Security

Microsoft security updates and public advisory evidence: affected products, fixing updates, exploitation and source coverage.

Security Update Guide CISA KEV

Advisory catalog

Public source statements across vendors. Explicit aliases connect records; each publisher keeps its own state, severity and affected-version evidence.

Collected statements

699685 source statements · aliases may refer to the same vulnerability

CVE-2026-1168Published

Allocation of Resources Without Limits or Throttling in GitLab

cve-program ·

Vendor product: GitLab

CVSS 3.1 7.5Source modified 16 Sep 2026Recorded 23 Oct 2026

CVE-2026-55302Published

In multiple locations, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.

cve-program ·

Vendor product: Android

Source modified 16 Sep 2026Recorded 23 Oct 2026

CVE-2026-88064Published

Backstage: Improper input validation in TechDocs MkDocs configuration

cve-program ·

Vendor product: backstage

CVSS 3.1 8.8Source modified 16 Sep 2026Recorded 23 Oct 2026

CVE-2026-3855Published

Improper Control of Resource Identifiers ('Resource Injection') in GitLab

cve-program ·

Vendor product: GitLab

CVSS 3.1 3.1Source modified 16 Sep 2026Recorded 23 Oct 2026

CVE-2026-92380Published

WuzhiCMS Remote Image Fetch index.php saveRemote server-side request forgery

cve-program ·

Vendor product: WuzhiCMS

CVSS 4.0 6.9 · CVSS 3.1 7.3 · CVSS 3.0 7.3 · CVSS 2.0 7.5Source modified 16 Sep 2026Recorded 23 Oct 2026

CVE-2026-7514Published

Missing Authorization in GitLab

cve-program ·

Vendor product: GitLab

CVSS 3.1 4.3Source modified 16 Sep 2026Recorded 23 Oct 2026

CVE-2026-8030Published

Missing Authorization in GitLab

cve-program ·

Vendor product: GitLab

CVSS 3.1 4.3Source modified 16 Sep 2026Recorded 23 Oct 2026

CVE-2026-55691Published

EmbedVideo Extension : Stored XSS via unsanitized class passed to template

cve-program ·

Vendor product: mediawiki-extensions-EmbedVideo

CVSS 3.1 8.6Source modified 16 Sep 2026Recorded 23 Oct 2026

CVE-2026-77403Published

RabbitMQ amqp091-go: Denial of Service via Sub-Spec Frame Size Negotiation

cve-program ·

Vendor product: amqp091-go

CVSS 4.0 8.9Source modified 16 Sep 2026Recorded 23 Oct 2026

CVE-2026-16794Published

Missing Authorization in GitLab

cve-program ·

Vendor product: GitLab

CVSS 3.1 4.3Source modified 16 Sep 2026Recorded 23 Oct 2026

CVE-2026-55864Published

GeoNetwork: Unauthenticaded Server-Side Request Forgery in SLD Tool

cve-program ·

Vendor product: core-geonetwork

CVSS 4.0 7.8Source modified 16 Sep 2026Recorded 23 Oct 2026

CVE-2026-78252Published

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab

cve-program ·

Vendor product: GitLab

CVSS 3.1 8.2Source modified 16 Sep 2026Recorded 23 Oct 2026

CVE-2026-77410Published

RabbitMQ amqp091-go: Resource Exhaustion (OOM) via Unbounded Body Buffer Allocation

cve-program ·

Vendor product: amqp091-go

CVSS 4.0 8.9Source modified 16 Sep 2026Recorded 23 Oct 2026

CVE-2026-91947Published

FreeRDP Server before 3.31.0 Use-After-Free via DRDYNVC

cve-program ·

Vendor product: FreeRDP

CVSS 4.0 7.7 · CVSS 3.1 7.5Source modified 16 Sep 2026Recorded 23 Oct 2026

CVE-2026-79708Published

Incorrect Authorization in GitLab

cve-program ·

Vendor product: GitLab

CVSS 3.1 8.5Source modified 16 Sep 2026Recorded 23 Oct 2026

CVE-2026-63127Published

RMCP: Missing Resource Field Validation in OAuth Protected Resource Metadata Discovery

cve-program ·

Vendor product: rust-sdk

CVSS 3.1 8.2Source modified 16 Sep 2026Recorded 23 Oct 2026

CVE-2026-59157Published

webhookd: Unrestricted HTTP Header to Shell Variable Injection

cve-program ·

Vendor product: webhookd

CVSS 3.1 6.5Source modified 16 Sep 2026Recorded 23 Oct 2026

CVE-2026-53658Published

Fabric CA: LDAP Injection via Unescaped Username in GetUser Filter

cve-program ·

Vendor product: fabric-ca

CVSS 4.0 6.3Source modified 16 Sep 2026Recorded 23 Oct 2026

CVE-2026-27557Published

Path Traversal in /index.php/view_uploaded_iodd_file

cve-program ·

Vendor product: ICE2-8IOL1-G65L-V1D · Vendor product: ICE2-8IOL-G65L-V1D · Vendor product: ICE2-8IOL-K45P-RJ45

CVSS 3.1 7.5Source modified 16 Sep 2026Recorded 23 Oct 2026

CVE-2026-23939Published

Path Traversal in Local File Store Backend

cve-program ·

https://github.com: hexpm/hexpm

CVSS 4.0 6.9Source modified 16 Sep 2026Recorded 23 Oct 2026

CVE-2025-36591Published

Dell ECS versions 3.8.1.0 through 3.8.1.7, and Dell ObjectScale versions prior to 4.4.0.0, contains an Use of a Broken or Risky Cryptographic Algorithm vulnerability. A high privileged attacker with local access could potentially exploit th…

cve-program ·

Vendor product: Elastic Cloud Storage (ECS)

CVSS 3.1 4.4Source modified 16 Sep 2026Recorded 23 Oct 2026

CVE-2026-78227Published

Use-after-free in DoQ stream output buffer on reset re-transmission

cve-program ·

Vendor product: Unbound

CVSS 3.1 6.5Source modified 16 Sep 2026Recorded 23 Oct 2026

CVE-2026-73435Published

Security Advisory 0171

cve-program ·

Vendor product: EOS

CVSS 3.1 8.2 · CVSS 4.0 7.0Source modified 16 Sep 2026Recorded 23 Oct 2026

CVE-2026-92364Published

itsourcecode Leave Management System index.php sql injection

cve-program ·

Vendor product: Leave Management System

CVSS 4.0 5.3 · CVSS 3.1 6.3 · CVSS 3.0 6.3 · CVSS 2.0 6.5Source modified 16 Sep 2026Recorded 23 Oct 2026

CVE-2026-61598Published

Client mass-assignment of arbitrary view attributes via the default dj-model update_model handler

cve-program ·

Vendor product: djust

CVSS 4.0 7.1Source modified 16 Sep 2026Recorded 23 Oct 2026

CVE-2026-88976Published

@platejs/core HTML deserialization can trigger browser behavior during parsing

cve-program ·

Vendor product: plate

CVSS 3.1 6.1Source modified 16 Sep 2026Recorded 23 Oct 2026

CVE-2026-55846Published

Allure: Path Traversal in Allure Report HTTP Server Allows Arbitrary File Read

cve-program ·

Vendor product: allure2

CVSS 3.1 6.2Source modified 16 Sep 2026Recorded 23 Oct 2026

CVE-2026-54567Published

Flask-Reuploaded: Extension-denylist bypass via case-folding asymmetry in name-override path (incomplete-fix variant of CVE-2026-27641)

cve-program ·

Vendor product: flask-reuploaded

CVSS 3.1 7.5Source modified 16 Sep 2026Recorded 23 Oct 2026

CVE-2026-77404Published

RabbitMQ amqp091-go: Connection Configuration Overwrite via Unsanitized TLS Path Parameter Injection

cve-program ·

Vendor product: amqp091-go

CVSS 4.0 8.7Source modified 16 Sep 2026Recorded 23 Oct 2026

CVE-2026-49400Published

October CMS: PHP Object Injection via Backend Widget Session Storage

cve-program ·

Vendor product: october

CVSS 3.1 3.3Source modified 16 Sep 2026Recorded 23 Oct 2026

CVE-2026-55837Published

dbt-mcp: Unauthenticated OAuth Context Endpoint Leaks dbt Platform Tokens

cve-program ·

Vendor product: dbt-mcp

CVSS 3.1 6.8Source modified 16 Sep 2026Recorded 23 Oct 2026

CVE-2026-55073Published

WeasyPrint restrictive URL fetcher bypass allows local file read and SSRF

cve-program ·

Vendor product: WeasyPrint

CVSS 3.1 6.2Source modified 16 Sep 2026Recorded 23 Oct 2026

CVE-2026-63128Published

RMCP: Unauthenticated permanent session-table leak in rmcp Streamable HTTP server transport leads to remote denial-of-service

cve-program ·

Vendor product: rust-sdk

CVSS 3.1 7.5Source modified 16 Sep 2026Recorded 23 Oct 2026

CVE-2026-90802Published

GNU Binutils ld libbfd.c bfd_putl64 null pointer dereference

cve-program ·

Vendor product: Binutils

CVSS 4.0 4.8 · CVSS 3.1 4.4 · CVSS 3.0 4.4 · CVSS 2.0 3.2Source modified 16 Sep 2026Recorded 23 Oct 2026

CVE-2026-54452Published

safeurl: Missing IPv6 CIDR Ranges in Blocklist

cve-program ·

Vendor product: safeurl

CVSS 4.0 6.3Source modified 16 Sep 2026Recorded 23 Oct 2026

CVE-2026-82410Published

Pocketbase: Unhandled panic in worker goroutines

cve-program ·

Vendor product: pocketbase

CVSS 4.0 8.7Source modified 16 Sep 2026Recorded 23 Oct 2026

CVE-2026-55235Published

langgraph-api: Relative webhook targets in LangGraph Server can reach in-process routes without authentication

cve-program ·

Vendor product: langgraph-api

CVSS 3.1 5.9Source modified 16 Sep 2026Recorded 23 Oct 2026

CVE-2026-54541Published

Nimiq: Panic in TrieProof::verify via child_index unwrap on equal-length keys

cve-program ·

Vendor product: core-rs-albatross

CVSS 3.1 3.7Source modified 16 Sep 2026Recorded 23 Oct 2026

CVE-2026-90793Published

GPAC MP4Box base_scenegraph.c gf_node_get_name use after free

cve-program ·

Vendor product: GPAC

CVSS 4.0 5.3 · CVSS 3.1 5.4 · CVSS 3.0 5.4 · CVSS 2.0 6.4Source modified 16 Sep 2026Recorded 23 Oct 2026

CVE-2026-90439Published

NGINX ngx_http_v3_module vulnerability

cve-program ·

Vendor product: NGINX Plus · Vendor product: NGINX Open Source

CVSS 3.1 6.5 · CVSS 4.0 6.9Source modified 16 Sep 2026Recorded 23 Oct 2026

CVE-2026-57132Published

PraisonAI: PRAISONAI_CALL_AUTH=disabled environment variable unconditionally disables authentication

cve-program ·

Vendor product: PraisonAI

CVSS 3.1 8.2Source modified 16 Sep 2026Recorded 23 Oct 2026

CVE-2026-53941Published

Inspektor Gadget Uprobe gadgets: unprivileged container's ld.so.cache causes high CPU utilization and container startup DoS

cve-program ·

Vendor product: inspektor-gadget

CVSS 4.0 6.9Source modified 16 Sep 2026Recorded 23 Oct 2026

CVE-2026-57119Published

PraisonAI: Unauthenticated Local File Inclusion via agent_file path in the Jobs API

cve-program ·

Vendor product: PraisonAI

CVSS 3.1 7.5Source modified 16 Sep 2026Recorded 23 Oct 2026

CVE-2026-57120Published

PraisonAI: execute_code sandbox bypass: str.format C-level attribute access reads every blocklisted dunder

cve-program ·

Vendor product: praisonaiagents

CVSS 3.1 6.5Source modified 16 Sep 2026Recorded 23 Oct 2026

CVE-2026-58065Published

Apache Airflow Git provider: Git provider hook defaults to StrictHostKeyChecking=no, disabling SSH host-key verification

cve-program ·

https://pypi.python.org: apache-airflow-providers-git

Source modified 16 Sep 2026Recorded 23 Oct 2026

CVE-2026-90788Published

magicblack MacCMS10 Template .%40template%40default%40html%40label.html os command injection

cve-program ·

Vendor product: MacCMS10

CVSS 4.0 5.1 · CVSS 3.1 4.7 · CVSS 3.0 4.7 · CVSS 2.0 5.8Source modified 16 Sep 2026Recorded 23 Oct 2026

CVE-2026-77412Published

RabbitMQ amqp091-go: Denial of Service via Malicious Field Length in AMQP Client

cve-program ·

Vendor product: amqp091-go

CVSS 4.0 8.9Source modified 16 Sep 2026Recorded 23 Oct 2026

CVE-2026-92383Published

PbootCMS User Management UserController.php mod cross-site request forgery

cve-program ·

Vendor product: PbootCMS

CVSS 4.0 5.3 · CVSS 3.1 4.3 · CVSS 3.0 4.3 · CVSS 2.0 5.0Source modified 16 Sep 2026Recorded 23 Oct 2026

CVE-2026-25550Published

Seagull Software BarTender Unauthenticated RCE via .NET Remoting Service

cve-program ·

Vendor product: BarTender 2010 · Vendor product: BarTender 2016 · Vendor product: BarTender 2019

CVSS 4.0 9.3 · CVSS 3.1 9.8Source modified 16 Sep 2026Recorded 23 Oct 2026

CVE-2026-19248Published

Unbounded recursion vulnerability in the QDomNode destructor of Qt XML impacts Qt

cve-program ·

Vendor product: qt

CVSS 4.0 7.1Source modified 16 Sep 2026Recorded 23 Oct 2026

A catalog match establishes published evidence, not applicability to your environment. Check resolved package dependencies, or open a Microsoft CVE for fixing KBs, releases and planning.