Security

Microsoft security updates and public advisory evidence: affected products, fixing updates, exploitation and source coverage.

Security Update Guide CISA KEV

Advisory catalog

Public source statements across vendors. Explicit aliases connect records; each publisher keeps its own state, severity and affected-version evidence.

Collected statements

699709 source statements · aliases may refer to the same vulnerability

CVE-2026-90708Published

Yot CMS Cookie global.php login sql injection

cve-program ·

Vendor product: CMS

CVSS 4.0 6.9 · CVSS 3.1 7.3 · CVSS 3.0 7.3 · CVSS 2.0 7.5Source modified 15 Sep 2026Recorded 23 Oct 2026

CVE-2026-91965Published

WWBN AVideo through 29.0 Broken Access Control via Live Endpoints

cve-program ·

Vendor product: AVideo

CVSS 4.0 8.7 · CVSS 3.1 7.5Source modified 15 Sep 2026Recorded 23 Oct 2026

CVE-2026-90693Published

D-Link DIR-878 WAN Settings SetWan3Settings stack-based overflow

cve-program ·

Vendor product: DIR-878

CVSS 4.0 9.4 · CVSS 3.1 9.9 · CVSS 3.0 9.9 · CVSS 2.0 9.0Source modified 15 Sep 2026Recorded 23 Oct 2026

CVE-2026-91958Published

FreeRDP 3.11.0 through 3.30.0 Heap Buffer Overflow via Monitor Index

cve-program ·

Vendor product: FreeRDP

CVSS 4.0 6.9 · CVSS 3.1 6.6Source modified 15 Sep 2026Recorded 23 Oct 2026

CVE-2026-91963Published

FreeRDP 2.0.0 through 3.30.0 Uninitialized Heap Memory Disclosure via urbdrc

cve-program ·

Vendor product: FreeRDP · Vendor product: FreeRDP

CVSS 4.0 7.1 · CVSS 3.1 6.5Source modified 15 Sep 2026Recorded 23 Oct 2026

CVE-2026-90688Published

Tenda W20E HTTP formIPMacBindAdd stack-based overflow

cve-program ·

Vendor product: W20E

CVSS 4.0 7.1 · CVSS 3.1 6.5 · CVSS 3.0 6.5 · CVSS 2.0 6.8Source modified 15 Sep 2026Recorded 23 Oct 2026

CVE-2026-91960Published

FreeRDP before 3.31.0 Integer Overflow Double Free

cve-program ·

Vendor product: FreeRDP

CVSS 3.1 6.5 · CVSS 4.0 7.1Source modified 15 Sep 2026Recorded 23 Oct 2026

CVE-2026-91968Published

vikunja before 2.6.0 Denial of Service via unbounded filter recursion

cve-program ·

Vendor product: vikunja

CVSS 3.1 6.5 · CVSS 4.0 7.1Source modified 15 Sep 2026Recorded 23 Oct 2026

CVE-2026-90698Published

memcached mcmc Tokenizer proto_text.c try_read_command_asciiauth out-of-bounds

cve-program ·

Vendor product: memcached

CVSS 4.0 6.9 · CVSS 3.1 5.3 · CVSS 3.0 5.3 · CVSS 2.0 5.0Source modified 15 Sep 2026Recorded 23 Oct 2026

CVE-2026-91973Published

Vikunja before 2.6.0 Authentication Bypass via CalDAV BasicAuth

cve-program ·

Vendor product: vikunja

CVSS 4.0 8.7 · CVSS 3.1 7.5Source modified 15 Sep 2026Recorded 23 Oct 2026

CVE-2026-91955Published

FreeRDP before 3.31.0 Denial of Service via Desktop Dimensions

cve-program ·

Vendor product: FreeRDP

CVSS 4.0 8.2 · CVSS 3.1 7.5Source modified 15 Sep 2026Recorded 23 Oct 2026

CVE-2026-91950Published

FreeRDP before 3.31.0 Out-of-Bounds Read via UINT32 Wraparound

cve-program ·

Vendor product: FreeRDP

CVSS 4.0 7.1 · CVSS 3.1 6.5Source modified 15 Sep 2026Recorded 23 Oct 2026

CVE-2026-91945Published

FreeRDP before 3.31.0 Out-of-bounds Read via Smartcard ATR

cve-program ·

Vendor product: FreeRDP

CVSS 4.0 7.1 · CVSS 3.1 6.5Source modified 15 Sep 2026Recorded 23 Oct 2026

CVE-2026-91983Published

Vikunja before 2.6.0 API Token Scope Bypass via expand Parameter

cve-program ·

Vendor product: vikunja

CVSS 4.0 5.3 · CVSS 3.1 4.3Source modified 15 Sep 2026Recorded 23 Oct 2026

CVE-2026-91988Published

atomic-agents-stack before 1.1.0 Remote Code Execution via HTTP MCP

cve-program ·

Vendor product: atomic-agents-stack

CVSS 4.0 9.2 · CVSS 3.1 8.1Source modified 15 Sep 2026Recorded 23 Oct 2026

CVE-2026-91842Published

OpenBankProject OBP-API Kryo Redis.scala KryoInjection.invert deserialization

cve-program ·

Vendor product: OBP-API

CVSS 4.0 2.1 · CVSS 3.1 4.1 · CVSS 3.0 4.1 · CVSS 2.0 4.3Source modified 15 Sep 2026Recorded 23 Oct 2026

CVE-2026-91940Published

crawl4ai before 0.9.3 Arbitrary File Write via PDFContentScrapingStrategy

cve-program ·

Vendor product: crawl4ai

CVSS 4.0 8.7 · CVSS 3.1 7.5Source modified 15 Sep 2026Recorded 23 Oct 2026

CVE-2026-91934Published

Flowise before 3.1.4 Remote Code Execution via SQL Database Chain

cve-program ·

Vendor product: Flowise · Vendor product: Flowise

CVSS 3.1 8.8 · CVSS 4.0 8.7Source modified 15 Sep 2026Recorded 23 Oct 2026

CVE-2026-90805Published

subhajitkhan online-clinic-management-system doctorlogin.php sql injection

cve-program ·

Vendor product: online-clinic-management-system

CVSS 4.0 6.9 · CVSS 3.1 7.3 · CVSS 3.0 7.3 · CVSS 2.0 7.5Source modified 15 Sep 2026Recorded 23 Oct 2026

CVE-2026-91929Published

Flowise before 3.1.4 Cross-Tenant Authorization Bypass

cve-program ·

Vendor product: Flowise

CVSS 3.1 7.1 · CVSS 4.0 7.6Source modified 15 Sep 2026Recorded 23 Oct 2026

CVE-2026-54077Published

ArcadeDB: IMPORT DATABASE allows SSRF and arbitrary local file read by authenticated users

cve-program ·

Vendor product: arcadedb · Vendor product: arcadedb-engine

CVSS 3.1 7.1Source modified 15 Sep 2026Recorded 23 Oct 2026

CVE-2026-90786Published

Dvidelabs flatcc Duplicate Symbol semantics.c align_order_members assertion

cve-program ·

Vendor product: flatcc

CVSS 4.0 6.9 · CVSS 3.1 5.3 · CVSS 3.0 5.3 · CVSS 2.0 5.0Source modified 15 Sep 2026Recorded 23 Oct 2026

CVE-2026-65831Published

ArcadeDB: Privilege escalation via reader role in /api/v1/command JS scripting language — arbitrary host file read

cve-program ·

Vendor product: arcadedb · Vendor product: arcadedb-server

CVSS 3.1 7.7Source modified 15 Sep 2026Recorded 23 Oct 2026

CVE-2026-89160Published

PCRE2 before 10.48 has a pcre2_match out-of-bounds read during the PCRE2_MATCH_INVALID_UTF matching of an invalid UTF subject.

cve-program ·

Vendor product: PCRE2

CVSS 3.1 3.7Source modified 15 Sep 2026Recorded 23 Oct 2026

CVE-2026-88061Published

career-ops: Local dashboard API accepted cross-origin and non-loopback requests, allowing unauthenticated command execution

cve-program ·

Vendor product: career-ops

CVSS 4.0 5.8Source modified 15 Sep 2026Recorded 23 Oct 2026

CVE-2026-78135Published

libcharon in strongSwan 5.9.7 through 6.0.7 mishandles behavioral workflow in the IKEv2 state machine. Because CREATE_CHILD_SA requests are mishandled, there can be an authentication bypass.

cve-program ·

Vendor product: strongSwan

CVSS 3.1 5.6Source modified 15 Sep 2026Recorded 23 Oct 2026

CVE-2026-78130Published

strongSwan 4.2.0 through 6.0.7 has a NULL pointer dereference in the x509 plugin's attribute certificate parser.

cve-program ·

Vendor product: strongSwan

CVSS 3.1 7.5Source modified 15 Sep 2026Recorded 23 Oct 2026

CVE-2026-78123Published

strongSwan 5.0.2 through 6.0.7 has an Expired Pointer Dereference in PKCS#7 parsing in the openssl plugin.

cve-program ·

Vendor product: strongSwan

CVSS 3.1 5.9Source modified 15 Sep 2026Recorded 23 Oct 2026

CVE-2026-47780Published

free5GC: UDR Improper ueId validation in free5GC EE subscription handlers allows arbitrary identifier persistence

cve-program ·

Vendor product: free5gc

CVSS 4.0 6.9Source modified 15 Sep 2026Recorded 23 Oct 2026

CVE-2026-79035Published

A reflected cross-site scripting (XSS) vulnerability in the p.rfihub.com component of Zeta Marketing Platform (ZMP) v1.0 allows attackers to execute arbitrary Javascript in the context of the victim's browser via injecting a crafted URL int…

cve-program ·

Vendor product: n/a

Source modified 15 Sep 2026Recorded 23 Oct 2026

CVE-2026-52724Published

kuma-dp connects to control plane without verifying TLS certificate when no CA is configured

cve-program ·

Vendor product: kuma

CVSS 4.0 5.8Source modified 15 Sep 2026Recorded 23 Oct 2026

CVE-2026-79394Published

An insecure default configuration in the embedded Happytime RTSP server within the Sofia IPC daemon in Xiongmai IP Camera XM530 firmware HMT.CM2005-v220608.1837 and earlier ships with authentication disabled, allowing remote unauthenticated…

cve-program ·

Vendor product: n/a

Source modified 15 Sep 2026Recorded 23 Oct 2026

CVE-2026-88046Published

rclone is a command-line program to sync files and directories to and from different cloud storage providers. Prior to 1.75.1, rclone core does not reject parent-directory segments in source Object.Remote() values before fs/list, fs/walk, f…

nvd ·

CVSS 3.1 · [email protected] · Secondary 5.3Source modified 15 Sep 2026Recorded 25 Oct 2026

CVE-2026-88016Published

rclone is a command-line program to sync files and directories to and from different cloud storage providers. Prior to 1.75.1, when backend/local runs with --links, a source .rclonelink object can plant a symlink in the destination and late…

nvd ·

CVSS 3.1 · [email protected] · Secondary 7.1Source modified 15 Sep 2026Recorded 25 Oct 2026

CVE-2026-88011Published

Traefik is an open source HTTP reverse proxy and load balancer. Prior to 2.11.56, and from 3.0.0 until 3.7.12, a client-supplied dot-form header such as X.Authenticated.User survives ForwardAuth replacement and underscoreHeadersStrategy bec…

nvd ·

CVSS 4.0 · [email protected] · Secondary 5.3 · CVSS 3.1 · [email protected] · Primary 8.1Source modified 15 Sep 2026Recorded 25 Oct 2026

CVE-2026-52819Published

Kimai: Teamlead authorization bypass in GET /api/timesheets allows reading other users' timesheet records without being teamlead of the target

cve-program ·

Vendor product: kimai

CVSS 4.0 6.3Source modified 15 Sep 2026Recorded 23 Oct 2026

CVE-2026-71641Published

An issue in ZJU-FAST-Lab EGO-Planner-v2 All versions up to commit 5c99a95880401e2599638d567abc0e240396cb42 allows an attacker to cause a denial of service via thenteraction between traj_server, poscmd_2_odom, and the EGOReplanFSM emergency …

cve-program ·

Vendor product: n/a

Source modified 15 Sep 2026Recorded 23 Oct 2026

CVE-2026-49837Published

GoBGP: BGP OPEN capability parser may read capability values outside declared CapLen boundaries

cve-program ·

Vendor product: gobgp

CVSS 3.1 5.9Source modified 15 Sep 2026Recorded 23 Oct 2026

CVE-2026-80424Published

DataStage on Cloud Pak for Data has several vulnerabilities due to open source software

cve-program ·

Vendor product: DataStage on Cloud Pak for Data

CVSS 3.1 9.1Source modified 15 Sep 2026Recorded 23 Oct 2026

CVE-2026-84562Published

A race condition was addressed with additional validation. This issue is fixed in macOS Tahoe 26.6. An app may be able to access protected user data.

cve-program ·

Vendor product: macOS

Source modified 15 Sep 2026Recorded 23 Oct 2026

CVE-2026-59971Published

MySQL MCP Server: Missing Origin/Host Validation in SSE Transport Enables Unauthenticated SQL Execution (DNS Rebinding / Direct Exposure)

cve-program ·

Vendor product: mysql_mcp_server

CVSS 3.1 10.0Source modified 15 Sep 2026Recorded 23 Oct 2026

CVE-2026-81210Published

DataStage on Cloud Pak for Data has several vulnerabilities due to open source software

cve-program ·

Vendor product: DataStage on Cloud Pak for Data

CVSS 3.1 7.7Source modified 15 Sep 2026Recorded 23 Oct 2026

CVE-2026-45767Published

Suricata datasets: save to absolute filename can be bypassed when combined with load command

cve-program ·

Vendor product: suricata

CVSS 3.1 4.4Source modified 15 Sep 2026Recorded 23 Oct 2026

CVE-2025-15267Published

Bold Page Builder <= 5.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via bt_bb_accordion_item Shortcode

cve-program ·

Vendor product: Bold Page Builder

CVSS 3.1 6.4Source modified 15 Sep 2026Recorded 23 Oct 2026

CVE-2026-81540Published

DataStage on Cloud Pak for Data has several vulnerabilities due to open source software

cve-program ·

Vendor product: DataStage on Cloud Pak for Data

CVSS 3.1 8.5Source modified 15 Sep 2026Recorded 23 Oct 2026

CVE-2025-9236Published

Portabilis i-Educar Tipos de usuàrio educar_tipo_usuario_lst.php sql injection

cve-program ·

Vendor product: i-Educar

CVSS 4.0 5.3 · CVSS 3.1 6.3 · CVSS 3.0 6.3 · CVSS 2.0 6.5Source modified 15 Sep 2026Recorded 23 Oct 2026

CVE-2025-12449Published

aBlocks – WordPress Gutenberg Blocks <= 2.4.0 - Missing Authorization to Authenticated (Subscriber+) Settings Modification

cve-program ·

Vendor product: aBlocks – Gutenberg Blocks, User Dashboard Builder, Popup Builder, Form Builder & Animation Builder

CVSS 3.1 5.4Source modified 15 Sep 2026Recorded 23 Oct 2026

CVE-2026-81551Published

DataStage on Cloud Pak for Data has several vulnerabilities due to open source software

cve-program ·

Vendor product: DataStage on Cloud Pak for Data

CVSS 3.1 8.8Source modified 15 Sep 2026Recorded 23 Oct 2026

CVE-2026-55650Published

Outerbase Studio: Stored XSS in Text Widget Leads to Authentication Token Exposure

cve-program ·

Vendor product: studio

CVSS 3.1 4.4Source modified 15 Sep 2026Recorded 23 Oct 2026

CVE-2026-45761Published

Suricata detect: case-insensitive frame handling can cause heap buffer overflow during rule load

cve-program ·

Vendor product: suricata

CVSS 3.1 3.3Source modified 15 Sep 2026Recorded 23 Oct 2026

A catalog match establishes published evidence, not applicability to your environment. Check resolved package dependencies, or open a Microsoft CVE for fixing KBs, releases and planning.