Security

Microsoft security updates and public advisory evidence: affected products, fixing updates, exploitation and source coverage.

Security Update Guide CISA KEV

Advisory catalog

Public source statements across vendors. Explicit aliases connect records; each publisher keeps its own state, severity and affected-version evidence.

Collected statements

690407 source statements · aliases may refer to the same vulnerability

CVE-2026-114122Published

Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to versions 42.11.6, 43.7.3, 44.4.3, and 45.0.0-alpha.9, frame data received from the GPU process for webContents.beginFrameSubscr…

nvd ·

CVSS 3.1 · [email protected] · Secondary 3.9Source modified 28 Oct 2026Recorded 29 Oct 2026

CVE-2026-113798Published

Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to versions 42.11.9, 43.7.6, 44.5.0, and 45.0.0-alpha.13, pointerLock permission requests from some cross-origin iframes caused se…

nvd ·

CVSS 3.1 · [email protected] · Secondary 5.4Source modified 28 Oct 2026Recorded 29 Oct 2026

CVE-2026-114661Published

OpenRemote 1.2.0 before 1.31.0 Missing Authorization in Gateway Tunnel Endpoints

cve-program ·

Vendor product: openremote

CVSS 4.0 9.0 · CVSS 3.1 8.5Source modified 28 Oct 2026Recorded 28 Oct 2026

CVE-2026-114657Published

Grav 2.0.0 before 2.2.5 HTTP Basic Credential Disclosure via Twig Uri

cve-program ·

Vendor product: grav

CVSS 4.0 6.9 · CVSS 3.1 5.7Source modified 28 Oct 2026Recorded 28 Oct 2026

CVE-2026-114640Published

Traefik v3.7.0 before v3.7.14 mTLS Header Spoofing via Ingress-NGINX HTTP Router

cve-program ·

Vendor product: traefik

CVSS 4.0 7.0 · CVSS 3.1 8.7Source modified 28 Oct 2026Recorded 28 Oct 2026

CVE-2026-114636Published

Traefik v3.7.13 Authentication Bypass via ssl-passthrough Ingress HTTP Router

cve-program ·

Vendor product: traefik

CVSS 4.0 7.0 · CVSS 3.1 8.7Source modified 28 Oct 2026Recorded 28 Oct 2026

CVE-2026-114722Published

Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a CSS scoping bypass in HTML messages. rcube_utils::mod_css_styles() did not treat an at-rule prologue such as @layer a; as a selector boundary, and did not handle select…

cve-program ·

Vendor product: Webmail

CVSS 3.1 6.5Source modified 28 Oct 2026Recorded 28 Oct 2026

CVE-2026-114718Published

Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a cross-site scripting vulnerability in the password plugin. Error text returned by a password driver was concatenated into the message presented to the user without HTML…

cve-program ·

Vendor product: Webmail

CVSS 3.1 4.7Source modified 28 Oct 2026Recorded 28 Oct 2026

CVE-2026-114714Published

Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a path traversal vulnerability in the squirrelmail_usercopy plugin. With the file based backend, the source path was built from the login name without rejecting path sepa…

cve-program ·

Vendor product: Webmail

CVSS 3.1 5.3Source modified 28 Oct 2026Recorded 28 Oct 2026

CVE-2026-114574Published

massCodeIO massCode Local HTTP Service index.ts information disclosure

cve-program ·

Vendor product: massCode

CVSS 4.0 5.3 · CVSS 3.1 4.3 · CVSS 3.0 4.3 · CVSS 2.0 5.0Source modified 28 Oct 2026Recorded 28 Oct 2026

CVE-2026-76406Published

Information Disclosure through REST API Authentication in Splunk SOAR

cve-program ·

Vendor product: Splunk SOAR

CVSS 3.1 5.9Source modified 28 Oct 2026Recorded 28 Oct 2026

CVE-2026-76305Published

Improper Access Control during App Downloads in Splunk SOAR

cve-program ·

Vendor product: Splunk SOAR

CVSS 3.1 6.5Source modified 28 Oct 2026Recorded 28 Oct 2026

CVE-2026-76301Published

Security Hardening in Splunk Enterprise - October 2026

cve-program ·

Vendor product: Splunk Enterprise

Source modified 28 Oct 2026Recorded 28 Oct 2026

CVE-2026-118378Published

Tabularis before 0.28.0 SQL Injection via MCP describe_table table_name

cve-program ·

Vendor product: tabularis

CVSS 4.0 8.5 · CVSS 3.1 7.8Source modified 28 Oct 2026Recorded 28 Oct 2026

CVE-2026-118377Published

mews/pos through 2.0.0 Missing Hash Verification in 3D Pay and 3D Host Callbacks

cve-program ·

Vendor product: pos

CVSS 4.0 8.7 · CVSS 3.1 7.5Source modified 28 Oct 2026Recorded 28 Oct 2026

CVE-2026-118375Published

llama.cpp b8841 before b11865 Stack-based Buffer Overflow via ggml-rpc RDMA rdma_recv()

cve-program ·

Vendor product: llama.cpp

CVSS 4.0 9.2 · CVSS 3.1 8.1Source modified 28 Oct 2026Recorded 28 Oct 2026

CVE-2026-118374Published

LibreSSL ocspcheck through 4.4.0 Memory Exhaustion via Unbounded OCSP HTTP Response

cve-program ·

Vendor product: LibreSSL

CVSS 4.0 8.2 · CVSS 3.1 5.9Source modified 28 Oct 2026Recorded 28 Oct 2026

CVE-2026-118373Published

LibreSSL ocspcheck through 4.4.0 Cleartext Transmission of OCSP Requests via url2host()

cve-program ·

Vendor product: LibreSSL

CVSS 4.0 6.3 · CVSS 3.1 3.7Source modified 28 Oct 2026Recorded 28 Oct 2026

CVE-2026-76297Published

Federated Search Provider State Change through Cross-Site Request Forgery (CSRF) in Splunk Web for Splunk Enterprise

cve-program ·

Vendor product: Splunk Enterprise

CVSS 3.1 4.2Source modified 28 Oct 2026Recorded 28 Oct 2026

CVE-2026-118371Published

LibreSSL through 4.4.0 CRLF Injection via OCSP_sendreq_new() Request Line

cve-program ·

Vendor product: LibreSSL

CVSS 4.0 6.3 · CVSS 3.1 3.7Source modified 28 Oct 2026Recorded 28 Oct 2026

CVE-2026-118370Published

libexpat through 2.9.0 Integer Overflow in storeAtts via attIndex and nPrefixes

cve-program ·

Vendor product: libexpat

CVSS 4.0 8.2 · CVSS 3.1 5.9Source modified 28 Oct 2026Recorded 28 Oct 2026

CVE-2026-117610Published

libexpat through 2.9.0 NULL Pointer Dereference via External Entity Subparser

cve-program ·

Vendor product: libexpat

CVSS 4.0 8.2 · CVSS 3.1 5.9Source modified 28 Oct 2026Recorded 28 Oct 2026

CVE-2026-117608Published

Assimp through 6.0.5 Heap Out-of-Bounds Read via MD2 Importer Integer Overflow

cve-program ·

Vendor product: assimp

CVSS 4.0 6.9 · CVSS 3.1 6.1Source modified 28 Oct 2026Recorded 28 Oct 2026

CVE-2026-117607Published

Xerte Online Toolkits through 3.15.5 RCE via Language Pack Import

cve-program ·

Vendor product: xerteonlinetoolkits

CVSS 4.0 8.6 · CVSS 3.1 7.2Source modified 28 Oct 2026Recorded 28 Oct 2026

CVE-2026-117606Published

NexoPOS through 6.3.0 Missing Authorization via Cash Register Session Actions

cve-program ·

Vendor product: NexoPOS

CVSS 4.0 5.3 · CVSS 3.1 5.4Source modified 28 Oct 2026Recorded 28 Oct 2026

CVE-2015-20129Published

CrushFTP before 7.3.0 Cross-Site Request Forgery via /WebInterface/function/

cve-program ·

Vendor product: CrushFTP

CVSS 4.0 8.6 · CVSS 3.1 8.8Source modified 28 Oct 2026Recorded 28 Oct 2026

CVE-2014-125138Published

C97net qEngine CMS through 6.0.0, Kemana Directory through 1.5.6, Cart Engine through 3.0.0 Unrestricted File Upload via Image Fields

cve-program ·

Vendor product: qEngine CMS · Vendor product: Kemana Directory · Vendor product: Cart Engine

CVSS 4.0 8.7 · CVSS 3.1 8.8Source modified 28 Oct 2026Recorded 28 Oct 2026

CVE-2014-125137Published

C97net qEngine CMS through 6.0.0, Kemana Directory through 1.5.6, Cart Engine through 3.0.0 Local File Inclusion via admin/task.php

cve-program ·

Vendor product: qEngine CMS · Vendor product: Kemana Directory · Vendor product: Cart Engine

CVSS 4.0 7.1 · CVSS 3.1 6.5Source modified 28 Oct 2026Recorded 28 Oct 2026

CVE-2013-20009Published

Linksys WAG200G through 1.01.06 Stored XSS via policy_name Parameter

cve-program ·

Vendor product: WAG200G

CVSS 4.0 4.8 · CVSS 3.1 4.8Source modified 28 Oct 2026Recorded 28 Oct 2026

CVE-2013-20008Published

Linksys WAG200G through 1.01.06 Admin Password Change Without Current Password

cve-program ·

Vendor product: WAG200G

CVSS 4.0 7.0 · CVSS 3.1 6.8Source modified 28 Oct 2026Recorded 28 Oct 2026

CVE-2013-20007Published

Linksys WAG200G through 1.01.06 OS Command Injection via timer_interval in setup.cgi

cve-program ·

Vendor product: WAG200G

CVSS 4.0 8.6 · CVSS 3.1 7.2Source modified 28 Oct 2026Recorded 28 Oct 2026

CVE-2026-114439Published

oretnom23 php-travel-agency-system Session session.php missing authentication

cve-program ·

Vendor product: php-travel-agency-system

CVSS 4.0 6.9 · CVSS 3.1 7.3 · CVSS 3.0 7.3 · CVSS 2.0 7.5Source modified 28 Oct 2026Recorded 28 Oct 2026

CVE-2026-114382Published

TOTOLINK EX200 lan.so cstecgi.cgi setStaticDhcpConfig stack-based overflow

cve-program ·

Vendor product: EX200

CVSS 4.0 10.0 · CVSS 3.1 10.0 · CVSS 3.0 10.0 · CVSS 2.0 10.0Source modified 28 Oct 2026Recorded 28 Oct 2026

CVE-2026-29001Published

TastyIgniter 4.4.5 PHP Object Injection via Settings Deserialization

cve-program ·

Vendor product: TastyIgniter

CVSS 4.0 8.6 · CVSS 3.1 7.2Source modified 28 Oct 2026Recorded 28 Oct 2026

CVE-2026-96640Published

Pillow PDF append accepts malformed shared page-tree DAG causing resource exhaustion

cve-program ·

Vendor product: Pillow

CVSS 4.0 8.2Source modified 28 Oct 2026Recorded 28 Oct 2026

CVE-2026-96778Published

Pillow: Heap buffer overflow writing JPEG comment after ICC profile fills buffer

cve-program ·

Vendor product: Pillow

CVSS 4.0 7.7Source modified 28 Oct 2026Recorded 28 Oct 2026

CVE-2026-96641Published

Pillow: Reachable undefined behavior in native integer operations, potentially leading to denial of service or logic integrity compromise

cve-program ·

Vendor product: Pillow

CVSS 3.1 6.5Source modified 28 Oct 2026Recorded 28 Oct 2026

CVE-2026-114379Published

EKKOLearnAI ekko-studio Media Generation API media.ts saveGeneratedImages file inclusion

cve-program ·

Vendor product: ekko-studio

CVSS 4.0 5.3 · CVSS 3.1 5.4 · CVSS 3.0 5.4 · CVSS 2.0 5.5Source modified 28 Oct 2026Recorded 28 Oct 2026

CVE-2026-114143Published

toml-node: Quadratic-complexity DoS via long dotted keys or table paths in toml.parse()

cve-program ·

Vendor product: toml-node

CVSS 4.0 8.7Source modified 28 Oct 2026Recorded 28 Oct 2026

CVE-2026-114139Published

Sentry-Javascript: Middleware Bypass when using Tunnel route

cve-program ·

Vendor product: sentry-javascript

CVSS 4.0 9.1Source modified 28 Oct 2026Recorded 28 Oct 2026

CVE-2026-114376Published

leomoon-studios wiki-go API editor.go SourceHandler path traversal

cve-program ·

Vendor product: wiki-go

CVSS 4.0 5.3 · CVSS 3.1 6.3 · CVSS 3.0 6.3 · CVSS 2.0 6.5Source modified 28 Oct 2026Recorded 28 Oct 2026

CVE-2026-114135Published

Jupyter Server: Gateway WebSocket handler bypasses kernel execute authorization

cve-program ·

Vendor product: jupyter_server

CVSS 3.1 8.8Source modified 28 Oct 2026Recorded 28 Oct 2026

CVE-2026-114438Published

Keycloak-services: keycloak-services: required otp enrollment bypassed via update user locale required action ordering

cve-program ·

https://access.redhat.com/downloads/content/package-browser/: keycloak-services · https://access.redhat.com/downloads/content/package-browser/: rhbk/keycloak-rhel9 · https://access.redhat.com/downloads/content/package-browser/: keycloak-services

CVSS 3.1 4.2Source modified 28 Oct 2026Recorded 28 Oct 2026

CVE-2026-111809Published

Apache Traffic Server: HEAD requests carrying Content-Length or Transfer-Encoding enable request smuggling

cve-program ·

Vendor product: Apache Traffic Server

CVSS 3.1 9.3 · CVSS 4.0 6.9Source modified 28 Oct 2026Recorded 28 Oct 2026

CVE-2026-114362Published

HarnessRouter Targets Test Endpoint app.py server-side request forgery

cve-program ·

Vendor product: HarnessRouter

CVSS 4.0 5.3 · CVSS 3.1 6.3 · CVSS 3.0 6.3 · CVSS 2.0 6.5Source modified 28 Oct 2026Recorded 28 Oct 2026

CVE-2026-114267Published

SourceCodester Food Order Management System Admin Endpoint authorization

cve-program ·

Vendor product: Food Order Management System

CVSS 4.0 6.9 · CVSS 3.1 7.3 · CVSS 3.0 7.3 · CVSS 2.0 7.5Source modified 28 Oct 2026Recorded 28 Oct 2026

CVE-2026-114264Published

ProjectWorlds Advanced Library Management System edit_member.php sql injection

cve-program ·

Vendor product: Advanced Library Management System

CVSS 4.0 5.1 · CVSS 3.1 4.7 · CVSS 3.0 4.7 · CVSS 2.0 5.8Source modified 28 Oct 2026Recorded 28 Oct 2026

CVE-2026-118271Published

a2ui-project a2ui data-context Resolver data-context.ts resource consumption

cve-program ·

Vendor product: a2ui

CVSS 4.0 5.3 · CVSS 3.1 4.3 · CVSS 3.0 4.3 · CVSS 2.0 4.0Source modified 28 Oct 2026Recorded 28 Oct 2026

CVE-2026-114130Published

Nuxt: Incomplete fix for GHSA-934w-87qh-qr26: a `javascript:` URL prefixed with an ASCII control character executes from `<NuxtLink>` when `pages` is disabled

cve-program ·

Vendor product: nuxt

CVSS 4.0 2.3Source modified 28 Oct 2026Recorded 28 Oct 2026

CVE-2026-114126Published

Storybook dev server: devices on the same network can obtain the WebSocket token and write code into story files

cve-program ·

Vendor product: storybook

CVSS 4.0 8.7Source modified 28 Oct 2026Recorded 28 Oct 2026

A catalog match establishes published evidence, not applicability to your environment. Check resolved package dependencies, or open a Microsoft CVE for fixing KBs, releases and planning.