Security

Microsoft security updates and public advisory evidence: affected products, fixing updates, exploitation and source coverage.

Security Update Guide CISA KEV

Advisory catalog

Public source statements across vendors. Explicit aliases connect records; each publisher keeps its own state, severity and affected-version evidence.

Collected statements

699878 source statements · aliases may refer to the same vulnerability

CVE-2026-85433Published

MOOS essential-moos through 10.0.1 pShare Unauthorized Runtime Route Reconfiguration

cve-program ·

Vendor product: essential-moos

CVSS 4.0 9.3 · CVSS 3.1 9.8Source modified 14 Sep 2026Recorded 23 Oct 2026

CVE-2026-85438Published

MOOS-IvP through 24.8.1 Out-of-Bounds Write via Unvalidated IvP Payload Counts

cve-program ·

Vendor product: moos-ivp

CVSS 4.0 9.3 · CVSS 3.1 9.8Source modified 14 Sep 2026Recorded 23 Oct 2026

CVE-2026-85443Published

MOOS core-moos through 10.4.0 MOOSDB Accept Loop Denial of Service

cve-program ·

Vendor product: core-moos

CVSS 4.0 8.7 · CVSS 3.1 7.5Source modified 14 Sep 2026Recorded 23 Oct 2026

CVE-2026-85448Published

MOOS-IvP through 24.8.1 uFldShoreBroker Unbounded Community State Retention

cve-program ·

Vendor product: moos-ivp

CVSS 4.0 8.7 · CVSS 3.1 7.5Source modified 14 Sep 2026Recorded 23 Oct 2026

CVE-2026-85453Published

MOOS core-moos through 10.4.0 MOOSDB HTTP Pages Stored Cross-Site Scripting

cve-program ·

Vendor product: core-moos

CVSS 4.0 5.3 · CVSS 3.1 6.1Source modified 14 Sep 2026Recorded 23 Oct 2026

CVE-2026-85507Published

ipmi-oem in FreeIPMI before 1.6.19 has a stack-based buffer overflow in _output_dell_system_info_cmc_info in ipmi-oem/ipmi-oem-dell.c (cmc-info subcommand to dell get-system-info).

cve-program ·

Vendor product: FreeIPMI

CVSS 3.1 9.8Source modified 14 Sep 2026Recorded 23 Oct 2026

CVE-2026-85588Published

phpMyFAQ before 4.1.8 TOTP Secret Exposure via Data Export

cve-program ·

Vendor product: phpMyFAQ

CVSS 4.0 5.3Source modified 14 Sep 2026Recorded 23 Oct 2026

CVE-2026-85593Published

phpMyFAQ before 4.1.8 Stored XSS via html_entity_decode

cve-program ·

Vendor product: phpMyFAQ

CVSS 4.0 5.1 · CVSS 3.1 5.4Source modified 14 Sep 2026Recorded 23 Oct 2026

CVE-2026-86137Published

In libxml2 before 2.15.4, xmlFAParsePosCharGroup has an out-of-bounds read, aka an out-of-bounds read in the NXT macro in xmlregexp.

cve-program ·

Vendor product: libxml2

CVSS 3.1 2.9Source modified 14 Sep 2026Recorded 23 Oct 2026

CVE-2026-86142Published

In libxml2 before 2.15.4, there is a heap-based buffer overflow in xmlXPtrEvalXPtrPart because of xmlXPtrEval xpointer length saturation.

cve-program ·

Vendor product: libxml2

CVSS 3.1 6.9Source modified 14 Sep 2026Recorded 23 Oct 2026

CVE-2026-34223Published

A vulnerability has been identified in Desigo CC ClickOnce Client V6 (All versions), Desigo CC ClickOnce Client V7 (All versions), Desigo CC family V8 (All versions), Desigo CC family V9 (All versions), Desigo CC Flex Client V6 (All version…

cve-program ·

Vendor product: Desigo CC ClickOnce Client V6 · Vendor product: Desigo CC ClickOnce Client V7 · Vendor product: Desigo CC family V8

CVSS 3.1 8.2 · CVSS 4.0 8.6Source modified 14 Sep 2026Recorded 23 Oct 2026

CVE-2026-62647Published

A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70). A random number generator is used to generate security-relevant values (such as session identifiers used for authentication purposes) that is not initialized with …

cve-program ·

Vendor product: Reyrolle 7SR5

CVSS 3.1 7.4 · CVSS 4.0 9.3Source modified 14 Sep 2026Recorded 23 Oct 2026

CVE-2026-62653Published

A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70). The input received over a proprietary communication protocol that is exposed when the device is placed into a special firmware-update mode is not properly validate…

cve-program ·

Vendor product: Reyrolle 7SR5

CVSS 3.1 6.8 · CVSS 4.0 7.0Source modified 14 Sep 2026Recorded 23 Oct 2026

CVE-2026-86819Published

Waves Central local privilege escalation via Improper XPC Client Authentication in macOS

cve-program ·

Vendor product: Waves Central

CVSS 4.0 8.4 · CVSS 3.1 7.1Source modified 14 Sep 2026Recorded 23 Oct 2026

CVE-2026-79379Published

A buffer overflow in the SBC_DecodeFrames() function of Bestechnic Co., Ltd BES2300 Bluetooth Audio SoC firmware v3.x and earlier and fixed in v.5.0 allows attackers to cause a Denial of Service (DoS) via sending a crafted frame.

cve-program ·

Vendor product: n/a

Source modified 14 Sep 2026Recorded 23 Oct 2026

CVE-2026-87997Published

Open WebUI: Any authenticated user can inject chats into another user's folder via chat completions

cve-program ·

Vendor product: open-webui

CVSS 3.1 4.3Source modified 14 Sep 2026Recorded 23 Oct 2026

CVE-2026-87016Published

Open WebUI: Sign-in as another user via wildcard characters in the OAuth subject claim on SQLite

cve-program ·

Vendor product: open-webui

CVSS 3.1 8.1Source modified 14 Sep 2026Recorded 23 Oct 2026

CVE-2026-87011Published

Open WebUI: Unauthenticated requests can stall the server via uncached OIDC fetches in back-channel logout

cve-program ·

Vendor product: open-webui

CVSS 3.1 7.5Source modified 14 Sep 2026Recorded 23 Oct 2026

CVE-2026-87872Published

Community.general: community.general: ocapi module_utils (ocapi_command, ocapi_info) hardcode validate_certs=false with no override, enabling tls man-in-the-middle and credential disclosure

cve-program ·

https://access.redhat.com/downloads/content/package-browser/: ansible-collection-community-general · https://access.redhat.com/downloads/content/package-browser/: ansible-collection-community-general · https://access.redhat.com/downloads/content/package-browser/: ansible-collection-community-general

CVSS 3.1 6.8Source modified 14 Sep 2026Recorded 23 Oct 2026

CVE-2026-22591Published

Fast DDS DDSSQLFilter Recursive Parser Stack Exhaustion (Remote DoS)

cve-program ·

Vendor product: Fast-DDS

CVSS 3.1 7.5Source modified 14 Sep 2026Recorded 23 Oct 2026

CVE-2026-90933Published

laradashboard through 1.2.2 Missing Authorization via License API

cve-program ·

Vendor product: laradashboard

CVSS 4.0 7.1 · CVSS 3.1 7.1Source modified 14 Sep 2026Recorded 23 Oct 2026

CVE-2026-79946Published

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Neutralization of Alternate XSS Syntax vulnerability. An unauthenticated attacker with remote access could p…

cve-program ·

Vendor product: Secure Connect Gateway 5.0 - Application · Vendor product: Secure Connect Gateway 5.0 - Appliance

CVSS 3.1 5.3Source modified 14 Sep 2026Recorded 23 Oct 2026

CVE-2026-79729Published

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Certificate Validation vulnerability. An unauthenticated attacker with remote access could potentially explo…

cve-program ·

Vendor product: Secure Connect Gateway 5.0 - Application · Vendor product: Secure Connect Gateway 5.0 - Appliance

CVSS 3.1 3.7Source modified 14 Sep 2026Recorded 23 Oct 2026

CVE-2026-87825Published

zstd-jni 1.3.8-4 through 1.5.7-13 Use-After-Free of Compression and Decompression Dictionaries

cve-program ·

https://repo1.maven.org/maven2/com/github/luben/zstd-jni/: zstd-jni

CVSS 4.0 7.0 · CVSS 3.1 7.7Source modified 14 Sep 2026Recorded 23 Oct 2026

CVE-2026-79731Published

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Use of Hard-coded Credentials vulnerability. An unauthenticated attacker with remote access could potentially exploit…

cve-program ·

Vendor product: Secure Connect Gateway 5.0 - Application · Vendor product: Secure Connect Gateway 5.0 - Appliance

CVSS 3.1 4.4Source modified 14 Sep 2026Recorded 23 Oct 2026

CVE-2026-86775Published

knowns before 0.30.0 Path Traversal via Document API

cve-program ·

Vendor product: knowns

CVSS 4.0 8.8 · CVSS 3.1 8.6Source modified 14 Sep 2026Recorded 23 Oct 2026

CVE-2026-86770Published

Snipe-IT before 8.7.0 Authentication Bypass via SAML Username Collation

cve-program ·

Vendor product: snipe-it

CVSS 4.0 8.6 · CVSS 3.1 8.1Source modified 14 Sep 2026Recorded 23 Oct 2026

CVE-2026-79577Published

An issue in the /cas/login component of sso-master v1.0.0 allows attackers to authenticate into the application without a password via sending a crafted POST request.

cve-program ·

Vendor product: n/a

Source modified 14 Sep 2026Recorded 23 Oct 2026

CVE-2026-86765Published

Snipe-IT 8.6.3 Authorization Bypass via Asset Update Endpoint

cve-program ·

Vendor product: snipe-it

CVSS 4.0 7.1 · CVSS 3.1 6.5Source modified 14 Sep 2026Recorded 23 Oct 2026

CVE-2026-90938Published

LangBot through 0.4.17 Unauthenticated Plugin Registration via WebSocket

cve-program ·

Vendor product: LangBot

CVSS 4.0 8.8 · CVSS 3.1 8.6Source modified 14 Sep 2026Recorded 23 Oct 2026

CVE-2026-79573Published

L-ONE v1.0.0 was discovered to contain multiple SQL injection vulnerabilities in the /attachment/getBusinessUploadList component via the busid, id, and taskid parameters. This vulnerability allows attackers to access sensitive database info…

cve-program ·

Vendor product: n/a

Source modified 14 Sep 2026Recorded 23 Oct 2026

CVE-2026-52307Published

An authenticated stored cross-site scripting (XSS) vulnerability in the Column Management component of ClassCMS 1CMS v5.6 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the title field.

cve-program ·

Vendor product: n/a

Source modified 14 Sep 2026Recorded 23 Oct 2026

CVE-2026-86760Published

snipe-it 8.2.0 before 8.7.0 Authentication Bypass via activated flag

cve-program ·

Vendor product: snipe-it

CVSS 4.0 5.3 · CVSS 3.1 5.4Source modified 14 Sep 2026Recorded 23 Oct 2026

CVE-2026-86755Published

Snipe-IT 4.2.0 through 8.6.3 Permission Bypass via OAuth

cve-program ·

Vendor product: snipe-it

CVSS 4.0 5.3 · CVSS 3.1 5.4Source modified 14 Sep 2026Recorded 23 Oct 2026

CVE-2022-35497Published

In Trimble TM4WEB 21.4.0.4 due to security misconfiguration with session identifiers, it is possible to recover valid session cookies via reflected cross-site scripting affecting the external document viewer endpoint.

cve-program ·

Vendor product: n/a

Source modified 14 Sep 2026Recorded 23 Oct 2026

CVE-2026-86750Published

snipe-it before 8.7.0 Authorization Bypass via API User Create/Update

cve-program ·

Vendor product: snipe-it

CVSS 4.0 8.3 · CVSS 3.1 7.7Source modified 14 Sep 2026Recorded 23 Oct 2026

CVE-2026-75429Published

PowerJob versions 4.x through 5.1.2 contain an unauthenticated remote code execution vulnerability in the /friend/process endpoint of the Server-Worker transport layer

cve-program ·

Vendor product: n/a

Source modified 14 Sep 2026Recorded 23 Oct 2026

CVE-2026-86745Published

Snipe-IT before 8.7.0 CSV Formula Injection via Location-Scoping Export

cve-program ·

Vendor product: snipe-it

CVSS 4.0 5.1 · CVSS 3.1 6.5Source modified 14 Sep 2026Recorded 23 Oct 2026

CVE-2026-86740Published

Snipe-IT before 8.7.0 Attachment Deletion Reports Success While File Remains

cve-program ·

Vendor product: snipe-it

CVSS 4.0 5.1 · CVSS 3.1 3.8Source modified 14 Sep 2026Recorded 23 Oct 2026

CVE-2026-9277Published

shell-quote's `quote()` function did not validate object-token inputs against the operator model used by `parse()`. The `.op` field was backslash-escaped character by character using `/(.)/g`, which in JavaScript does not match line termina…

nvd ·

CVSS 4.0 · 7ffcee3d-2c14-4c3e-b844-86c6a321a158 · Secondary 9.2 · CVSS 3.1 · 7ffcee3d-2c14-4c3e-b844-86c6a321a158 · Secondary 8.1 · CVSS 3.1 · 0b0ca135-0b70-47e7-9f44-1890c2a1c46c · Secondary 8.1Source modified 14 Sep 2026Recorded 25 Oct 2026

CVE-2026-86085Published

n8n is an open source workflow automation platform. Prior to 2.37.7 and 2.38.2, the /rest/roles/:slug/assignments and /rest/roles/:slug/assignments/:projectId/members endpoints checked only whether the caller could manage the role type. A c…

nvd ·

CVSS 4.0 · [email protected] · Secondary 5.1 · CVSS 3.1 · [email protected] · Primary 4.9Source modified 14 Sep 2026Recorded 25 Oct 2026

CVE-2026-86082Published

n8n is an open source workflow automation platform. Prior to 1.123.76, 2.37.7, and 2.38.2, the OpenAI Chat Model node enforced credential allowed-domain restrictions for normal calls but not for the model-search dropdown. A workflow editor …

nvd ·

CVSS 4.0 · [email protected] · Secondary 7.1 · CVSS 3.1 · [email protected] · Primary 6.5Source modified 14 Sep 2026Recorded 25 Oct 2026

CVE-2026-86077Published

n8n is an open source workflow automation platform. Prior to 2.37.7 and 2.38.2, the /chat WebSocket route accepted a resumeToken and resumed a paused execution without checking that the target node supported chat messages. An anonymous form…

nvd ·

CVSS 4.0 · [email protected] · Secondary 6.3 · CVSS 3.1 · [email protected] · Primary 6.5Source modified 14 Sep 2026Recorded 25 Oct 2026

CVE-2026-71620Published

File Upload vulnerability in Zhao-github ApiAdmin v.5.0.1 allows a remote attacker to execute arbitrary code via a crafted .php file

cve-program ·

Vendor product: n/a

Source modified 14 Sep 2026Recorded 23 Oct 2026

CVE-2026-73324Published

VLC media player 3.0.0 through 3.0.23 information disclosure vulnerability

cve-program ·

Vendor product: VLC media player

CVSS 4.0 5.3 · CVSS 3.1 4.3Source modified 14 Sep 2026Recorded 23 Oct 2026

CVE-2026-75167Published

A broken access control vulnerability in the ugw-usr-edit method of /cgi-bin/wwwugw.cgi in MBS-Solutions X-Serie Gateway firmware V6_00_05 allows a remote authenticated user with the low-privileged Standard role to change the password of ar…

cve-program ·

Vendor product: n/a

Source modified 14 Sep 2026Recorded 23 Oct 2026

CVE-2026-75171Published

An issue in HubCore v.14.1.1 allows a remote attacker to escalate privileges via the HUBCOREID session cookie handling component.

cve-program ·

Vendor product: n/a

Source modified 14 Sep 2026Recorded 23 Oct 2026

CVE-2026-78849Published

Cross Site Scripting vulnerability in Netgate pfSense Plus software versions <= 26.03 pfSense CE software versions <= 2.8.1 allows a remote attacker to execute arbitrary code via the captive_portal_status.widget.php file

cve-program ·

Vendor product: n/a

Source modified 14 Sep 2026Recorded 23 Oct 2026

CVE-2026-79971Published

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Sanitization of Custom Special Characters vulnerability. An unauthenticated attacker with remote access coul…

cve-program ·

Vendor product: Secure Connect Gateway 5.0 - Application · Vendor product: Secure Connect Gateway 5.0 - Appliance

CVSS 3.1 5.3Source modified 14 Sep 2026Recorded 23 Oct 2026

CVE-2025-9467Published

Possibility to bypass file upload validation on the server-side

cve-program ·

https://repo.maven.apache.org/maven2: com.vaadin:vaadin · https://repo.maven.apache.org/maven2: com.vaadin:vaadin-server · https://repo.maven.apache.org/maven2: com.vaadin:vaadin-upload-flow

CVSS 4.0 5.3Source modified 14 Sep 2026Recorded 23 Oct 2026

A catalog match establishes published evidence, not applicability to your environment. Check resolved package dependencies, or open a Microsoft CVE for fixing KBs, releases and planning.