Security

Microsoft security updates and public advisory evidence: affected products, fixing updates, exploitation and source coverage.

Security Update Guide CISA KEV

Advisory catalog

Public source statements across vendors. Explicit aliases connect records; each publisher keeps its own state, severity and affected-version evidence.

Collected statements

699801 source statements · aliases may refer to the same vulnerability

CVE-2026-9667Published

IBM WebSphere Application Server prior to 9.0.5.29 and 8.5.5.31 are affected by multiple vulnerabilities

cve-program ·

Vendor product: WebSphere Application Server

CVSS 3.1 5.3Source modified 14 Sep 2026Recorded 23 Oct 2026

CVE-2026-82097Published

DataStage on Cloud Pak for Data has several vulnerabilities due to open source software

cve-program ·

Vendor product: DataStage on Cloud Pak for Data

CVSS 3.1 8.8Source modified 14 Sep 2026Recorded 23 Oct 2026

CVE-2026-90715Published

marcobambini Gravity udp json-parser gravity_json.c integer overflow

cve-program ·

Vendor product: Gravity

CVSS 4.0 6.9 · CVSS 3.1 7.3 · CVSS 3.0 7.3 · CVSS 2.0 7.5Source modified 14 Sep 2026Recorded 23 Oct 2026

CVE-2026-90787Published

Soarkey StudentManagement Registration Workflow register.html RegisterServlet.doPost privileges management

cve-program ·

Vendor product: StudentManagement

CVSS 4.0 6.9 · CVSS 3.1 7.3 · CVSS 3.0 7.3 · CVSS 2.0 7.5Source modified 14 Sep 2026Recorded 23 Oct 2026

CVE-2026-90502Published

stilleshan ServerStatus Stats Generation main.cpp cross site scripting

cve-program ·

Vendor product: ServerStatus

CVSS 4.0 5.1 · CVSS 3.1 3.5 · CVSS 3.0 3.5 · CVSS 2.0 4.0Source modified 14 Sep 2026Recorded 23 Oct 2026

CVE-2026-90507Published

vvbbnn00 WARP-Clash-API Subscription subscription.py get_surge_subscription access control

cve-program ·

Vendor product: WARP-Clash-API

CVSS 4.0 5.3 · CVSS 3.1 6.3 · CVSS 3.0 6.3 · CVSS 2.0 7.5Source modified 14 Sep 2026Recorded 23 Oct 2026

CVE-2026-90518Published

PHPGurukul Bank Locker Management System sidebar.php access control

cve-program ·

Vendor product: Bank Locker Management System

CVSS 4.0 5.3 · CVSS 3.1 6.3 · CVSS 3.0 6.3 · CVSS 2.0 6.5Source modified 14 Sep 2026Recorded 23 Oct 2026

CVE-2026-59570Published

Android ZCC denial of service

cve-program ·

Vendor product: Client Connector

CVSS 3.1 7.5Source modified 14 Sep 2026Recorded 23 Oct 2026

CVE-2026-82019Published

TripleLift video-bundle.js DOM-based XSS via postMessage

cve-program ·

Vendor product: video-bundle.js

CVSS 4.0 2.3 · CVSS 3.1 4.2Source modified 14 Sep 2026Recorded 23 Oct 2026

CVE-2026-90523Published

jaychouchannel Tourism-Management-System User Register Endpoint UsersController.java privileges management

cve-program ·

Vendor product: Tourism-Management-System

CVSS 4.0 6.9 · CVSS 3.1 7.3 · CVSS 3.0 7.3 · CVSS 2.0 7.5Source modified 14 Sep 2026Recorded 23 Oct 2026

CVE-2026-57128Published

PraisonAI: Unauthenticated Event Injection via SSE `/publish` Endpoint

cve-program ·

Vendor product: PraisonAI

CVSS 3.1 4.3Source modified 14 Sep 2026Recorded 23 Oct 2026

CVE-2026-90528Published

TDuckApp tduck-platform Form Write View index.vue cross site scripting

cve-program ·

Vendor product: tduck-platform

CVSS 4.0 5.1 · CVSS 3.1 3.5 · CVSS 3.0 3.5 · CVSS 2.0 4.0Source modified 14 Sep 2026Recorded 23 Oct 2026

CVE-2026-90566Published

Rizwan17 inventory-management-system Registration register.php createUserAccount improper authorization

cve-program ·

Vendor product: inventory-management-system

CVSS 4.0 6.9 · CVSS 3.1 7.3 · CVSS 3.0 7.3 · CVSS 2.0 7.5Source modified 14 Sep 2026Recorded 23 Oct 2026

CVE-2026-90571Published

Exrick xmall Order Printing order-print.jsp cross site scripting

cve-program ·

Vendor product: xmall

CVSS 4.0 5.3 · CVSS 3.1 4.3 · CVSS 3.0 4.3 · CVSS 2.0 5.0Source modified 14 Sep 2026Recorded 23 Oct 2026

CVE-2026-90576Published

GPAC MP4Box base_scenegraph.c gf_node_list_add_child null pointer dereference

cve-program ·

Vendor product: GPAC

CVSS 4.0 4.8 · CVSS 3.1 3.3 · CVSS 3.0 3.3 · CVSS 2.0 1.7Source modified 14 Sep 2026Recorded 23 Oct 2026

CVE-2024-23176Published

An issue was discovered in the MassMessage extension in MediaWiki before 1.40.2. For a Special:MassMessage?uselang=x-xss URL, the i18n key massmessage-form-page-help allows XSS.

cve-program ·

Vendor product: MassMessage

CVSS 3.1 5.4Source modified 14 Sep 2026Recorded 23 Oct 2026

CVE-2026-90581Published

cym1102 nginxWebUI autoUpdate MainController.autoUpdate code injection

cve-program ·

Vendor product: nginxWebUI

CVSS 4.0 5.3 · CVSS 3.1 6.3 · CVSS 3.0 6.3 · CVSS 2.0 6.5Source modified 14 Sep 2026Recorded 23 Oct 2026

CVE-2026-87087Rejected

REJECT DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All references and descriptions in this candidate have been removed to prevent accidental usage.

cve-program ·

Source modified 14 Sep 2026Recorded 23 Oct 2026

CVE-2026-90599Published

Rizwan17 inventory-management-system process.php cross-site request forgery

cve-program ·

Vendor product: inventory-management-system

CVSS 4.0 5.3 · CVSS 3.1 4.3 · CVSS 3.0 4.3 · CVSS 2.0 5.0Source modified 14 Sep 2026Recorded 23 Oct 2026

CVE-2026-90604Published

Totolink A3002MU Anchor Tag cross site scripting

cve-program ·

Vendor product: A3002MU

CVSS 4.0 5.1 · CVSS 3.1 3.5 · CVSS 3.0 3.5 · CVSS 2.0 4.0Source modified 14 Sep 2026Recorded 23 Oct 2026

CVE-2026-61909Published

An issue was discovered in Cyrus IMAP before 3.12.4. CalDAV/CardDAV multiget bypasses a per-href ACL. An authenticated DAV user with some shared access to another user's calendar or address book could read even unshared events or contacts b…

cve-program ·

Vendor product: Cyrus IMAP

CVSS 3.1 3.5Source modified 14 Sep 2026Recorded 23 Oct 2026

CVE-2026-57129Published

PraisonAI: Arbitrary File Read via `@file:` Mention Path Traversal

cve-program ·

Vendor product: praisonaiagents

CVSS 3.1 7.5Source modified 14 Sep 2026Recorded 23 Oct 2026

CVE-2023-24034Published

An issue was discovered in twilio_ajax_handler.php in Nagios XI before 5.9.3. An attacker can force a user to visit a malicious site by using a open redirect vulnerability.

cve-program ·

Vendor product: Nagios XI

CVSS 3.1 3.1Source modified 14 Sep 2026Recorded 23 Oct 2026

CVE-2026-33968Published

An issue was discovered in camera in Samsung Mobile Processor Exynos 1330, 1380, 1480, 2400, 1580, 2500, 2600, and 1680. In the camera driver, a Time-of-Check Time-of-Use (TOCTOU) race condition leads to out-of-bounds access.

cve-program ·

Vendor product: Exynos 1330 firmware

CVSS 3.1 2.8Source modified 14 Sep 2026Recorded 23 Oct 2026

CVE-2026-33962Published

An issue was discovered in Wi-Fi in Samsung Mobile Processor Exynos 850, 1280, 1330, 1380, 1480, 2400, W920, and W930. A malformed Netlink command can trigger an out-of-bounds read, potentially leading to information leakage.

cve-program ·

Vendor product: Exynos 850 firmware

CVSS 3.1 2.8Source modified 14 Sep 2026Recorded 23 Oct 2026

CVE-2023-24283Published

Portable Puzzle Collection before 20230116.5782e29 was discovered to contain a buffer overflow which allows attackers to cause a Denial of Service (DoS) via a crafted save file.

cve-program ·

Vendor product: Portable Puzzle Collection

CVSS 3.1 2.9Source modified 14 Sep 2026Recorded 23 Oct 2026

CVE-2026-23793Published

An issue was discovered in Samsung Mobile Processor Exynos 1330, 1380, 1480, and 2400. An out-of-bounds memory access vulnerability in the camera GDC driver may lead to kernel memory corruption under certain conditions.

cve-program ·

Vendor product: Exynos 1330 firmware

CVSS 3.1 3.5Source modified 14 Sep 2026Recorded 23 Oct 2026

CVE-2026-23788Published

An issue was discovered in DPU in Samsung Mobile Processor Exynos 1280, 2200, and 1380. A heap overflow in the Exynos DRM HDR driver (due to improper buffer size validation) leads to kernel memory corruption and a system crash.

cve-program ·

Vendor product: Exynos 1280 firmware

CVSS 3.1 4.2Source modified 14 Sep 2026Recorded 23 Oct 2026

CVE-2023-24286Published

Portable Puzzle Collection before 20230116.5782e29 was discovered to contain a buffer overflow via the game description parameter.

cve-program ·

Vendor product: Portable Puzzle Collection

CVSS 3.1 2.9Source modified 14 Sep 2026Recorded 23 Oct 2026

CVE-2023-24288Published

An issue in Portable Puzzle Collection before 20230116.5782e29 allows attackers to cause a Denial of Service (DoS) via creating an excessive amount of save states.

cve-program ·

Vendor product: Portable Puzzle Collection

CVSS 3.1 2.9Source modified 14 Sep 2026Recorded 23 Oct 2026

CVE-2023-32803Published

The ca-certificates package before ca-certificates-2021.2.50-72 for Amazon Linux 2 (AL2) does not properly remove certain TrustCor root certificates from the root store. NOTE: this issue exists because of an incorrect fix for CVE-2022-23491…

cve-program ·

Vendor product: ca-certificates

CVSS 3.1 7.5Source modified 14 Sep 2026Recorded 23 Oct 2026

CVE-2023-29377Published

An issue was discovered in Softing OPC UA C++ SDK through 6.20 and Softing Secure Integration Server through 1.22. By using FileType renames, it is possible to bypass limitations on assignment of a directory path to FileDirectory OPC UA obj…

cve-program ·

Vendor product: Secure Integration Server

CVSS 3.1 6.6Source modified 14 Sep 2026Recorded 23 Oct 2026

CVE-2023-40772Published

A directory Traversal vulnerability in DataEase before 1.18.10 allows a remote attacker to obtain sensitive information via a a crafted request to the StaticResourceController.java component.

cve-program ·

Vendor product: DataEase

CVSS 3.1 4.3Source modified 14 Sep 2026Recorded 23 Oct 2026

CVE-2023-37253Published

An issue was discovered in the ProofreadPage extension for MediaWiki through 1.39.3. It leaks information about a suppressed user via the API and config variables.

cve-program ·

Vendor product: ProofreadPage

CVSS 3.1 3.1Source modified 14 Sep 2026Recorded 23 Oct 2026

CVE-2023-50462Published

An issue was discovered in the content_consent (aka Content Consent) extension through 2.0.1 for TYPO3. It fails to verify whether a specified content element identifier is permitted by the plugin. This enables an unauthenticated user to di…

cve-program ·

Vendor product: content_consent

CVSS 3.1 5.3Source modified 14 Sep 2026Recorded 23 Oct 2026

CVE-2026-90609Published

GPAC MP4Box vrml_tools.c null pointer dereference

cve-program ·

Vendor product: GPAC

CVSS 4.0 4.8 · CVSS 3.1 3.3 · CVSS 3.0 3.3 · CVSS 2.0 1.7Source modified 14 Sep 2026Recorded 23 Oct 2026

CVE-2026-90614Published

FedML-AI FedML MQTT+S3 Communication Backend remote_storage.py S3Storage.read_model deserialization

cve-program ·

Vendor product: FedML

CVSS 4.0 5.3 · CVSS 3.1 6.3 · CVSS 3.0 6.3 · CVSS 2.0 6.5Source modified 14 Sep 2026Recorded 23 Oct 2026

CVE-2026-90620Published

0x4m4 HexStrike AI API Command Endpoint hexstrike_server.py missing authentication

cve-program ·

Vendor product: HexStrike AI

CVSS 4.0 6.9 · CVSS 3.1 7.3 · CVSS 3.0 7.3 · CVSS 2.0 7.5Source modified 14 Sep 2026Recorded 23 Oct 2026

CVE-2026-90681Published

Matthias-Wandel jhead EXIF Parsing exif.c Get16u out-of-bounds

cve-program ·

Vendor product: jhead

CVSS 4.0 4.8 · CVSS 3.1 3.3 · CVSS 3.0 3.3 · CVSS 2.0 1.7Source modified 14 Sep 2026Recorded 23 Oct 2026

CVE-2023-50459Published

An issue was discovered in the femanager extension 7.x before 7.2.3 for TYPO3. It fails to check access permissions for the edit user component. An authenticated frontend user can exploit this to either edit data of various frontend users o…

cve-program ·

Vendor product: femanager

CVSS 3.1 5.4Source modified 14 Sep 2026Recorded 23 Oct 2026

CVE-2026-90686Published

GPAC MP4Box loader_bt.c gf_bt_report memory corruption

cve-program ·

Vendor product: GPAC

CVSS 4.0 6.9 · CVSS 3.1 5.3 · CVSS 3.0 5.3 · CVSS 2.0 5.0Source modified 14 Sep 2026Recorded 23 Oct 2026

CVE-2026-25470Published

WordPress ACPT (Pro) - Custom Post Types plugin for WordPress plugin < 2.0.52 - Remote Code Execution (RCE) vulnerability

cve-program ·

Vendor product: ACPT (Pro) - Custom Post Types Plugin for WordPress

CVSS 3.1 10.0Source modified 14 Sep 2026Recorded 23 Oct 2026

CVE-2026-82768Published

Path traversal vulnerability exists in SGA1000. If this vulnerability is exploited, arbitrary files on the server may be viewed and/or altered by an attacker who can access the product via FTP.

cve-program ·

Vendor product: SGA1000

CVSS 3.1 8.1 · CVSS 4.0 8.6Source modified 14 Sep 2026Recorded 23 Oct 2026

CVE-2026-82765Published

Path traversal vulnerability exists in Contec FX5000 series, FX4000 series, and FX3000 series. If this vulnerability is exploited, arbitrary files on the server may be viewed and/or altered by an attacker who can access the product via FTP.

cve-program ·

Vendor product: FXA5000 · Vendor product: FXA5020 · Vendor product: FXA5020-[][]

CVSS 3.1 8.1 · CVSS 4.0 8.6Source modified 14 Sep 2026Recorded 23 Oct 2026

CVE-2026-90789Published

itsourcecode Leave Management System login.php sql injection

cve-program ·

Vendor product: Leave Management System

CVSS 4.0 6.9 · CVSS 3.1 7.3 · CVSS 3.0 7.3 · CVSS 2.0 7.5Source modified 14 Sep 2026Recorded 23 Oct 2026

CVE-2026-71612Published

Buffer Overflow vulnerability in GPAC c2dee3aff638cd96f9617ac5b17dc2868cd90ef3 allows an attacker to execute arbitrary code via the nhntdmx_process() function. Fixed in fac50e6a12ac27ffabdd5d3080b51afcc44ad8d6.

cve-program ·

Vendor product: n/a

Source modified 14 Sep 2026Recorded 23 Oct 2026

CVE-2026-57130Published

PraisonAI: IMAP Command Injection via Unsanitized Email Search Parameters

cve-program ·

Vendor product: praisonaiagents

CVSS 3.1 8.1Source modified 14 Sep 2026Recorded 23 Oct 2026

CVE-2026-16242Published

Hypershift: konnectivity proxy-server accepts agent connections without validating client certificates

cve-program ·

https://catalog.redhat.com/software/containers/: multicluster-engine/hypershift-rhel9-operator · https://catalog.redhat.com/software/containers/: multicluster-engine/hypershift-rhel9-operator · https://catalog.redhat.com/software/containers/: multicluster-engine/hypershift-rhel9-operator

CVSS 3.1 9.4Source modified 14 Sep 2026Recorded 23 Oct 2026

CVE-2026-82795Published

SolarView Compact contains a cross-site scripting vulnerability in Schedule Settings and Mail Send Setting. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker who can log in to the product.

cve-program ·

Vendor product: SV-CPT-MC310 · Vendor product: SV-CPT-MC310F

CVSS 3.1 5.4 · CVSS 4.0 5.1Source modified 14 Sep 2026Recorded 23 Oct 2026

CVE-2026-79513Published

A divide-by-zero vulnerability in the gf_dash_get_timeline_duration function (src/media_tools/dash_client.c) of GPAC v26.07.0 allows attackers to cause a Denial of Service (DoS) via a crafted MPD SegmentTimeline. Fixed in 2fd5a06ab226767900…

cve-program ·

Vendor product: n/a

CVSS 3.1 6.5Source modified 14 Sep 2026Recorded 23 Oct 2026

A catalog match establishes published evidence, not applicability to your environment. Check resolved package dependencies, or open a Microsoft CVE for fixing KBs, releases and planning.