Security

Microsoft security updates and public advisory evidence: affected products, fixing updates, exploitation and source coverage.

Security Update Guide CISA KEV

Advisory catalog

Public source statements across vendors. Explicit aliases connect records; each publisher keeps its own state, severity and affected-version evidence.

Collected statements

694495 source statements · aliases may refer to the same vulnerability

CVE-2026-112150Published

vraj404 Criminal-Management-System search.php sql injection

cve-program ·

Vendor product: Criminal-Management-System

CVSS 4.0 6.9 · CVSS 3.1 7.3 · CVSS 3.0 7.3 · CVSS 2.0 7.5Source modified 22 Oct 2026Recorded 23 Oct 2026

CVE-2026-112293Published

BoxyHQ SaaS Starter Kit through 1.6.0 Missing Authorization on Team Payment API

cve-program ·

https://github.com/boxyhq/saas-starter-kit: saas-starter-kit

CVSS 4.0 5.3 · CVSS 3.1 5.4Source modified 22 Oct 2026Recorded 23 Oct 2026

CVE-2026-112288Published

Krayin CRM 2.2.5 before 2.2.7 SSRF Filter Bypass via DNS Rebinding

cve-program ·

https://packagist.org: laravel-crm

CVSS 4.0 2.1 · CVSS 3.1 3.3Source modified 22 Oct 2026Recorded 23 Oct 2026

CVE-2026-112283Published

libbluray through 1.5.1 Uncontrolled Memory Allocation via _parse_extent_start_points

cve-program ·

https://code.videolan.org/videolan/libbluray: libbluray

CVSS 4.0 6.8 · CVSS 3.1 5.5Source modified 22 Oct 2026Recorded 23 Oct 2026

CVE-2026-112278Published

rdesktop through 1.9.0 Heap Out-of-Bounds Read via process_raw_bmpcache

cve-program ·

https://github.com/rdesktop/rdesktop: rdesktop

CVSS 4.0 7.1 · CVSS 3.1 6.5Source modified 22 Oct 2026Recorded 23 Oct 2026

CVE-2026-112273Published

libtins through 4.6 Heap Out-of-Bounds Read via DNS::compose_name

cve-program ·

https://github.com/mfontanini/libtins: libtins

CVSS 4.0 6.9 · CVSS 3.1 5.3Source modified 22 Oct 2026Recorded 23 Oct 2026

CVE-2026-112268Published

sglang-router through 0.3.2 Authorization Bypass via Mesh HA Management Routes

cve-program ·

Vendor product: sglang-router

CVSS 4.0 5.3 · CVSS 3.1 6.3Source modified 22 Oct 2026Recorded 23 Oct 2026

CVE-2026-112263Published

Television 0.15.0 through 0.15.9 OS Command Injection via External Action Formatting

cve-program ·

https://crates.io: television

CVSS 4.0 8.5 · CVSS 3.1 7.8Source modified 22 Oct 2026Recorded 23 Oct 2026

CVE-2026-111936Published

Sigma File Manager through 2.2.0 SSRF via Extension Download Commands

cve-program ·

Vendor product: Sigma File Manager

CVSS 4.0 5.3 · CVSS 3.1 4.3Source modified 22 Oct 2026Recorded 23 Oct 2026

CVE-2026-111883Published

Locust through 2.46.7 CSRF via Web UI /stop and /stats/reset

cve-program ·

https://pypi.org: locust

CVSS 4.0 5.3 · CVSS 3.1 5.4Source modified 22 Oct 2026Recorded 23 Oct 2026

CVE-2026-112145Published

speaches-ai speaches Pyannote Diarization Model Loading pyannote_diarization.py PyannoteDiarizationModelManager._load_fn externally-controlled input to select classes or code

cve-program ·

Vendor product: speaches

CVSS 4.0 6.9 · CVSS 3.1 7.3 · CVSS 3.0 7.3 · CVSS 2.0 7.5Source modified 22 Oct 2026Recorded 23 Oct 2026

CVE-2026-112141Published

satya-vinay Events-Management-System Registration-Edit doedit.php mysqli_query sql injection

cve-program ·

Vendor product: Events-Management-System

CVSS 4.0 6.9 · CVSS 3.1 7.3 · CVSS 3.0 7.3 · CVSS 2.0 7.5Source modified 22 Oct 2026Recorded 23 Oct 2026

CVE-2026-112108Published

ztxz16 fastllm String Parsing gguf.cpp ReadString buffer overflow

cve-program ·

Vendor product: fastllm

CVSS 4.0 5.3 · CVSS 3.1 6.3 · CVSS 3.0 6.3 · CVSS 2.0 7.5Source modified 22 Oct 2026Recorded 23 Oct 2026

CVE-2026-112104Published

eremef bandcamp-player Remote Control Server database.ts missing authentication

cve-program ·

Vendor product: bandcamp-player

CVSS 4.0 6.9 · CVSS 3.1 7.3 · CVSS 3.0 7.3 · CVSS 2.0 7.5Source modified 22 Oct 2026Recorded 23 Oct 2026

CVE-2026-112100Published

DeepPavlov multitask_preprocessor.py MultiTaskPipelinePreprocessor.init code injection

cve-program ·

Vendor product: DeepPavlov

CVSS 4.0 5.1 · CVSS 3.1 5.5 · CVSS 3.0 5.5 · CVSS 2.0 6.5Source modified 22 Oct 2026Recorded 23 Oct 2026

CVE-2026-112095Published

SourceCodester Inventory System Product Management products_handler.php save cross site scripting

cve-program ·

Vendor product: Inventory System

CVSS 4.0 5.1 · CVSS 3.1 3.5 · CVSS 3.0 3.5 · CVSS 2.0 4.0Source modified 22 Oct 2026Recorded 23 Oct 2026

CVE-2026-112091Published

Dav-ee dairy-management-system AJAX Endpoint checkfarmer.json.php information disclosure

cve-program ·

Vendor product: dairy-management-system

CVSS 4.0 6.9 · CVSS 3.1 5.3 · CVSS 3.0 5.3 · CVSS 2.0 5.0Source modified 22 Oct 2026Recorded 23 Oct 2026

CVE-2026-112087Published

itsourcecode Online Cake Ordering System confirm.php sql injection

cve-program ·

Vendor product: Online Cake Ordering System

CVSS 4.0 5.3 · CVSS 3.1 6.3 · CVSS 3.0 6.3 · CVSS 2.0 6.5Source modified 22 Oct 2026Recorded 23 Oct 2026

CVE-2026-112081Published

hankcs HanLP Model Config Loading reflection.py hanlp.load deserialization

cve-program ·

Vendor product: HanLP

CVSS 4.0 5.3 · CVSS 3.1 6.3 · CVSS 3.0 6.3 · CVSS 2.0 7.5Source modified 22 Oct 2026Recorded 23 Oct 2026

CVE-2026-112077Published

radareorg radare2 HTTP Sandbox Policy rtr_http.inc.c r_core_cmd_str_pipe protection mechanism

cve-program ·

Vendor product: radare2

CVSS 4.0 6.3 · CVSS 3.1 5.6 · CVSS 3.0 5.6 · CVSS 2.0 5.1Source modified 22 Oct 2026Recorded 23 Oct 2026

CVE-2026-112073Published

Tencent ncnn MatMul matmul.cpp matmul_transb out-of-bounds

cve-program ·

Vendor product: ncnn

CVSS 4.0 5.3 · CVSS 3.1 6.3 · CVSS 3.0 6.3 · CVSS 2.0 7.5Source modified 22 Oct 2026Recorded 23 Oct 2026

CVE-2026-112042Published

diem-project diem dmWidget dmBaseLinkTag.php text cross site scripting

cve-program ·

Vendor product: diem

CVSS 4.0 5.1 · CVSS 3.1 3.5 · CVSS 3.0 3.5 · CVSS 2.0 4.0Source modified 22 Oct 2026Recorded 23 Oct 2026

CVE-2026-112038Published

diem-project diem Version Check Service dmAdminCtrl.js html cross site scripting

cve-program ·

Vendor product: diem

CVSS 4.0 4.8 · CVSS 3.1 2.4 · CVSS 3.0 2.4 · CVSS 2.0 3.3Source modified 22 Oct 2026Recorded 23 Oct 2026

CVE-2026-112034Published

aircheng-org iWebShop-5 Login Redirect _userInfo.php redirect

cve-program ·

Vendor product: iWebShop-5

CVSS 4.0 5.3 · CVSS 3.1 4.3 · CVSS 3.0 4.3 · CVSS 2.0 5.0Source modified 22 Oct 2026Recorded 23 Oct 2026

CVE-2025-55654Published

A use-after-free in the gf_filter_pid_get_packet function (filter_core/filter_pid.c) of GPAC MP4Box v2.4 allows attackers to cause a Denial of Service (DoS) via supplying a crafted file.

cve-program ·

Vendor product: n/a

Source modified 22 Oct 2026Recorded 23 Oct 2026

CVE-2026-107081Published

SQL injection via identifier injection in the tableName and tableFields POST parameters of admin AJAX endpoints (admin/AJAX_lookup_handler.php, admin/AJAX_check_id.php, admin/AJAX_vocabolary_control.php) in SENAYAN Library Management System…

cve-program ·

Vendor product: n/a

Source modified 22 Oct 2026Recorded 23 Oct 2026

CVE-2026-112030Published

diem-project diem dmDataLoad.php default password

cve-program ·

Vendor product: diem

CVSS 4.0 5.3 · CVSS 3.1 6.3 · CVSS 3.0 6.3 · CVSS 2.0 6.5Source modified 22 Oct 2026Recorded 23 Oct 2026

CVE-2026-112026Published

light0011 cms UserModel.class.php sha1 weak password hash

cve-program ·

Vendor product: cms

CVSS 4.0 6.3 · CVSS 3.1 3.7 · CVSS 3.0 3.7 · CVSS 2.0 2.6Source modified 22 Oct 2026Recorded 23 Oct 2026

CVE-2026-111991Published

WongKinYiu yolov9 ONNX Metadata common.py DetectMultiBackend.init code injection

cve-program ·

Vendor product: yolov9

CVSS 4.0 5.3 · CVSS 3.1 6.3 · CVSS 3.0 6.3 · CVSS 2.0 7.5Source modified 22 Oct 2026Recorded 23 Oct 2026

CVE-2026-111986Published

AUTOMATIC1111 stable-diffusion-webui Model Instantiation sd_models.py get_obj_from_str code injection

cve-program ·

Vendor product: stable-diffusion-webui

CVSS 4.0 5.3 · CVSS 3.1 6.3 · CVSS 3.0 6.3 · CVSS 2.0 7.5Source modified 22 Oct 2026Recorded 23 Oct 2026

CVE-2026-112059Published

libLAS through 1.8.1 Heap Out-of-Bounds Write via LASSchema VLR

cve-program ·

https://github.com/libLAS/libLAS: libLAS

CVSS 4.0 6.9 · CVSS 3.1 6.1Source modified 22 Oct 2026Recorded 23 Oct 2026

CVE-2026-112054Published

Schroedinger libschroedinger through 1.0.11 Divide by Zero in Low-Delay Transform Parsing

cve-program ·

Vendor product: schroedinger

CVSS 4.0 6.8 · CVSS 3.1 5.5Source modified 22 Oct 2026Recorded 23 Oct 2026

CVE-2026-112049Published

Vita3K before build 4187 Path Traversal via VPK Package Installation

cve-program ·

Vendor product: Vita3K

CVSS 4.0 6.7 · CVSS 3.1 5.5Source modified 22 Oct 2026Recorded 23 Oct 2026

CVE-2026-112020Published

LodePNG through 20261006 Heap Out-of-Bounds Read via getFilterTypesInterlaced()

cve-program ·

Vendor product: lodepng

CVSS 4.0 6.9 · CVSS 3.1 6.1Source modified 22 Oct 2026Recorded 23 Oct 2026

CVE-2026-112000Published

Vanus 0.8.0 through 0.9.0 Missing Authorization in Gateway Streaming RPCs

cve-program ·

Vendor product: vanus

CVSS 4.0 7.2 · CVSS 3.1 7.6Source modified 22 Oct 2026Recorded 23 Oct 2026

CVE-2026-111877Published

dext34-morgan Books4Cash search.php cross site scripting

cve-program ·

Vendor product: Books4Cash

CVSS 4.0 5.3 · CVSS 3.1 4.3 · CVSS 3.0 4.3 · CVSS 2.0 5.0Source modified 22 Oct 2026Recorded 23 Oct 2026

CVE-2026-111873Published

itsmeravitejak Online-Examination-System AJAX Endpoint exammanger.php topicslist sql injection

cve-program ·

Vendor product: Online-Examination-System

CVSS 4.0 6.9 · CVSS 3.1 7.3 · CVSS 3.0 7.3 · CVSS 2.0 7.5Source modified 22 Oct 2026Recorded 23 Oct 2026

CVE-2026-111869Published

makeplane API Endpoint reliance on untrusted inputs in a security decision

cve-program ·

Vendor product: plane

CVSS 4.0 6.9 · CVSS 3.1 5.3 · CVSS 3.0 5.3 · CVSS 2.0 5.0Source modified 22 Oct 2026Recorded 23 Oct 2026

CVE-2026-113406Published

YS-infoware｜BA-Workflow - SQL Injection

cve-program ·

Vendor product: BA-Workflow

CVSS 4.0 8.7 · CVSS 3.1 8.8Source modified 22 Oct 2026Recorded 23 Oct 2026

CVE-2026-113405Published

YS-infoware｜BA-Workflow - SQL Injection

cve-program ·

Vendor product: BA-Workflow

CVSS 4.0 8.7 · CVSS 3.1 8.8Source modified 22 Oct 2026Recorded 23 Oct 2026

CVE-2026-111932Published

Coder before 2.34.2 Stored HTML Injection via Appearance Settings

cve-program ·

Vendor product: coder · Vendor product: coder · Vendor product: coder

CVSS 4.0 4.8 · CVSS 3.1 3.4Source modified 22 Oct 2026Recorded 23 Oct 2026

CVE-2026-87910Published

tarfile hardlink fallback ignores custom extraction filter rejection via None

cve-program ·

Vendor product: CPython

CVSS 4.0 5.7Source modified 22 Oct 2026Recorded 23 Oct 2026

CVE-2025-62501Published

SSH Hostkey Misconfiguration Vulnerability in Archer Devices

cve-program ·

Vendor product: Archer AX53 v1.0 · Vendor product: Archer BE3600 v1 · Vendor product: Archer BE3600 v1.2

CVSS 4.0 7.0Source modified 22 Oct 2026Recorded 23 Oct 2026

CVE-2026-76268Published

Missing Authentication for Critical Function in the Patroni REST API in Splunk Enterprise

cve-program ·

Vendor product: Splunk Enterprise

CVSS 3.1 9.8Source modified 21 Oct 2026Recorded 23 Oct 2026

MAL-2025-49362Published

Malicious code in snavbox (npm)

osv · GHSA-ppfj-vpcr-qwqg

npm: snavbox

Source modified 21 Oct 2026Recorded 24 Oct 2026

CVE-2026-106053Rejected

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

cve-program ·

Source modified 21 Oct 2026Recorded 23 Oct 2026

CVE-2026-111921Published

Vikunja 0.13.0 before 2.7.0 contains an incorrect authorization vulnerability that allows project members with Write permission to delete admin-tier link shares because the delete permission check reads an unloaded share object. Attackers c…

nvd ·

CVSS 4.0 · [email protected] · Secondary 5.3 · CVSS 3.1 · [email protected] · Secondary 5.4Source modified 21 Oct 2026Recorded 25 Oct 2026

CVE-2024-58398Published

Coder 2.3.1 before 2.14.4, 2.15.x before 2.15.3, and 2.16.0 before 2.16.1 contains an open redirect vulnerability in the login page because the redirect query parameter is improperly sanitized. Attackers can craft a Coder login URL that, wh…

nvd ·

CVSS 4.0 · [email protected] · Secondary 5.3 · CVSS 3.1 · [email protected] · Secondary 4.3Source modified 21 Oct 2026Recorded 25 Oct 2026

CVE-2026-111927Published

Coder before 2.35.4 Credential Theft via Workspace Proxy Hostname Prefix Match

cve-program ·

Vendor product: coder · Vendor product: coder · Vendor product: coder

CVSS 4.0 8.7 · CVSS 3.1 7.7Source modified 21 Oct 2026Recorded 23 Oct 2026

CVE-2026-111921Published

Vikunja 0.13.0 before 2.7.0 Incorrect Authorization in Link Share Deletion

cve-program ·

Vendor product: vikunja

CVSS 4.0 5.3 · CVSS 3.1 5.4Source modified 21 Oct 2026Recorded 23 Oct 2026

A catalog match establishes published evidence, not applicability to your environment. Check resolved package dependencies, or open a Microsoft CVE for fixing KBs, releases and planning.