Security

Microsoft security updates and public advisory evidence: affected products, fixing updates, exploitation and source coverage.

Security Update Guide CISA KEV

Advisory catalog

Public source statements across vendors. Explicit aliases connect records; each publisher keeps its own state, severity and affected-version evidence.

Collected statements

693862 source statements · aliases may refer to the same vulnerability

CVE-2026-116177Published

vLLM 0.10.2 before 0.25.0 DoS via Nemotron-VL Processor Decompression-Bomb Guard Bypass

cve-program ·

Vendor product: vllm

CVSS 4.0 8.7 · CVSS 3.1 7.5Source modified 29 Oct 2026Recorded 29 Oct 2026

CVE-2026-116169Published

SiYuan 2.10.0 before 3.8.7 Stored XSS via KaTeX \href in Math Blocks

cve-program ·

Vendor product: siyuan

CVSS 4.0 5.1 · CVSS 3.1 5.4Source modified 29 Oct 2026Recorded 29 Oct 2026

CVE-2026-107052Published

Insecure permissions in the AIDL interface of ProjectMAXS MAXS Module FileRead versionCode 27 allows unauthorized attackers to arbitrarily reead files outside of the sandbox via providing an absolute path.

cve-program ·

Vendor product: n/a

Source modified 29 Oct 2026Recorded 29 Oct 2026

CVE-2026-116165Published

Parse Server 9.0.0 before 9.10.4-alpha.4 Unauthenticated Class Schema Deletion on MongoDB

cve-program ·

Vendor product: parse-server · Vendor product: parse-server

CVSS 4.0 8.8Source modified 29 Oct 2026Recorded 29 Oct 2026

CVE-2026-116161Published

Parse Server 9.0.0 before 9.10.5-alpha.4 LiveQuery Information Disclosure via $or Subscriptions

cve-program ·

Vendor product: parse-server · Vendor product: parse-server

CVSS 4.0 6.0Source modified 29 Oct 2026Recorded 29 Oct 2026

CVE-2026-107058Published

An issue in Shelter versionCode 445 allows attackers to register their own auth_key and execute a takeover of another user's binder service API and preference state.

cve-program ·

Vendor product: n/a

Source modified 29 Oct 2026Recorded 29 Oct 2026

CVE-2026-116153Published

ImageMagick before 7.1.2-33 Heap Buffer Overflow via Convex-Hull on 32-bit

cve-program ·

Vendor product: ImageMagick

CVSS 4.0 2.0 · CVSS 3.1 2.5Source modified 29 Oct 2026Recorded 29 Oct 2026

CVE-2026-96512Published

Sudo: sudo: tz environment variable allows bypass of notbefore/notafter time-based authorization

cve-program ·

https://access.redhat.com/downloads/content/package-browser/: sudo · https://access.redhat.com/downloads/content/package-browser/: sudo · https://access.redhat.com/downloads/content/package-browser/: sudo

CVSS 3.1 7.8Source modified 29 Oct 2026Recorded 29 Oct 2026

CVE-2026-116149Published

ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Stack Buffer Overflow via bzip2 Compressed Images

cve-program ·

Vendor product: ImageMagick · Vendor product: ImageMagick

CVSS 4.0 7.2 · CVSS 3.1 8.1Source modified 29 Oct 2026Recorded 29 Oct 2026

CVE-2026-116145Published

ImageMagick before 6.9.13-58 and 7.x before 7.1.2-32 Security Policy Bypass via Incomplete Fix

cve-program ·

Vendor product: ImageMagick · Vendor product: ImageMagick

CVSS 4.0 1.8 · CVSS 3.1 3.9Source modified 29 Oct 2026Recorded 29 Oct 2026

CVE-2026-107015Published

Insecure permissions in Simple Contacts Pro versionCode 107 allow unauthorized attackers to write and read notes in another user's' note database.

cve-program ·

Vendor product: n/a

Source modified 29 Oct 2026Recorded 29 Oct 2026

CVE-2026-116141Published

ImageMagick before 7.1.2-33 Policy Bypass in UHDR Decoder

cve-program ·

Vendor product: ImageMagick

CVSS 4.0 6.9 · CVSS 3.1 5.3Source modified 29 Oct 2026Recorded 29 Oct 2026

CVE-2026-116136Published

ProjectSend 2.0.0 through 2.7.1 Incorrect Authorization via File Version Linking

cve-program ·

Vendor product: ProjectSend

CVSS 4.0 6.0 · CVSS 3.1 5.9Source modified 29 Oct 2026Recorded 29 Oct 2026

CVE-2026-116070Published

Docker-Proxy through 5.1.9 Missing Authentication via hubcmdui /api/config

cve-program ·

Vendor product: Docker-Proxy

CVSS 4.0 6.9 · CVSS 3.1 6.5Source modified 29 Oct 2026Recorded 29 Oct 2026

CVE-2026-62013Published

WordPress Edge Decor theme <= 2.9 - PHP Object Injection vulnerability

cve-program ·

Vendor product: Edge Decor

CVSS 3.1 9.8Source modified 29 Oct 2026Recorded 29 Oct 2026

CVE-2026-116066Published

Firecrawl before 2.11.586 SSRF Protection Bypass via DNS Rebinding in Playwright Service

cve-program ·

Vendor product: Firecrawl

CVSS 4.0 7.0 · CVSS 3.1 6.8Source modified 29 Oct 2026Recorded 29 Oct 2026

CVE-2026-62018Published

WordPress Gunslinger theme <= 1.11 - PHP Object Injection vulnerability

cve-program ·

Vendor product: Gunslinger

CVSS 3.1 9.8Source modified 29 Oct 2026Recorded 29 Oct 2026

CVE-2026-116050Published

krupalshah Employee Recruitment System Registration registerform3.php sql injection

cve-program ·

Vendor product: Employee Recruitment System

CVSS 4.0 6.9 · CVSS 3.1 7.3 · CVSS 3.0 7.3 · CVSS 2.0 7.5Source modified 29 Oct 2026Recorded 29 Oct 2026

CVE-2026-108494Published

WordPress Chained Quiz plugin <= 1.4.1 - Cross Site Scripting (XSS) vulnerability

cve-program ·

https://wordpress.org/plugins: chained-quiz

CVSS 3.1 7.1Source modified 29 Oct 2026Recorded 29 Oct 2026

CVE-2026-116047Published

Privoce Vocechat Query Parameter widget.html cross site scripting

cve-program ·

Vendor product: Vocechat

CVSS 4.0 5.3 · CVSS 3.1 4.3 · CVSS 3.0 4.3 · CVSS 2.0 5.0Source modified 29 Oct 2026Recorded 29 Oct 2026

CVE-2026-116044Published

prasathmani TinyFileManager Remote URL File Upload tinyfilemanager.php unrestricted upload

cve-program ·

Vendor product: TinyFileManager

CVSS 4.0 5.3 · CVSS 3.1 6.3 · CVSS 3.0 6.3 · CVSS 2.0 6.5Source modified 29 Oct 2026Recorded 29 Oct 2026

CVE-2026-116868Published

WordPress BuddyPress Xprofile Custom Field Types plugin <= 1.3.1 - PHP Object Injection vulnerability

cve-program ·

https://wordpress.org/plugins: bp-xprofile-custom-field-types

CVSS 3.1 8.8Source modified 29 Oct 2026Recorded 29 Oct 2026

CVE-2026-118076Published

WordPress Frisbii Pay plugin <= 1.8.19 - PHP Object Injection vulnerability

cve-program ·

https://wordpress.org/plugins: reepay-checkout-gateway

CVSS 3.1 8.8Source modified 29 Oct 2026Recorded 29 Oct 2026

CVE-2026-118081Published

WordPress 10Web Social Photo Feed plugin <= 1.5.6 - PHP Object Injection vulnerability

cve-program ·

https://wordpress.org/plugins: wd-instagram-feed

CVSS 3.1 8.8Source modified 29 Oct 2026Recorded 29 Oct 2026

CVE-2026-62008Published

WordPress Orpheus theme <= 1.8 - PHP Object Injection vulnerability

cve-program ·

Vendor product: Orpheus

CVSS 3.1 9.8Source modified 29 Oct 2026Recorded 29 Oct 2026

CVE-2026-62002Published

WordPress Meals & Wheels theme <= 1.1.13 - PHP Object Injection vulnerability

cve-program ·

Vendor product: Meals & Wheels

CVSS 3.1 9.8Source modified 29 Oct 2026Recorded 29 Oct 2026

CVE-2026-61995Published

WordPress YouTube Showcase plugin <= 4.1.0 - Cross Site Scripting (XSS) vulnerability

cve-program ·

https://wordpress.org/plugins: youtube-showcase

CVSS 3.1 7.1Source modified 29 Oct 2026Recorded 29 Oct 2026

CVE-2026-67203Rejected

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

cve-program ·

Source modified 29 Oct 2026Recorded 29 Oct 2026

CVE-2026-61988Published

WordPress Auction Nudge – Your eBay on Your Site plugin <= 8.4.0 - Cross Site Scripting (XSS) vulnerability

cve-program ·

https://wordpress.org/plugins: auction-nudge

CVSS 3.1 7.1Source modified 29 Oct 2026Recorded 29 Oct 2026

CVE-2026-54859Published

WordPress Preservation theme <= 1.15 - PHP Object Injection vulnerability

cve-program ·

Vendor product: Preservation

CVSS 3.1 9.8Source modified 29 Oct 2026Recorded 29 Oct 2026

CVE-2026-42692Published

WordPress WP Crowdfunding plugin <= 2.2.2 - Cross Site Scripting (XSS) vulnerability

cve-program ·

https://wordpress.org/plugins: wp-crowdfunding

CVSS 3.1 7.1Source modified 29 Oct 2026Recorded 29 Oct 2026

CVE-2026-67205Rejected

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

cve-program ·

Source modified 29 Oct 2026Recorded 29 Oct 2026

CVE-2026-18894Published

Langflow OSS is affected by multiple vulnerabilities

cve-program ·

Vendor product: Langflow OSS

CVSS 3.1 6.5Source modified 29 Oct 2026Recorded 29 Oct 2026

CVE-2026-104309Published

Langflow OSS is affected by multiple vulnerabilities

cve-program ·

Vendor product: Langflow OSS

CVSS 3.1 6.5Source modified 29 Oct 2026Recorded 29 Oct 2026

CVE-2026-104316Published

Langflow OSS is affected by multiple vulnerabilities

cve-program ·

Vendor product: Langflow OSS

CVSS 3.1 6.5Source modified 29 Oct 2026Recorded 29 Oct 2026

CVE-2026-25448Published

WordPress WP ERP plugin <= 1.17.10 - Broken Access Control vulnerability

cve-program ·

https://wordpress.org/plugins: erp

CVSS 3.1 4.3Source modified 29 Oct 2026Recorded 29 Oct 2026

CVE-2026-118097Published

WordPress Flash & HTML5 Video plugin <= 2.14.0 - Cross Site Scripting (XSS) vulnerability

cve-program ·

https://wordpress.org/plugins: html5-video-player

CVSS 3.1 6.5Source modified 29 Oct 2026Recorded 29 Oct 2026

CVE-2026-65592Published

n8n before 1.123.64, 2.29.8, and 2.30.1 contains a stored DOM cross-site scripting vulnerability in the Resource Locator component, which passes the workflow-persisted cachedResultUrl parameter to window.open() without scheme validation. An…

nvd ·

CVSS 4.0 · [email protected] · Secondary 8.4 · CVSS 3.1 · [email protected] · Primary 5.4Source modified 29 Oct 2026Recorded 31 Oct 2026

CVE-2026-65591Published

n8n contains a sanitizer bypass vulnerability in the legacy expression evaluator's computed-member handler. An authenticated user with workflow create or modify permissions can craft a malicious expression to bypass the sanitizer and achiev…

nvd ·

CVSS 4.0 · [email protected] · Secondary 8.9 · CVSS 3.1 · [email protected] · Primary 8.8Source modified 29 Oct 2026Recorded 31 Oct 2026

CVE-2026-65590Published

n8n before 2.29.8 and 2.30.x before 2.30.1 does not enforce shell sandbox restrictions on Linux and Windows in the @n8n/computer-use package (sandboxing was applied only on macOS). Shell commands executed by the tool run without any filesys…

nvd ·

CVSS 4.0 · [email protected] · Secondary 5.5 · CVSS 3.1 · [email protected] · Primary 9.8Source modified 29 Oct 2026Recorded 31 Oct 2026

CVE-2026-65589Published

n8n versions before 1.123.64 fail to properly mask custom HTTP header credentials in LLM sub-node execution data, writing plaintext API keys and secrets to workflow execution records. Authenticated users with access to execution data can re…

nvd ·

CVSS 4.0 · [email protected] · Secondary 5.1 · CVSS 3.1 · [email protected] · Primary 6.5Source modified 29 Oct 2026Recorded 31 Oct 2026

CVE-2026-65016Published

n8n versions before 1.123.64, 2.29.8, and 2.30.1 contain a privilege escalation vulnerability in Enterprise SSO instance-role provisioning. The provisioning path maps an IdP-asserted role claim to an n8n global role but does not prevent ass…

nvd ·

CVSS 4.0 · [email protected] · Secondary 7.7 · CVSS 3.1 · [email protected] · Primary 8.8Source modified 29 Oct 2026Recorded 31 Oct 2026

CVE-2026-65015Published

n8n versions before 2.30.1 contain a privilege escalation vulnerability in the AI Agents feature where the node-execution tool lacks proper authorization checks. A Project Viewer user can escalate privileges by chatting with an agent that h…

nvd ·

CVSS 4.0 · [email protected] · Secondary 7.2 · CVSS 3.1 · [email protected] · Primary 8.8Source modified 29 Oct 2026Recorded 31 Oct 2026

CVE-2026-59259Published

n8n before versions 1.123.61, 2.27.4, and 2.28.1 contains a permission bypass vulnerability in external secrets handling caused by a mismatch between the static validation check and the runtime expression engine. An authenticated user with …

nvd ·

CVSS 4.0 · [email protected] · Secondary 6.0 · CVSS 3.1 · [email protected] · Primary 6.5Source modified 29 Oct 2026Recorded 31 Oct 2026

CVE-2026-59257Published

n8n before 1.123.61, 2.x before 2.27.4, and 2.28.x before 2.28.1 contains a SQL injection vulnerability in the legacy MySQL v1 node's executeQuery operation. The operation substitutes evaluated {{ ... }} expression values directly into the …

nvd ·

CVSS 4.0 · [email protected] · Secondary 5.3 · CVSS 3.1 · [email protected] · Primary 8.8Source modified 29 Oct 2026Recorded 31 Oct 2026

CVE-2026-59254Published

n8n before 2.28.1 contains an information disclosure vulnerability where external secrets are incorrectly resolved in workflow node expressions outside credentials scope. Authenticated project editors can read plaintext external secret valu…

nvd ·

CVSS 4.0 · [email protected] · Secondary 6.3Source modified 29 Oct 2026Recorded 31 Oct 2026

CVE-2026-59158Published

Nuxt Ollama integrates the official Ollama JavaScript library into Nuxt applications. Prior to 1.3.1, `src/module.ts` unconditionally merges all module options, including a configured cloud `api_key`, into `runtimeConfig.public.ollama`. Nux…

nvd ·

CVSS 3.1 · [email protected] · Secondary 7.5Source modified 29 Oct 2026Recorded 31 Oct 2026

CVE-2026-58661Published

n8n before 2.28.0 (and before 1.123.58 on the 1.x branch) contains a disk space exhaustion vulnerability in the data-table file upload endpoint. The per-request quota check does not account for files already written to the shared temporary …

nvd ·

CVSS 4.0 · [email protected] · Secondary 5.3 · CVSS 3.1 · [email protected] · Primary 4.3Source modified 29 Oct 2026Recorded 31 Oct 2026

CVE-2026-56778Published

n8n before 2.25.7 and 2.26.x before 2.26.2 contains an authorization bypass in the Public API execution retry endpoint, which authorizes access using the workflow:read scope instead of workflow:execute. An authenticated user with read-only …

nvd ·

CVSS 4.0 · [email protected] · Secondary 5.3 · CVSS 3.1 · [email protected] · Secondary 6.4Source modified 29 Oct 2026Recorded 31 Oct 2026

CVE-2026-56777Published

n8n before 2.25.7 and 2.26.x before 2.26.2 contains an abstract syntax tree (AST) security validator bypass in the Python Code node. An authenticated user with permission to create or modify workflows containing a Python Code node can bypas…

nvd ·

CVSS 4.0 · [email protected] · Secondary 5.3 · CVSS 3.1 · [email protected] · Secondary 5.0Source modified 29 Oct 2026Recorded 31 Oct 2026

A catalog match establishes published evidence, not applicability to your environment. Check resolved package dependencies, or open a Microsoft CVE for fixing KBs, releases and planning.