.0 6.5Source modified 16 Sep 2026Recorded 23 Oct 2026

CVE-2026-61598Published

Client mass-assignment of arbitrary view attributes via the default dj-model update_model handler

cve-program ·

Vendor product: djust

CVSS 4.0 7.1Source modified 16 Sep 2026Recorded 23 Oct 2026

CVE-2026-88976Published

@platejs/core HTML deserialization can trigger browser behavior during parsing

cve-program ·

Vendor product: plate

CVSS 3.1 6.1Source modified 16 Sep 2026Recorded 23 Oct 2026

CVE-2026-55846Published

Allure: Path Traversal in Allure Report HTTP Server Allows Arbitrary File Read

cve-program ·

Vendor product: allure2

CVSS 3.1 6.2Source modified 16 Sep 2026Recorded 23 Oct 2026

CVE-2026-54567Published

Flask-Reuploaded: Extension-denylist bypass via case-folding asymmetry in name-override path (incomplete-fix variant of CVE-2026-27641)

cve-program ·

Vendor product: flask-reuploaded

CVSS 3.1 7.5Source modified 16 Sep 2026Recorded 23 Oct 2026

CVE-2026-77404Published

RabbitMQ amqp091-go: Connection Configuration Overwrite via Unsanitized TLS Path Parameter Injection

cve-program ·

Vendor product: amqp091-go

CVSS 4.0 8.7Source modified 16 Sep 2026Recorded 23 Oct 2026

CVE-2026-49400Published

October CMS: PHP Object Injection via Backend Widget Session Storage

cve-program ·

Vendor product: october

CVSS 3.1 3.3Source modified 16 Sep 2026Recorded 23 Oct 2026

CVE-2026-55837Published

dbt-mcp: Unauthenticated OAuth Context Endpoint Leaks dbt Platform Tokens

cve-program ·

Vendor product: dbt-mcp

CVSS 3.1 6.8Source modified 16 Sep 2026Recorded 23 Oct 2026

CVE-2026-55073Published

WeasyPrint restrictive URL fetcher bypass allows local file read and SSRF

cve-program ·

Vendor product: WeasyPrint

CVSS 3.1 6.2Source modified 16 Sep 2026Recorded 23 Oct 2026

CVE-2026-63128Published

RMCP: Unauthenticated permanent session-table leak in rmcp Streamable HTTP server transport leads to remote denial-of-service

cve-program ·

Vendor product: rust-sdk

CVSS 3.1 7.5Source modified 16 Sep 2026Recorded 23 Oct 2026

CVE-2026-90802Published

GNU Binutils ld libbfd.c bfd_putl64 null pointer dereference

cve-program ·

Vendor product: Binutils

CVSS 4.0 4.8 · CVSS 3.1 4.4 · CVSS 3.0 4.4 · CVSS 2.0 3.2Source modified 16 Sep 2026Recorded 23 Oct 2026

CVE-2026-54452Published

safeurl: Missing IPv6 CIDR Ranges in Blocklist

cve-program ·

Vendor product: safeurl

CVSS 4.0 6.3Source modified 16 Sep 2026Recorded 23 Oct 2026

CVE-2026-82410Published

Pocketbase: Unhandled panic in worker goroutines

cve-program ·

Vendor product: pocketbase

CVSS 4.0 8.7Source modified 16 Sep 2026Recorded 23 Oct 2026

CVE-2026-55235Published

langgraph-api: Relative webhook targets in LangGraph Server can reach in-process routes without authentication

cve-program ·

Vendor product: langgraph-api

CVSS 3.1 5.9Source modified 16 Sep 2026Recorded 23 Oct 2026

CVE-2026-54541Published

Nimiq: Panic in TrieProof::verify via child_index unwrap on equal-length keys

cve-program ·

Vendor product: core-rs-albatross

CVSS 3.1 3.7Source modified 16 Sep 2026Recorded 23 Oct 2026

A catalog match establishes published evidence, not applicability to your environment. Check resolved package dependencies, or open a Microsoft CVE for fixing KBs, releases and planning.