Security

Microsoft security updates and public advisory evidence: affected products, fixing updates, exploitation and source coverage.

Security Update Guide CISA KEV

Advisory catalog

Public source statements across vendors. Explicit aliases connect records; each publisher keeps its own state, severity and affected-version evidence.

Collected statements

690450 source statements · aliases may refer to the same vulnerability

CVE-2026-91654Published

Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Essbase. Succe…

cve-program ·

Vendor product: Oracle Essbase

CVSS 3.1 6.3Source modified 27 Oct 2026Recorded 27 Oct 2026

CVE-2026-12887Published

In affected versions of Octopus Server, a user with permission to upload a malicious nuget package is able to deploy a script step so the script executes outside of the parent directory.

cve-program ·

Vendor product: Octopus Server

CVSS 4.0 5.1Source modified 27 Oct 2026Recorded 27 Oct 2026

CVE-2026-83371Published

Vulnerability in the Oracle HRMS (UK) product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with networ…

cve-program ·

Vendor product: Oracle HRMS (UK)

CVSS 3.1 5.4Source modified 27 Oct 2026Recorded 27 Oct 2026

CVE-2026-91653Published

Vulnerability in Oracle Essbase (component: Essbase Web Platform). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Ess…

cve-program ·

Vendor product: Oracle Essbase

CVSS 3.1 8.5Source modified 27 Oct 2026Recorded 27 Oct 2026

CVE-2026-91652Published

Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Essbase. While…

cve-program ·

Vendor product: Oracle Essbase

CVSS 3.1 5.0Source modified 27 Oct 2026Recorded 27 Oct 2026

CVE-2026-44829Published

Gotenberg is a Docker-powered stateless API for PDF files. In 8.32.0 and earlier, filename handling in pkg/modules/api/context.go uses filepath.Base on Linux, which does not treat backslashes as path separators, so a multipart filename cont…

nvd ·

CVSS 3.1 · [email protected] · Secondary 8.8Source modified 27 Oct 2026Recorded 29 Oct 2026

CVE-2026-45741Published

Gotenberg is a Docker-powered stateless API for PDF files. In 8.32.0 and earlier, the IsPublicIP function in pkg/gotenberg/outbound.go does not reject the 2002::/16 6to4 prefix, the 64:ff9b::/96 and 64:ff9b:1::/48 NAT64 prefixes, the fec0::…

nvd ·

CVSS 3.1 · [email protected] · Secondary 7.5Source modified 27 Oct 2026Recorded 27 Oct 2026

CVE-2026-45742Published

Gotenberg is a Docker-powered stateless API for PDF files. From 8.10.0 until 8.33.0, the newContext function in pkg/modules/api/context.go starts one errgroup.Go goroutine for each multipart downloadFrom entry and allows those goroutines to…

nvd ·

CVSS 3.1 · [email protected] · Secondary 7.5Source modified 27 Oct 2026Recorded 27 Oct 2026

CVE-2026-49253Published

electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. Prior to 3.11.11, electerm uses remote-supplied filenames directly with path.join() while receiving Zmodem and Trzsz transfers. In src/app/server/zmod…

nvd ·

CVSS 3.1 · [email protected] · Secondary 7.1Source modified 27 Oct 2026Recorded 27 Oct 2026

CVE-2026-49255Published

electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. Prior to 3.11.11, electerm constructs operating system commands in src/app/lib/fs.js by interpolating untrusted file paths into the rmrf(), mv(), and …

nvd ·

CVSS 3.1 · [email protected] · Secondary 8.8Source modified 27 Oct 2026Recorded 27 Oct 2026

CVE-2026-52834Published

jxl-oxide is a pure Rust implementation of a JPEG XL decoder. Prior to jxl-grid 0.6.2, decoding a crafted JPEG XL image on a 32-bit platform can overflow length calculations in AlignedGrid::with_alloc_tracker and related grid and subgrid ar…

nvd ·

CVSS 3.1 · [email protected] · Secondary 7.3Source modified 27 Oct 2026Recorded 27 Oct 2026

CVE-2026-76234Published

libcrux-ecdh and libcrux-ed25519 before 0.0.6, and libcrux-psq before 0.0.7, contain cryptographic implementation bugs. libcrux-ecdh did not properly check length and clamping during X25519 secret validation (and had a broken clamping check…

nvd ·

CVSS 4.0 · [email protected] · Secondary 8.7 · CVSS 3.1 · [email protected] · Secondary 7.5Source modified 27 Oct 2026Recorded 27 Oct 2026

CVE-2026-91650Published

Vulnerability in Oracle Essbase (component: Java Based Agent). The supported version that is affected is 21.8.3.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Essb…

cve-program ·

Vendor product: Oracle Essbase

CVSS 3.1 3.7Source modified 27 Oct 2026Recorded 27 Oct 2026

CVE-2026-117603Published

Electrum before 4.7.2 Nostr Wallet Connect Plugin Daily Spending Limit Bypass

cve-program ·

Vendor product: electrum

CVSS 4.0 9.3 · CVSS 3.1 4.3Source modified 27 Oct 2026Recorded 27 Oct 2026

CVE-2026-117602Published

Electrum before 4.7.2 External Plugin Authorization Bypass Local Code Execution

cve-program ·

Vendor product: electrum

CVSS 4.0 8.6 · CVSS 3.1 8.4Source modified 27 Oct 2026Recorded 27 Oct 2026

CVE-2026-83370Published

Vulnerability in the Sourcing product of Oracle E-Business Suite (component: Auctions). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP…

cve-program ·

Vendor product: Sourcing

CVSS 3.1 7.5Source modified 27 Oct 2026Recorded 27 Oct 2026

CVE-2026-91649Published

Vulnerability in Oracle Essbase (component: Java Based Agent). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Essbase ex…

cve-program ·

Vendor product: Oracle Essbase

CVSS 3.1 6.0Source modified 27 Oct 2026Recorded 27 Oct 2026

CVE-2026-117573Published

hagent through commit 761eec6 OS Command Injection via Arduino and ESP32 MCP Tools

cve-program ·

Vendor product: hagent

CVSS 4.0 8.5 · CVSS 3.1 7.8Source modified 27 Oct 2026Recorded 27 Oct 2026

CVE-2026-117570Published

nmap-mcp through commit 3636afa Permissive NSE Script Allowlist in scan_vulnerabilities

cve-program ·

Vendor product: nmap-mcp

CVSS 4.0 4.8 · CVSS 3.1 5.2Source modified 27 Oct 2026Recorded 27 Oct 2026

CVE-2026-117569Published

Kali-GPT through commit a608c74 OS Command Injection via MCP Scanner Tool Parameters

cve-program ·

Vendor product: kali-gpt

CVSS 4.0 8.5 · CVSS 3.1 7.8Source modified 27 Oct 2026Recorded 27 Oct 2026

CVE-2026-117567Published

esp-mcp through commit 28afddf OS Command Injection via MCP Tool Parameters

cve-program ·

Vendor product: esp-mcp

CVSS 4.0 8.5 · CVSS 3.1 7.8Source modified 27 Oct 2026Recorded 27 Oct 2026

CVE-2026-117566Published

EasyImages2.0 through 2.8.6 Unauthenticated Path Traversal via down.php, thumb.php and info.php

cve-program ·

Vendor product: EasyImages2.0

CVSS 4.0 6.9 · CVSS 3.1 5.3Source modified 27 Oct 2026Recorded 27 Oct 2026

CVE-2026-117565Published

Artalk before 2.10.1 Unauthenticated SSRF via Comment Page Title Fetch

cve-program ·

Vendor product: Artalk

CVSS 4.0 6.9 · CVSS 3.1 5.3Source modified 27 Oct 2026Recorded 27 Oct 2026

CVE-2026-117563Published

MrDoc through 1.1.1 Broken Access Control via manage_doc_share

cve-program ·

Vendor product: MrDoc

CVSS 4.0 5.3 · CVSS 3.1 5.4Source modified 27 Oct 2026Recorded 27 Oct 2026

CVE-2026-117562Published

rssant 1.9.0 through 1.9.1 Information Disclosure via publish.story_get Endpoint

cve-program ·

Vendor product: rssant

CVSS 4.0 6.9 · CVSS 3.1 5.3Source modified 27 Oct 2026Recorded 27 Oct 2026

CVE-2026-117561Published

sf-mcp through 1.3.2 OS Command Injection via Salesforce CLI Flag Values

cve-program ·

Vendor product: sf-mcp

CVSS 4.0 8.5 · CVSS 3.1 7.8Source modified 27 Oct 2026Recorded 27 Oct 2026

CVE-2026-117559Published

DroidMind through 0.4.0 Command Injection via Shell Allowlist Bypass

cve-program ·

Vendor product: droidmind

CVSS 4.0 8.5 · CVSS 3.1 7.8Source modified 27 Oct 2026Recorded 27 Oct 2026

CVE-2026-117558Published

ai-sdlc MCP Server through 0.31.2 Command Injection via check_issue and check_pr_status

cve-program ·

Vendor product: ai-sdlc

CVSS 4.0 8.5 · CVSS 3.1 7.8Source modified 27 Oct 2026Recorded 27 Oct 2026

CVE-2026-117557Published

SDL_image through 3.4.8 and 2.8.12 Stack Out-of-Bounds Read in ILBM Loader

cve-program ·

Vendor product: SDL_image

CVSS 4.0 6.9 · CVSS 3.1 6.1Source modified 27 Oct 2026Recorded 27 Oct 2026

CVE-2026-117555Published

GreycLab CImg through 4.0.6 Heap Out-of-Bounds Read via Integer Overflow in _load_bmp()

cve-program ·

Vendor product: CImg

CVSS 4.0 6.9 · CVSS 3.1 6.1Source modified 27 Oct 2026Recorded 27 Oct 2026

CVE-2026-117554Published

Admidio before 5.0.17 Event Guest Restriction Bypass via events_function.php

cve-program ·

Vendor product: admidio

CVSS 4.0 5.3 · CVSS 3.1 4.3Source modified 27 Oct 2026Recorded 27 Oct 2026

CVE-2026-117553Published

Umbraco CMS before 17.7.2 and 18.2.2 Account Takeover via Host Header Poisoning

cve-program ·

NuGet: Umbraco.Cms

CVSS 4.0 7.7 · CVSS 3.1 7.5Source modified 27 Oct 2026Recorded 27 Oct 2026

CVE-2026-91648Published

Vulnerability in Oracle Essbase (component: Java Based Agent). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via TCP to compromise Oracle Essbase…

cve-program ·

Vendor product: Oracle Essbase

CVSS 3.1 5.3Source modified 27 Oct 2026Recorded 27 Oct 2026

CVE-2026-83367Published

Vulnerability in the Oracle Shipping Execution product of Oracle E-Business Suite (component: Workflow Events). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows unauthenticated attacker wit…

cve-program ·

Vendor product: Oracle Shipping Execution

CVSS 3.1 7.4Source modified 27 Oct 2026Recorded 27 Oct 2026

CVE-2026-91646Published

Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via T3, IIOP to compromise Oracle Essbase.…

cve-program ·

Vendor product: Oracle Essbase

CVSS 3.1 5.6Source modified 27 Oct 2026Recorded 27 Oct 2026

CVE-2026-91645Published

Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Essbase. Succ…

cve-program ·

Vendor product: Oracle Essbase

CVSS 3.1 5.3Source modified 27 Oct 2026Recorded 27 Oct 2026

CVE-2025-13833Published

Insecure TLS Fingerprint Validation in ForeScout SecureConnector Configuration Enables Remote Code Execution

cve-program ·

Vendor product: SecureConnector

CVSS 4.0 7.7Source modified 27 Oct 2026Recorded 27 Oct 2026

CVE-2026-83360Published

Vulnerability in the Oracle HRMS (Republic of Korea) product of Oracle E-Business Suite (component: Korean Payroll). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker w…

cve-program ·

Vendor product: Oracle HRMS (Republic of Korea)

CVSS 3.1 6.5Source modified 27 Oct 2026Recorded 27 Oct 2026

CVE-2026-91644Published

Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Essbase. Whil…

cve-program ·

Vendor product: Oracle Essbase

CVSS 3.1 9.3Source modified 27 Oct 2026Recorded 27 Oct 2026

CVE-2026-110737Published

Push Endpoint Returns Permissive CORS Headers

cve-program ·

https://repo.maven.apache.org/maven2: com.vaadin:vaadin · https://repo.maven.apache.org/maven2: com.vaadin:vaadin-core · https://repo.maven.apache.org/maven2: com.vaadin:flow-server

CVSS 4.0 2.3Source modified 27 Oct 2026Recorded 27 Oct 2026

CVE-2026-91643Published

Vulnerability in Oracle Essbase (component: Java Based Agent). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Essbas…

cve-program ·

Vendor product: Oracle Essbase

CVSS 3.1 5.3Source modified 27 Oct 2026Recorded 27 Oct 2026

CVE-2026-91642Published

Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Essbase. Succ…

cve-program ·

Vendor product: Oracle Essbase

CVSS 3.1 7.3Source modified 27 Oct 2026Recorded 27 Oct 2026

CVE-2026-91641Published

Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Essbase. While…

cve-program ·

Vendor product: Oracle Essbase

CVSS 3.1 5.0Source modified 27 Oct 2026Recorded 27 Oct 2026

CVE-2026-91640Published

Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Essbase. While…

cve-program ·

Vendor product: Oracle Essbase

CVSS 3.1 5.0Source modified 27 Oct 2026Recorded 27 Oct 2026

CVE-2026-91639Published

Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Essbase. While…

cve-program ·

Vendor product: Oracle Essbase

CVSS 3.1 7.7Source modified 27 Oct 2026Recorded 27 Oct 2026

CVE-2026-92546Published

Authentication Bypass with X-Agentic-Ally-Token in Keepnet Labs Agentic AI / Agentic Ally

cve-program ·

Vendor product: Agentic AI / Agentic Ally

CVSS 3.1 7.5Source modified 27 Oct 2026Recorded 27 Oct 2026

CVE-2026-91636Published

Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Essbase. While…

cve-program ·

Vendor product: Oracle Essbase

CVSS 3.1 7.7Source modified 27 Oct 2026Recorded 27 Oct 2026

CVE-2026-83359Published

Vulnerability in the Oracle HRMS (India) product of Oracle E-Business Suite (component: Indian Payroll). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network …

cve-program ·

Vendor product: Oracle HRMS (India)

CVSS 3.1 6.5Source modified 27 Oct 2026Recorded 27 Oct 2026

CVE-2026-91634Published

Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3, IIOP to compromise Oracle Essbase. …

cve-program ·

Vendor product: Oracle Essbase

CVSS 3.1 5.3Source modified 27 Oct 2026Recorded 27 Oct 2026

CVE-2026-116627Published

Improper neutralization of input during web page generation ('Cross-site Scripting') in the notifications feature in Devolutions PowerShell Universal 2026.3.0 and earlier allows an authenticated user with notification creation permission to…

cve-program ·

Vendor product: PowerShell Universal

Source modified 27 Oct 2026Recorded 27 Oct 2026

A catalog match establishes published evidence, not applicability to your environment. Check resolved package dependencies, or open a Microsoft CVE for fixing KBs, releases and planning.