Security

Microsoft security updates and public advisory evidence: affected products, fixing updates, exploitation and source coverage.

Security Update Guide CISA KEV

Advisory catalog

Public source statements across vendors. Explicit aliases connect records; each publisher keeps its own state, severity and affected-version evidence.

Collected statements

690459 source statements · aliases may refer to the same vulnerability

CVE-2026-85611Published

OpenPanel before 2.3.0 Cross-Tenant BOLA via report procedures

cve-program ·

Vendor product: openpanel

CVSS 4.0 5.3 · CVSS 3.1 6.4Source modified 27 Oct 2026Recorded 27 Oct 2026

CVE-2026-85610Published

OpenPanel before 2.3.0 Remote Code Execution via chart formulas

cve-program ·

Vendor product: openpanel

CVSS 4.0 8.7 · CVSS 3.1 8.8Source modified 27 Oct 2026Recorded 27 Oct 2026

CVE-2026-85609Published

Openpanel before 2.3.0 SSRF via Site Checker Endpoint

cve-program ·

Vendor product: openpanel

CVSS 4.0 6.9 · CVSS 3.1 7.5Source modified 27 Oct 2026Recorded 27 Oct 2026

CVE-2026-82634Published

Frappe Framework Development Branch Incorrect Authorization via Jinja Template Preview Endpoint

cve-program ·

Vendor product: frappe

CVSS 4.0 7.1 · CVSS 3.1 6.5Source modified 27 Oct 2026Recorded 27 Oct 2026

CVE-2026-81028Published

ZLMediaKit downloadFile Root-Directory Confinement Bypass via Prefix Collision

cve-program ·

https://github.com/ZLMediaKit/ZLMediaKit: ZLMediaKit

CVSS 4.0 6.9 · CVSS 3.1 4.9Source modified 27 Oct 2026Recorded 27 Oct 2026

CVE-2026-77769Published

OpenPanel report.list Queries Reports by an Unverified dashboardId, Crossing Organization Boundaries

cve-program ·

Vendor product: openpanel

CVSS 3.1 6.5 · CVSS 4.0 7.1Source modified 27 Oct 2026Recorded 27 Oct 2026

CVE-2026-77768Published

OpenPanel report.get Returns Any Report by Identifier Without Checking Project Access

cve-program ·

Vendor product: openpanel

CVSS 3.1 6.5 · CVSS 4.0 7.1Source modified 27 Oct 2026Recorded 27 Oct 2026

CVE-2026-77214Published

libexpat Heap Buffer Over-read in xmlparse.c via XML_ParseBuffer

cve-program ·

Vendor product: libexpat

CVSS 4.0 8.3 · CVSS 3.1 8.2Source modified 27 Oct 2026Recorded 27 Oct 2026

CVE-2026-76832Published

Agno PythonTools Path Traversal via joinpath file_name argument

cve-program ·

Vendor product: Agno

CVSS 4.0 8.5 · CVSS 3.1 8.8Source modified 27 Oct 2026Recorded 27 Oct 2026

CVE-2026-75147Published

FFmpeg Out-of-Bounds Read in AV1 RTP Packetizer via rtpenc_av1.c

cve-program ·

Vendor product: FFmpeg

CVSS 4.0 6.9 · CVSS 3.1 7.1Source modified 27 Oct 2026Recorded 27 Oct 2026

CVE-2026-75146Published

FFmpeg Out-of-Bounds Read in DASH Demuxer via dashdec.c

cve-program ·

Vendor product: FFmpeg

CVSS 4.0 7.2 · CVSS 3.1 8.1Source modified 27 Oct 2026Recorded 27 Oct 2026

CVE-2026-75145Published

FFmpeg Integer Narrowing Conversion OOB Memory Access in AV1 RTP Packetizer

cve-program ·

Vendor product: FFmpeg

CVSS 4.0 5.8 · CVSS 3.1 5.8Source modified 27 Oct 2026Recorded 27 Oct 2026

CVE-2026-75144Published

FFmpeg Heap Buffer Overflow in VC-2/Dirac RTP Packetizer

cve-program ·

Vendor product: FFmpeg

CVSS 4.0 8.5 · CVSS 3.1 7.8Source modified 27 Oct 2026Recorded 27 Oct 2026

CVE-2026-75143Published

FFmpeg Heap Buffer Overflow via RIST Protocol Reader

cve-program ·

Vendor product: FFmpeg

CVSS 4.0 9.3 · CVSS 3.1 9.8Source modified 27 Oct 2026Recorded 27 Oct 2026

CVE-2026-75142Published

FFmpeg Stack Buffer Overflow in MPEG-PS Muxer via mpegenc.c

cve-program ·

Vendor product: FFmpeg

CVSS 4.0 8.5 · CVSS 3.1 7.8Source modified 27 Oct 2026Recorded 27 Oct 2026

CVE-2026-75141Published

FFmpeg Heap Buffer Overflow in hvcC Box Writer via HEVC Muxing

cve-program ·

Vendor product: FFmpeg

CVSS 4.0 8.5 · CVSS 3.1 7.8Source modified 27 Oct 2026Recorded 27 Oct 2026

CVE-2026-68765Published

hashcat KeePass KDBX v4 Module Heap Buffer Overflow via Token Field

cve-program ·

Vendor product: hashcat

CVSS 4.0 5.2 · CVSS 3.1 6.1Source modified 27 Oct 2026Recorded 27 Oct 2026

CVE-2026-67352Published

luci-app-https-dns-proxy Stored XSS via resolver_url

cve-program ·

Vendor product: luci

CVSS 4.0 6.8 · CVSS 3.1 7.6Source modified 27 Oct 2026Recorded 27 Oct 2026

CVE-2026-63174Published

Omnispace Agora Project < 26.10.0 Broken Access Control via spaceAffectList

cve-program ·

Vendor product: Agora Project

CVSS 4.0 8.6 · CVSS 3.1 8.1Source modified 27 Oct 2026Recorded 27 Oct 2026

CVE-2026-63172Published

Omnispace Agora Project < 26.10.0 Broken Function-Level Authorization via User-Edit

cve-program ·

Vendor product: Agora Project

CVSS 4.0 7.1 · CVSS 3.1 7.1Source modified 27 Oct 2026Recorded 27 Oct 2026

CVE-2026-63171Published

Omnispace Agora Project < 26.10.0 Stored XSS via Category Description

cve-program ·

Vendor product: Agora Project

CVSS 4.0 5.1 · CVSS 3.1 5.4Source modified 27 Oct 2026Recorded 27 Oct 2026

CVE-2026-63169Published

Omnispace Agora Project < 26.10.0 Stored XSS via Messenger Iframe

cve-program ·

Vendor product: Agora Project

CVSS 4.0 5.3 · CVSS 3.1 6.4Source modified 27 Oct 2026Recorded 27 Oct 2026

CVE-2026-63168Published

Omnispace Agora Project < 26.10.0 Stored XSS via Nested POST Array Bypass

cve-program ·

Vendor product: Agora Project

CVSS 4.0 5.1 · CVSS 3.1 5.4Source modified 27 Oct 2026Recorded 27 Oct 2026

CVE-2026-63165Published

Omnispace Agora Project < 26.10.0 SQL Injection via sortEvents Parameter

cve-program ·

Vendor product: Agora Project

CVSS 4.0 8.6 · CVSS 3.1 8.1Source modified 27 Oct 2026Recorded 27 Oct 2026

CVE-2026-63163Published

Omnispace Agora Project < 26.10.0 Broken Access Control via MobileFileDownload

cve-program ·

Vendor product: Agora Project

CVSS 4.0 8.7 · CVSS 3.1 7.5Source modified 27 Oct 2026Recorded 27 Oct 2026

CVE-2026-63162Published

Omnispace Agora Project < 26.10.0 Path Traversal via tmpFolderName Parameter

cve-program ·

Vendor product: Agora Project

CVSS 4.0 8.7 · CVSS 3.1 8.8Source modified 27 Oct 2026Recorded 27 Oct 2026

CVE-2026-63161Published

Omnispace Agora Project < 26.10.0 Session Fixation via Authentication

cve-program ·

Vendor product: Agora Project

CVSS 4.0 8.6 · CVSS 3.1 8.8Source modified 27 Oct 2026Recorded 27 Oct 2026

CVE-2026-63160Published

Omnispace Agora Project < 26.10.0 Insecure Remember-Me Token Storage

cve-program ·

Vendor product: Agora Project

CVSS 4.0 9.1 · CVSS 3.1 7.4Source modified 27 Oct 2026Recorded 27 Oct 2026

CVE-2026-63159Published

Omnispace Agora Project < 26.10.0 Predictable Password-Reset Token Account Takeover

cve-program ·

Vendor product: Agora Project

CVSS 4.0 9.1 · CVSS 3.1 7.4Source modified 27 Oct 2026Recorded 27 Oct 2026

CVE-2026-63158Published

Omnispace Agora Project < 26.10.0 Pass-the-Hash Authentication Bypass via Cookies

cve-program ·

Vendor product: Agora Project

CVSS 4.0 9.1 · CVSS 3.1 7.4Source modified 27 Oct 2026Recorded 27 Oct 2026

CVE-2026-63157Published

Omnispace Agora Project < 26.10.0 Stored XSS via Links Module

cve-program ·

Vendor product: Agora Project

CVSS 4.0 5.1 · CVSS 3.1 5.4Source modified 27 Oct 2026Recorded 27 Oct 2026

CVE-2026-63156Published

Omnispace Agora Project < 26.10.0 Reflected XSS via visioUrl Parameter

cve-program ·

Vendor product: Agora Project

CVSS 4.0 5.1 · CVSS 3.1 6.1Source modified 27 Oct 2026Recorded 27 Oct 2026

CVE-2026-63154Published

Omnispace Agora Project < 26.10.0 SQL Identifier Injection via agoraFields[]

cve-program ·

Vendor product: Agora Project

CVSS 4.0 8.7 · CVSS 3.1 8.8Source modified 27 Oct 2026Recorded 27 Oct 2026

CVE-2026-63153Published

Omnispace Agora Project < 26.10.0 Broken Access Control via setAffectations()

cve-program ·

Vendor product: Agora Project

CVSS 4.0 8.6 · CVSS 3.1 8.1Source modified 27 Oct 2026Recorded 27 Oct 2026

CVE-2026-63152Published

Omnispace Agora Project < 26.10.0 Second-Order SQL Injection via _idCategoryFilter

cve-program ·

Vendor product: Agora Project

CVSS 4.0 8.6 · CVSS 3.1 8.1Source modified 27 Oct 2026Recorded 27 Oct 2026

CVE-2026-63149Published

Omnispace Agora Project < 26.10.0 Predictable Default Password via uniqid()

cve-program ·

Vendor product: Agora Project

CVSS 4.0 9.1 · CVSS 3.1 7.4Source modified 27 Oct 2026Recorded 27 Oct 2026

CVE-2026-63148Published

Omnispace Agora Project < 26.10.0 Stored XSS via Poll-Response Attachment Filename

cve-program ·

Vendor product: Agora Project

CVSS 4.0 5.1 · CVSS 3.1 5.4Source modified 27 Oct 2026Recorded 27 Oct 2026

CVE-2026-63147Published

Omnispace Agora Project < 26.10.0 Stored XSS via Uploaded File Name

cve-program ·

Vendor product: Agora Project

CVSS 4.0 5.1 · CVSS 3.1 5.4Source modified 27 Oct 2026Recorded 27 Oct 2026

CVE-2026-63146Published

Omnispace Agora Project < 26.10.0 PHP Code Injection via config.inc.php

cve-program ·

Vendor product: Agora Project

CVSS 4.0 9.3 · CVSS 3.1 9.8Source modified 27 Oct 2026Recorded 27 Oct 2026

CVE-2026-56101Published

OpenBSD ieee80211_crypto_tkip.c TKIP MIC Countermeasure Logic Inversion DoS

cve-program ·

Vendor product: OpenBSD

CVSS 4.0 6.0 · CVSS 3.1 5.3Source modified 27 Oct 2026Recorded 27 Oct 2026

CVE-2026-53995Published

MLflow 3.17.1 and prior Path Traversal via Trace ID API

cve-program ·

Vendor product: mlflow

CVSS 4.0 8.8 · CVSS 3.1 8.2Source modified 27 Oct 2026Recorded 27 Oct 2026

CVE-2026-40030Published

parseusbs < 1.9 Command Injection via Volume Path Argument

cve-program ·

Vendor product: parseusbs

CVSS 4.0 8.4 · CVSS 3.1 7.8Source modified 27 Oct 2026Recorded 27 Oct 2026

CVE-2026-40029Published

parseusbs < 1.9 Command Injection via Crafted LNK Filename

cve-program ·

Vendor product: parseusbs

CVSS 4.0 8.5 · CVSS 3.1 7.8Source modified 27 Oct 2026Recorded 27 Oct 2026

CVE-2026-116735Published

libpff through 20260926 Heap Out-of-Bounds Read via libpff_table_read_6c_record_entries

cve-program ·

Vendor product: libpff

CVSS 4.0 6.9 · CVSS 3.1 6.1Source modified 27 Oct 2026Recorded 27 Oct 2026

CVE-2026-115727Published

AgenticSeek before commit 409840c RCE via Exposed Werkzeug Debugger in llm_server

cve-program ·

Vendor product: AgenticSeek

CVSS 4.0 9.2 · CVSS 3.1 8.1Source modified 27 Oct 2026Recorded 27 Oct 2026

CVE-2026-112345Published

TTLock Android App < 9.8.260718 Hardcoded BLE Pairing Key Exposure

cve-program ·

Vendor product: TTLock

CVSS 4.0 8.6 · CVSS 3.1 8.1Source modified 27 Oct 2026Recorded 27 Oct 2026

CVE-2026-112342Published

Tandoor Recipes < 2.7.0 Cross-Space Permission Cache Poisoning

cve-program ·

Vendor product: Tandoor Recipes

CVSS 4.0 7.1 · CVSS 3.1 7.1Source modified 27 Oct 2026Recorded 27 Oct 2026

CVE-2026-112329Published

Sensei LMS 4.26.4 Broken Access Control via save_new_message

cve-program ·

Vendor product: Sensei LMS

CVSS 4.0 5.3 · CVSS 3.1 4.3Source modified 27 Oct 2026Recorded 27 Oct 2026

CVE-2026-112328Published

Sensei LMS 4.26.4 Broken Access Control via add_new_module_term AJAX

cve-program ·

Vendor product: Sensei LMS

CVSS 4.0 5.3 · CVSS 3.1 4.3Source modified 27 Oct 2026Recorded 27 Oct 2026

CVE-2026-112296Published

FlyCms through commit edfdf724 Default Super Administrator Credentials

cve-program ·

https://github.com/sunkaifei/FlyCms: FlyCms

CVSS 4.0 9.3 · CVSS 3.1 9.8Source modified 27 Oct 2026Recorded 27 Oct 2026

A catalog match establishes published evidence, not applicability to your environment. Check resolved package dependencies, or open a Microsoft CVE for fixing KBs, releases and planning.