Security

Microsoft security updates and public advisory evidence: affected products, fixing updates, exploitation and source coverage.

Security Update Guide CISA KEV

Advisory catalog

Public source statements across vendors. Explicit aliases connect records; each publisher keeps its own state, severity and affected-version evidence.

Collected statements

700870 source statements · aliases may refer to the same vulnerability

CVE-2026-90487Published

Xuxueli xxl-job JobGroupController.java privileges management

cve-program ·

Vendor product: xxl-job

CVSS 4.0 5.3 · CVSS 3.1 4.3 · CVSS 3.0 4.3 · CVSS 2.0 4.0Source modified 14 Sep 2026Recorded 23 Oct 2026

CVE-2026-90612Published

GPAC MP4Box scene_dump.c gf_sm_dump_command_list assertion

cve-program ·

Vendor product: GPAC

CVSS 4.0 4.8 · CVSS 3.1 3.3 · CVSS 3.0 3.3 · CVSS 2.0 1.7Source modified 14 Sep 2026Recorded 23 Oct 2026

CVE-2025-70819Published

Zettlab D6 Ultra before 1.7.0 allows mounting /etc/passwd and /etc/shadow in a container via ".." manipulations such as volumes: - ../../../../../../../etc:/h_etc:rw in a compose file.

cve-program ·

Vendor product: D6 Ultra

CVSS 3.1 6.3Source modified 14 Sep 2026Recorded 23 Oct 2026

CVE-2026-36453Published

Rhymix before 2.1.31 allows insecure direct object reference, aka RVE-2026-1. Arbitrary files can be accessed via extra variables.

cve-program ·

Vendor product: Rhymix

CVSS 3.1 7.4Source modified 14 Sep 2026Recorded 23 Oct 2026

CVE-2026-35867Published

A Command Injection vulnerability exists in the bs_SetLimitCli_info function within the libshare.so library of the LB-LINK router AC1900_AZ2 V1.0.2 via shell metacharacters, if the device is deployed in a scenario where an actor is able to …

cve-program ·

Vendor product: AC1900 firmware

CVSS 3.1 3.1Source modified 14 Sep 2026Recorded 23 Oct 2026

CVE-2026-90618Published

GH05TCREW PentestAgent LocalRuntime runtime.py LocalRuntime.execute_command os command injection

cve-program ·

Vendor product: PentestAgent

CVSS 4.0 6.9 · CVSS 3.1 7.3 · CVSS 3.0 7.3 · CVSS 2.0 7.5Source modified 14 Sep 2026Recorded 23 Oct 2026

CVE-2025-63842Published

A Cross-Site Scripting (XSS) vulnerability in the web backend for the Repetico app 1.9.7.31 for Android allows a remote authenticated user to execute arbitrary JavaScript code in the app's context via crafted input in the multiple-choice qu…

cve-program ·

Vendor product: web backend

CVSS 3.1 5.4Source modified 14 Sep 2026Recorded 23 Oct 2026

CVE-2026-90492Published

webgjc web_robot web.py controller_recover os command injection

cve-program ·

Vendor product: web_robot

CVSS 4.0 5.3 · CVSS 3.1 6.3 · CVSS 3.0 6.3 · CVSS 2.0 7.5Source modified 14 Sep 2026Recorded 23 Oct 2026

CVE-2026-90623Published

andreashappe cochise SSH Host Key ssh_connection.py asyncssh.connect certificate validation

cve-program ·

Vendor product: cochise

CVSS 4.0 6.3 · CVSS 3.1 3.7 · CVSS 3.0 3.7 · CVSS 2.0 2.6Source modified 14 Sep 2026Recorded 23 Oct 2026

CVE-2023-25499Published

Possible information disclosure in non visible components

cve-program ·

Vendor product: vaadin · Vendor product: flow-server

CVSS 3.1 5.7Source modified 14 Sep 2026Recorded 23 Oct 2026

CVE-2026-90678Published

An issue was discovered in HAProxy 3.3.0 through 3.4.4 and in 3.5-dev1 through 3.5-dev5. Exploitation requires an HTTP/3 frontend: HAProxy must be built with QUIC support and configured with a QUIC bind listener, and the affected traffic mu…

cve-program ·

Vendor product: HAProxy

CVSS 3.1 7.5Source modified 14 Sep 2026Recorded 23 Oct 2026

CVE-2026-90684Published

GPAC MP4Box base_scenegraph.c gf_node_get_field_count assertion

cve-program ·

Vendor product: GPAC

CVSS 4.0 2.4 · CVSS 3.1 2.8 · CVSS 3.0 2.8 · CVSS 2.0 1.7Source modified 14 Sep 2026Recorded 23 Oct 2026

CVE-2026-82789Published

An improper neutralization of directives in dynamically evaluated code ('Eval Injection') issue exists in CONPROSYS HMI System(CHS). If exploited, arbitrary code may be executed by an attacker who can log in to the product.

cve-program ·

Vendor product: CONPROSYS HMI System(CHS)

CVSS 3.1 8.8 · CVSS 4.0 8.7Source modified 14 Sep 2026Recorded 23 Oct 2026

CVE-2026-90497Published

Fengoffice Feng Office Task Title Output add_task.php getTitle cross site scripting

cve-program ·

Vendor product: Feng Office

CVSS 4.0 5.1 · CVSS 3.1 3.5 · CVSS 3.0 3.5 · CVSS 2.0 4.0Source modified 14 Sep 2026Recorded 23 Oct 2026

CVE-2026-57825Published

In the opam package before 2.5.2 for OCaml, the sandbox protection mechanism can be bypassed because symlinks are mishandled during use of .install files.

cve-program ·

Vendor product: opam

CVSS 3.1 5.7Source modified 14 Sep 2026Recorded 23 Oct 2026

CVE-2026-61907Published

An issue was discovered in Cyrus IMAP before 3.12.4. JMAP snooze bypasses the destination-mailbox ACL. An authenticated user with insert permissions on another user's snoozed mailbox could cause insertion of mail to that user's inbox, or an…

cve-program ·

Vendor product: Cyrus IMAP

CVSS 3.1 4.3Source modified 14 Sep 2026Recorded 23 Oct 2026

CVE-2026-61910Published

An issue was discovered in Cyrus IMAP before 3.12.4. Mailbox/set let a sharee change a special-use role on shared mailboxes. An authenticated user with maySetKeywords on another user's mailbox could change that mailbox's specialuse annotati…

cve-program ·

Vendor product: Cyrus IMAP

CVSS 3.1 3.5Source modified 14 Sep 2026Recorded 23 Oct 2026

CVE-2026-87736Published

An issue was discovered in the mirage-crypto-ec package before 2.3.0 for OCaml. There is an EC public key out-of-bounds read for compressed points.

cve-program ·

Vendor product: mirage-crypto-ec

CVSS 3.1 4.3Source modified 14 Sep 2026Recorded 23 Oct 2026

CVE-2026-81051Published

Dell ThinOS 10, versions prior to 2605_10.2616, contain a Security Version Number Mutable to Older Versions vulnerability. A low privileged attacker with physical access could potentially exploit this vulnerability, leading to Protection me…

cve-program ·

Vendor product: ThinOS 10

CVSS 3.1 6.6Source modified 14 Sep 2026Recorded 23 Oct 2026

CVE-2026-9336Published

IBM WebSphere Application Server prior to 9.0.5.29 and 8.5.5.31 are affected by multiple vulnerabilities

cve-program ·

Vendor product: WebSphere Application Server

CVSS 3.1 6.5Source modified 14 Sep 2026Recorded 23 Oct 2026

CVE-2026-89087Published

The cstruct package before 6.3.0 for OCaml mishandles indexes.

cve-program ·

Vendor product: cstruct

CVSS 3.1 7.3Source modified 14 Sep 2026Recorded 23 Oct 2026

CVE-2026-89094Published

Forgejo before 16.0.4 allows remote code execution via a crafted template repository because template expansion on files in .forgejo/template is mishandled.

cve-program ·

Vendor product: Forgejo

CVSS 3.1 9.9Source modified 14 Sep 2026Recorded 23 Oct 2026

CVE-2026-9667Published

IBM WebSphere Application Server prior to 9.0.5.29 and 8.5.5.31 are affected by multiple vulnerabilities

cve-program ·

Vendor product: WebSphere Application Server

CVSS 3.1 5.3Source modified 14 Sep 2026Recorded 23 Oct 2026

CVE-2026-82097Published

DataStage on Cloud Pak for Data has several vulnerabilities due to open source software

cve-program ·

Vendor product: DataStage on Cloud Pak for Data

CVSS 3.1 8.8Source modified 14 Sep 2026Recorded 23 Oct 2026

CVE-2026-90715Published

marcobambini Gravity udp json-parser gravity_json.c integer overflow

cve-program ·

Vendor product: Gravity

CVSS 4.0 6.9 · CVSS 3.1 7.3 · CVSS 3.0 7.3 · CVSS 2.0 7.5Source modified 14 Sep 2026Recorded 23 Oct 2026

CVE-2026-90787Published

Soarkey StudentManagement Registration Workflow register.html RegisterServlet.doPost privileges management

cve-program ·

Vendor product: StudentManagement

CVSS 4.0 6.9 · CVSS 3.1 7.3 · CVSS 3.0 7.3 · CVSS 2.0 7.5Source modified 14 Sep 2026Recorded 23 Oct 2026

CVE-2026-90502Published

stilleshan ServerStatus Stats Generation main.cpp cross site scripting

cve-program ·

Vendor product: ServerStatus

CVSS 4.0 5.1 · CVSS 3.1 3.5 · CVSS 3.0 3.5 · CVSS 2.0 4.0Source modified 14 Sep 2026Recorded 23 Oct 2026

CVE-2026-90507Published

vvbbnn00 WARP-Clash-API Subscription subscription.py get_surge_subscription access control

cve-program ·

Vendor product: WARP-Clash-API

CVSS 4.0 5.3 · CVSS 3.1 6.3 · CVSS 3.0 6.3 · CVSS 2.0 7.5Source modified 14 Sep 2026Recorded 23 Oct 2026

CVE-2026-90518Published

PHPGurukul Bank Locker Management System sidebar.php access control

cve-program ·

Vendor product: Bank Locker Management System

CVSS 4.0 5.3 · CVSS 3.1 6.3 · CVSS 3.0 6.3 · CVSS 2.0 6.5Source modified 14 Sep 2026Recorded 23 Oct 2026

CVE-2026-59570Published

Android ZCC denial of service

cve-program ·

Vendor product: Client Connector

CVSS 3.1 7.5Source modified 14 Sep 2026Recorded 23 Oct 2026

CVE-2026-82019Published

TripleLift video-bundle.js DOM-based XSS via postMessage

cve-program ·

Vendor product: video-bundle.js

CVSS 4.0 2.3 · CVSS 3.1 4.2Source modified 14 Sep 2026Recorded 23 Oct 2026

CVE-2026-90523Published

jaychouchannel Tourism-Management-System User Register Endpoint UsersController.java privileges management

cve-program ·

Vendor product: Tourism-Management-System

CVSS 4.0 6.9 · CVSS 3.1 7.3 · CVSS 3.0 7.3 · CVSS 2.0 7.5Source modified 14 Sep 2026Recorded 23 Oct 2026

CVE-2026-57128Published

PraisonAI: Unauthenticated Event Injection via SSE `/publish` Endpoint

cve-program ·

Vendor product: PraisonAI

CVSS 3.1 4.3Source modified 14 Sep 2026Recorded 23 Oct 2026

CVE-2026-90528Published

TDuckApp tduck-platform Form Write View index.vue cross site scripting

cve-program ·

Vendor product: tduck-platform

CVSS 4.0 5.1 · CVSS 3.1 3.5 · CVSS 3.0 3.5 · CVSS 2.0 4.0Source modified 14 Sep 2026Recorded 23 Oct 2026

CVE-2026-90566Published

Rizwan17 inventory-management-system Registration register.php createUserAccount improper authorization

cve-program ·

Vendor product: inventory-management-system

CVSS 4.0 6.9 · CVSS 3.1 7.3 · CVSS 3.0 7.3 · CVSS 2.0 7.5Source modified 14 Sep 2026Recorded 23 Oct 2026

CVE-2026-90571Published

Exrick xmall Order Printing order-print.jsp cross site scripting

cve-program ·

Vendor product: xmall

CVSS 4.0 5.3 · CVSS 3.1 4.3 · CVSS 3.0 4.3 · CVSS 2.0 5.0Source modified 14 Sep 2026Recorded 23 Oct 2026

CVE-2026-90576Published

GPAC MP4Box base_scenegraph.c gf_node_list_add_child null pointer dereference

cve-program ·

Vendor product: GPAC

CVSS 4.0 4.8 · CVSS 3.1 3.3 · CVSS 3.0 3.3 · CVSS 2.0 1.7Source modified 14 Sep 2026Recorded 23 Oct 2026

CVE-2024-23176Published

An issue was discovered in the MassMessage extension in MediaWiki before 1.40.2. For a Special:MassMessage?uselang=x-xss URL, the i18n key massmessage-form-page-help allows XSS.

cve-program ·

Vendor product: MassMessage

CVSS 3.1 5.4Source modified 14 Sep 2026Recorded 23 Oct 2026

CVE-2026-90581Published

cym1102 nginxWebUI autoUpdate MainController.autoUpdate code injection

cve-program ·

Vendor product: nginxWebUI

CVSS 4.0 5.3 · CVSS 3.1 6.3 · CVSS 3.0 6.3 · CVSS 2.0 6.5Source modified 14 Sep 2026Recorded 23 Oct 2026

CVE-2026-87087Rejected

REJECT DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All references and descriptions in this candidate have been removed to prevent accidental usage.

cve-program ·

Source modified 14 Sep 2026Recorded 23 Oct 2026

CVE-2026-90599Published

Rizwan17 inventory-management-system process.php cross-site request forgery

cve-program ·

Vendor product: inventory-management-system

CVSS 4.0 5.3 · CVSS 3.1 4.3 · CVSS 3.0 4.3 · CVSS 2.0 5.0Source modified 14 Sep 2026Recorded 23 Oct 2026

CVE-2026-90604Published

Totolink A3002MU Anchor Tag cross site scripting

cve-program ·

Vendor product: A3002MU

CVSS 4.0 5.1 · CVSS 3.1 3.5 · CVSS 3.0 3.5 · CVSS 2.0 4.0Source modified 14 Sep 2026Recorded 23 Oct 2026

CVE-2026-61909Published

An issue was discovered in Cyrus IMAP before 3.12.4. CalDAV/CardDAV multiget bypasses a per-href ACL. An authenticated DAV user with some shared access to another user's calendar or address book could read even unshared events or contacts b…

cve-program ·

Vendor product: Cyrus IMAP

CVSS 3.1 3.5Source modified 14 Sep 2026Recorded 23 Oct 2026

CVE-2026-57129Published

PraisonAI: Arbitrary File Read via `@file:` Mention Path Traversal

cve-program ·

Vendor product: praisonaiagents

CVSS 3.1 7.5Source modified 14 Sep 2026Recorded 23 Oct 2026

CVE-2023-24034Published

An issue was discovered in twilio_ajax_handler.php in Nagios XI before 5.9.3. An attacker can force a user to visit a malicious site by using a open redirect vulnerability.

cve-program ·

Vendor product: Nagios XI

CVSS 3.1 3.1Source modified 14 Sep 2026Recorded 23 Oct 2026

CVE-2026-33968Published

An issue was discovered in camera in Samsung Mobile Processor Exynos 1330, 1380, 1480, 2400, 1580, 2500, 2600, and 1680. In the camera driver, a Time-of-Check Time-of-Use (TOCTOU) race condition leads to out-of-bounds access.

cve-program ·

Vendor product: Exynos 1330 firmware

CVSS 3.1 2.8Source modified 14 Sep 2026Recorded 23 Oct 2026

CVE-2026-33962Published

An issue was discovered in Wi-Fi in Samsung Mobile Processor Exynos 850, 1280, 1330, 1380, 1480, 2400, W920, and W930. A malformed Netlink command can trigger an out-of-bounds read, potentially leading to information leakage.

cve-program ·

Vendor product: Exynos 850 firmware

CVSS 3.1 2.8Source modified 14 Sep 2026Recorded 23 Oct 2026

CVE-2023-24283Published

Portable Puzzle Collection before 20230116.5782e29 was discovered to contain a buffer overflow which allows attackers to cause a Denial of Service (DoS) via a crafted save file.

cve-program ·

Vendor product: Portable Puzzle Collection

CVSS 3.1 2.9Source modified 14 Sep 2026Recorded 23 Oct 2026

CVE-2026-23793Published

An issue was discovered in Samsung Mobile Processor Exynos 1330, 1380, 1480, and 2400. An out-of-bounds memory access vulnerability in the camera GDC driver may lead to kernel memory corruption under certain conditions.

cve-program ·

Vendor product: Exynos 1330 firmware

CVSS 3.1 3.5Source modified 14 Sep 2026Recorded 23 Oct 2026

CVE-2026-23788Published

An issue was discovered in DPU in Samsung Mobile Processor Exynos 1280, 2200, and 1380. A heap overflow in the Exynos DRM HDR driver (due to improper buffer size validation) leads to kernel memory corruption and a system crash.

cve-program ·

Vendor product: Exynos 1280 firmware

CVSS 3.1 4.2Source modified 14 Sep 2026Recorded 23 Oct 2026

A catalog match establishes published evidence, not applicability to your environment. Check resolved package dependencies, or open a Microsoft CVE for fixing KBs, releases and planning.