Security

Microsoft security updates and public advisory evidence: affected products, fixing updates, exploitation and source coverage.

Security Update Guide CISA KEV

Advisory catalog

Public source statements across vendors. Explicit aliases connect records; each publisher keeps its own state, severity and affected-version evidence.

Collected statements

694708 source statements · aliases may refer to the same vulnerability

CVE-2026-102607Published

ZoneMinder: Authenticated OS Command Injection (RCE) via Export Feature

cve-program ·

Vendor product: zoneminder

CVSS 3.1 8.8Source modified 19 Oct 2026Recorded 23 Oct 2026

CVE-2026-110902Published

WordPress Event Tickets plugin <= 5.30.1 - Insecure Direct Object References (IDOR) vulnerability

cve-program ·

https://wordpress.org/plugins: event-tickets

CVSS 3.1 4.3Source modified 19 Oct 2026Recorded 23 Oct 2026

CVE-2026-112144Published

satya-vinay Events-Management-System project.sql file access

cve-program ·

Vendor product: Events-Management-System

CVSS 4.0 6.9 · CVSS 3.1 5.3 · CVSS 3.0 5.3 · CVSS 2.0 5.0Source modified 19 Oct 2026Recorded 23 Oct 2026

CVE-2026-111925Published

Mopidy before 4.0.5 Path Traversal via File Backend library.lookup

cve-program ·

https://pypi.org: Mopidy

CVSS 4.0 6.9 · CVSS 3.1 5.3Source modified 19 Oct 2026Recorded 23 Oct 2026

CVE-2026-17491Published

IBM i is Affected By An Improper Privilege Management Vulnerability in OpenSSH

cve-program ·

Vendor product: i

CVSS 3.1 5.4Source modified 19 Oct 2026Recorded 23 Oct 2026

CVE-2026-111939Published

Frappe Helpdesk before 1.26.0 Authorization Bypass via raised_by in Ticket Creation

cve-program ·

Vendor product: helpdesk

CVSS 4.0 5.1 · CVSS 3.1 4.6Source modified 19 Oct 2026Recorded 23 Oct 2026

CVE-2026-112266Published

SGLang through 0.5.22 Cross-Request Abort via rid Prefix Matching

cve-program ·

Vendor product: sglang

CVSS 4.0 8.2 · CVSS 3.1 5.9Source modified 19 Oct 2026Recorded 23 Oct 2026

CVE-2026-112281Published

libaribb24 through 1.0.3 Stack Buffer Overflow via decoder_handle_csi

cve-program ·

https://github.com/nkoriyama/aribb24: aribb24

CVSS 4.0 6.9 · CVSS 3.1 6.1Source modified 19 Oct 2026Recorded 23 Oct 2026

CVE-2026-112286Published

Krayin CRM before 2.2.7 IDOR via Quote Search and Lead-Products Endpoints

cve-program ·

https://packagist.org: laravel-crm

CVSS 4.0 7.1 · CVSS 3.1 6.5Source modified 19 Oct 2026Recorded 23 Oct 2026

CVE-2026-112291Published

Flarum Extension Manager 2.0.0-beta.1 before 2.0.0-beta.8 Missing Authorization via Task API

cve-program ·

https://packagist.org: Extension Manager

CVSS 4.0 6.9 · CVSS 3.1 5.3Source modified 19 Oct 2026Recorded 23 Oct 2026

CVE-2026-102066Published

Junos OS and Junos OS Evolved: Malformed RSVP packet causes a rpd crash when RSVP is enabled

cve-program ·

Vendor product: Junos OS · Vendor product: Junos OS Evolved

CVSS 3.1 6.5 · CVSS 4.0 7.1Source modified 19 Oct 2026Recorded 23 Oct 2026

CVE-2026-102460Published

In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], a scope bypass vulnerability exists in Eclipse Vert.x Web's ChainAuthHandler when used with scope-requiring authentication handlers such as JWT…

cve-program ·

Vendor product: Eclipse Vert.x

CVSS 4.0 8.6Source modified 19 Oct 2026Recorded 23 Oct 2026

CVE-2026-101952Published

Junos OS and Junos OS Evolved: A specific BGP ISO-VPN update causes an rpd crash when BMP or NSR is enabled

cve-program ·

Vendor product: Junos OS · Vendor product: Junos OS Evolved

CVSS 3.1 7.5 · CVSS 4.0 8.7Source modified 19 Oct 2026Recorded 23 Oct 2026

CVE-2026-112276Published

Netpbm through 11.16.00 Heap Out-of-Bounds Read via rasttopnm Colormap

cve-program ·

https://sourceforge.net/p/netpbm/code/: Netpbm

CVSS 4.0 6.9 · CVSS 3.1 6.1Source modified 19 Oct 2026Recorded 23 Oct 2026

CVE-2026-111720Published

fish-island-backend through commit 7c61b78 SSRF via /api/web/parse

cve-program ·

Vendor product: fish-island-backend

CVSS 4.0 6.9 · CVSS 3.1 5.3Source modified 19 Oct 2026Recorded 23 Oct 2026

CVE-2026-112271Published

libdisplay-info through 0.4.0 Heap Out-of-Bounds Read via DisplayID v1 Parser

cve-program ·

https://gitlab.freedesktop.org/emersion/libdisplay-info: libdisplay-info

CVSS 4.0 6.8 · CVSS 3.1 5.5Source modified 19 Oct 2026Recorded 23 Oct 2026

CVE-2026-58100Published

Memory safety bugs in kqueue copy-on-fork implementation

cve-program ·

Vendor product: FreeBSD

Source modified 19 Oct 2026Recorded 23 Oct 2026

CVE-2026-58099Published

Memory safety bugs in kqueue copy-on-fork implementation

cve-program ·

Vendor product: FreeBSD

Source modified 19 Oct 2026Recorded 23 Oct 2026

CVE-2026-111715Published

Arkon through 0.9.2 Missing Authorization via Wiki Graph Neighborhood API

cve-program ·

Vendor product: arkon

CVSS 4.0 5.3 · CVSS 3.1 4.3Source modified 19 Oct 2026Recorded 23 Oct 2026

CVE-2026-98654Rejected

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

cve-program ·

Source modified 19 Oct 2026Recorded 23 Oct 2026

CVE-2026-90050Rejected

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

cve-program ·

Source modified 19 Oct 2026Recorded 23 Oct 2026

CVE-2026-90052Rejected

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

cve-program ·

Source modified 19 Oct 2026Recorded 23 Oct 2026

CVE-2026-98165Rejected

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

cve-program ·

Source modified 19 Oct 2026Recorded 23 Oct 2026

CVE-2026-107194Published

Sungrow iSolarCloud before 2026-08-25 allows authentication bypass and account takeover via "login_type":"5" in a login request, potentially leading to "local blackouts on the whole continent" in Europe. An email address for the user_accoun…

cve-program ·

Vendor product: iSolarCloud

CVSS 4.0 9.2Source modified 19 Oct 2026Recorded 23 Oct 2026

CVE-2026-111710Published

Netcore NR256CN through 1.5.140116 Boa Web Server NULL Pointer Dereference DoS

cve-program ·

Vendor product: NR256CN

CVSS 4.0 8.7 · CVSS 3.1 7.5Source modified 19 Oct 2026Recorded 23 Oct 2026

CVE-2026-111705Published

Fuint through commit 57ec018 IDOR via bookId in myBookDetail

cve-program ·

Vendor product: fuint

CVSS 4.0 5.3 · CVSS 3.1 4.3Source modified 19 Oct 2026Recorded 23 Oct 2026

CVE-2026-111700Published

WebVella ERP through 1.8.8 SQL Injection via EQL Query API

cve-program ·

Vendor product: WebVella-ERP

CVSS 4.0 7.1 · CVSS 3.1 7.1Source modified 19 Oct 2026Recorded 23 Oct 2026

CVE-2026-111695Published

Shaiwz data-platform-open through commit efeacd3 IDOR in Datasource API

cve-program ·

Vendor product: data-platform-open

CVSS 4.0 7.1 · CVSS 3.1 7.1Source modified 19 Oct 2026Recorded 23 Oct 2026

CVE-2026-111690Published

Simple Admin Core through 1.8.7 Hard-Coded JWT Secret Authentication Bypass

cve-program ·

Vendor product: simple-admin-core

CVSS 4.0 9.3 · CVSS 3.1 9.8Source modified 19 Oct 2026Recorded 23 Oct 2026

CVE-2026-111685Published

IceCMS through 4.1.5 SQL Injection via /WebResource/findresourcebynum

cve-program ·

Vendor product: IceCMS

CVSS 4.0 8.7 · CVSS 3.1 7.5Source modified 19 Oct 2026Recorded 23 Oct 2026

CVE-2026-111680Published

APIPark through 1.9.7-beta Cross-Team Authorization Bypass via Team Query Parameter

cve-program ·

Vendor product: APIPark

CVSS 4.0 7.2 · CVSS 3.1 8.3Source modified 19 Oct 2026Recorded 23 Oct 2026

CVE-2026-111675Published

Course-tencent-cloud through 2.0.1 Verification Code Brute Force Account Takeover

cve-program ·

Vendor product: course-tencent-cloud

CVSS 4.0 9.1 · CVSS 3.1 7.4Source modified 19 Oct 2026Recorded 23 Oct 2026

CVE-2026-111670Published

ClickVisual through 1.1.2 Missing Authorization in apiv2 Report Module

cve-program ·

Vendor product: clickvisual

CVSS 4.0 5.3 · CVSS 3.1 4.3Source modified 19 Oct 2026Recorded 23 Oct 2026

CVE-2026-111665Published

Piranha CMS through 12.2 Missing Authorization in Manager Language API

cve-program ·

Vendor product: Piranha CMS

CVSS 4.0 5.3 · CVSS 3.1 5.4Source modified 19 Oct 2026Recorded 23 Oct 2026

CVE-2026-111660Published

waynboot-mall through 2.0.0 Missing Authentication via /callback/order/unpaid

cve-program ·

Vendor product: waynboot-mall

CVSS 4.0 6.9 · CVSS 3.1 6.5Source modified 19 Oct 2026Recorded 23 Oct 2026

CVE-2026-111655Published

ThinkAdmin think-plugs-admin through 1.0.81 IDOR via admin/file.edit

cve-program ·

Vendor product: think-plugs-admin

CVSS 4.0 5.1 · CVSS 3.1 3.8Source modified 19 Oct 2026Recorded 23 Oct 2026

CVE-2026-111650Published

ChronoFrame through 1.0.0 Missing Authentication via Setup Wizard API

cve-program ·

Vendor product: chronoframe

CVSS 4.0 8.8 · CVSS 3.1 8.6Source modified 19 Oct 2026Recorded 23 Oct 2026

CVE-2026-111645Published

MrDoc through 1.1.1 Missing Authorization via api/import_local_doc/ Endpoint

cve-program ·

Vendor product: MrDoc

CVSS 4.0 5.3 · CVSS 3.1 5.4Source modified 19 Oct 2026Recorded 23 Oct 2026

CVE-2026-111640Published

DooTask through 1.9.66 Missing Authorization in OKR Comment Dialogs

cve-program ·

Vendor product: dootask

CVSS 4.0 5.3 · CVSS 3.1 5.4Source modified 19 Oct 2026Recorded 23 Oct 2026

CVE-2025-11776Published

Mattermost versions <11 fail to properly restrict access to archived channel search API which allows guest users to discover archived public channels via the `/api/v4/teams/{team_id}/channels/search_archived` endpoint

nvd ·

CVSS 3.1 · [email protected] · Secondary 4.3Source modified 19 Oct 2026Recorded 25 Oct 2026

CVE-2025-11777Published

Mattermost versions 10.11.x <= 10.11.3, 10.5.x <= 10.5.11 fail to properly validate team membership permissions in the Add Channel Member API which allows users from one team to access user metadata and channel membership information from o…

nvd ·

CVSS 3.1 · [email protected] · Secondary 3.1 · CVSS 3.1 · [email protected] · Primary 4.3Source modified 19 Oct 2026Recorded 25 Oct 2026

CVE-2025-11794Published

Mattermost versions 10.11.x <= 10.11.3, 10.5.x <= 10.5.11, 10.12.x <= 10.12.0 fail to sanitize user data which allows system administrators to access password hashes and MFA secrets via the POST /api/v4/users/{user_id}/email/verify/member e…

nvd ·

CVSS 3.1 · [email protected] · Secondary 4.9Source modified 19 Oct 2026Recorded 25 Oct 2026

CVE-2025-12419Published

Mattermost versions 10.12.x <= 10.12.1, 10.11.x <= 10.11.4, 10.5.x <= 10.5.12, 11.0.x <= 11.0.3 fail to properly validate OAuth state tokens during OpenID Connect authentication which allows an authenticated attacker with team creation priv…

nvd ·

CVSS 3.1 · [email protected] · Secondary 9.9Source modified 19 Oct 2026Recorded 25 Oct 2026

CVE-2025-12421Published

Mattermost versions 11.0.x <= 11.0.2, 10.12.x <= 10.12.1, 10.11.x <= 10.11.4, 10.5.x <= 10.5.12 fail to to verify that the token used during the code exchange originates from the same authentication flow, which allows an authenticated user …

nvd ·

CVSS 3.1 · [email protected] · Secondary 9.9Source modified 19 Oct 2026Recorded 25 Oct 2026

CVE-2025-12559Published

Mattermost versions 11.0.x <= 11.0.2, 10.12.x <= 10.12.1, 10.11.x <= 10.11.4, 10.5.x <= 10.5.12 fail to sanitize team email addresses to be visible only to Team Admins, which allows any authenticated user to view team email addresses via th…

nvd ·

CVSS 3.1 · [email protected] · Secondary 4.3Source modified 19 Oct 2026Recorded 25 Oct 2026

CVE-2025-12613Published

Versions of the package cloudinary before 2.7.0 are vulnerable to Arbitrary Argument Injection due to improper parsing of parameter values containing an ampersand. An attacker can inject additional, unintended parameters. This could lead to…

nvd ·

CVSS 4.0 · [email protected] · Secondary 8.8 · CVSS 3.1 · [email protected] · Secondary 8.6Source modified 19 Oct 2026Recorded 25 Oct 2026

CVE-2025-12756Published

Mattermost versions 11.0.x <= 11.0.2, 10.12.x <= 10.12.1, 10.11.x <= 10.11.4, 10.5.x <= 10.5.12 fail to validate user permissions when deleting comments in Boards, which allows an authenticated user with the editor role to delete comments c…

nvd ·

CVSS 3.1 · [email protected] · Secondary 4.3Source modified 19 Oct 2026Recorded 25 Oct 2026

CVE-2025-12758Published

Versions of the package validator before 13.15.22 are vulnerable to Incomplete Filtering of One or More Instances of Special Elements in the isLength() function that does not take into account Unicode variation selectors (\uFE0F, \uFE0E) ap…

nvd ·

CVSS 4.0 · [email protected] · Secondary 7.7 · CVSS 3.1 · [email protected] · Secondary 7.5Source modified 19 Oct 2026Recorded 25 Oct 2026

CVE-2025-12919Published

A vulnerability was detected in EverShop up to 2.0.1. Affected is an unknown function of the file /src/modules/oms/graphql/types/Order/Order.resolvers.js of the component Order Handler. The manipulation of the argument uuid results in impro…

nvd ·

CVSS 4.0 · [email protected] · Secondary 2.9 · CVSS 3.1 · [email protected] · Secondary 3.7 · CVSS 2.0 · [email protected] · Secondary 2.6Source modified 19 Oct 2026Recorded 25 Oct 2026

CVE-2025-41436Published

Mattermost versions <11.0 fail to properly enforce the "Allow users to view archived channels" setting which allows regular users to access archived channel content and files via the "Open in Channel" functionality from followed threads

nvd ·

CVSS 3.1 · [email protected] · Secondary 3.1 · CVSS 3.1 · [email protected] · Primary 4.3Source modified 19 Oct 2026Recorded 25 Oct 2026

A catalog match establishes published evidence, not applicability to your environment. Check resolved package dependencies, or open a Microsoft CVE for fixing KBs, releases and planning.