Security

Microsoft security updates and public advisory evidence: affected products, fixing updates, exploitation and source coverage.

Security Update Guide CISA KEV

Advisory catalog

Public source statements across vendors. Explicit aliases connect records; each publisher keeps its own state, severity and affected-version evidence.

Collected statements

694746 source statements · aliases may refer to the same vulnerability

CVE-2026-110123Published

Makunet maku-boot 4.3.0 through 5.0.0 Missing Authorization via Mail and SMS Config Endpoints

cve-program ·

Vendor product: maku-boot

CVSS 4.0 7.1 · CVSS 3.1 7.1Source modified 16 Oct 2026Recorded 23 Oct 2026

CVE-2026-110118Published

WorkFlow-Engine through 9.6.11 Missing Authorization via flowableui buttonOperation Endpoints

cve-program ·

Vendor product: WorkFlow-Engine

CVSS 4.0 7.1 · CVSS 3.1 6.5Source modified 16 Oct 2026Recorded 23 Oct 2026

CVE-2026-77361Published

obsidian-tc is a governed, agent-ready Model Context Protocol server for Obsidian vaults. Prior to 1.3.1, read access-control list (ACL) checks use a lexical vault-relative path while containment checks use the resolved path. An in-vault sy…

nvd ·

CVSS 3.1 · [email protected] · Secondary 4.7Source modified 16 Oct 2026Recorded 25 Oct 2026

CVE-2026-110113Published

PublicCMS through V6.202608.a IDOR via tradeAddress/save Endpoint

cve-program ·

Vendor product: PublicCMS

CVSS 4.0 5.3 · CVSS 3.1 4.3Source modified 16 Oct 2026Recorded 23 Oct 2026

CVE-2026-110106Published

RuoYi-Vue-Plus through 6.0.0 IDOR via DELETE /auth/unlock/{socialId}

cve-program ·

Vendor product: RuoYi-Vue-Plus

CVSS 4.0 2.3 · CVSS 3.1 4.2Source modified 16 Oct 2026Recorded 23 Oct 2026

CVE-2026-110101Published

Koillection through 1.8.4 Stored XSS via Datum File Attachment Uploads

cve-program ·

Vendor product: Koillection

CVSS 4.0 5.1 · CVSS 3.1 5.4Source modified 16 Oct 2026Recorded 23 Oct 2026

CVE-2026-104126Published

JumpServer: Ansible Automation Template Rendering Allows Unsafe Lookup Plugin Invocation

cve-program ·

Vendor product: jumpserver

CVSS 3.1 6.0Source modified 16 Oct 2026Recorded 23 Oct 2026

CVE-2026-55562Published

Cronicle: Stored XSS in admin Activity Log via account full_name field

cve-program ·

Vendor product: Cronicle

CVSS 3.1 9.0Source modified 16 Oct 2026Recorded 23 Oct 2026

CVE-2026-109607Published

SourceCodester Online Exam System Login Endpoint loginExe.php sql injection

cve-program ·

Vendor product: Online Exam System

CVSS 4.0 6.9 · CVSS 3.1 7.3 · CVSS 3.0 7.3 · CVSS 2.0 7.5Source modified 16 Oct 2026Recorded 23 Oct 2026

CVE-2026-85990Published

Leantime: Any Authenticated User Can Self-Escalate to Admin via Unauthorized JSON-RPC Methods

cve-program ·

Vendor product: leantime

CVSS 3.1 8.8Source modified 16 Oct 2026Recorded 23 Oct 2026

CVE-2026-32316Published

jq: Integer overflow in jvp_string_append() allows Heap-based Buffer Overflow

cve-program ·

Vendor product: jq

CVSS 3.1 8.2Source modified 16 Oct 2026Recorded 23 Oct 2026

CVE-2026-54700Published

ConnectBot SSH: Unbounded SSH field lengths can cause excessive memory allocation

cve-program ·

Vendor product: cbssh

CVSS 4.0 6.9Source modified 16 Oct 2026Recorded 23 Oct 2026

CVE-2026-49264Published

OAuthLib: Unsafe JSONP callback injection in RevocationEndpoint allows arbitrary JavaScript response generation

cve-program ·

Vendor product: oauthlib

CVSS 3.1 6.1Source modified 16 Oct 2026Recorded 23 Oct 2026

CVE-2026-102981Published

Plane: Unauthenticated Workspace Invitation Token Leakage

cve-program ·

Vendor product: plane

CVSS 3.1 6.5Source modified 16 Oct 2026Recorded 23 Oct 2026

CVE-2026-109526Published

HBAI-Ltd Toonflow-app exportData Endpoint information disclosure

cve-program ·

Vendor product: Toonflow-app

CVSS 4.0 4.8 · CVSS 3.1 3.3 · CVSS 3.0 3.3 · CVSS 2.0 1.7Source modified 16 Oct 2026Recorded 23 Oct 2026

CVE-2026-55376Published

heym Python Tool Sandbox Escape

cve-program ·

Vendor product: heym

CVSS 3.1 8.8Source modified 16 Oct 2026Recorded 23 Oct 2026

CVE-2026-53709Published

MCP Context Forge: Hardcoded default JWT_SECRET_KEY shipped in source and .env.example enables pre-authentication platform admin token forgery

cve-program ·

Vendor product: mcp-context-forge

CVSS 3.1 9.8Source modified 16 Oct 2026Recorded 23 Oct 2026

CVE-2026-109522Published

girishsaraf Online-Appointment-Booking-System Admin CRUD Endpoint deleteclinic.php sql injection

cve-program ·

Vendor product: Online-Appointment-Booking-System

CVSS 4.0 6.9 · CVSS 3.1 7.3 · CVSS 3.0 7.3 · CVSS 2.0 7.5Source modified 16 Oct 2026Recorded 23 Oct 2026

CVE-2026-77361Published

obsidian-tc symlink path mismatch bypasses read ACL restrictions

cve-program ·

Vendor product: obsidian-tc

CVSS 3.1 4.7Source modified 16 Oct 2026Recorded 23 Oct 2026

CVE-2026-109967Published

yt-dlp-web-ui through 4.0.0 NULL Pointer Dereference DoS via Service.Formats

cve-program ·

Vendor product: yt-dlp-web-ui

CVSS 4.0 8.7 · CVSS 3.1 7.5Source modified 16 Oct 2026Recorded 23 Oct 2026

CVE-2026-109410Published

macrozheng mall mall-admin/mall-portal moneyInfo OmsOrderServiceImpl.updateMoneyInfo calculation

cve-program ·

Vendor product: mall

CVSS 4.0 4.8 · CVSS 3.1 2.4 · CVSS 3.0 2.4 · CVSS 2.0 3.3Source modified 16 Oct 2026Recorded 23 Oct 2026

CVE-2026-109962Published

Froxlor 0.10.0 before 2.3.14 Missing Authorization in MysqlServer and Cronjobs API

cve-program ·

Vendor product: froxlor

CVSS 4.0 5.3 · CVSS 3.1 4.3Source modified 16 Oct 2026Recorded 23 Oct 2026

CVE-2026-109957Published

EspoCRM before 10.0.7 IDOR via Import attachmentId Parameter

cve-program ·

Vendor product: espocrm

CVSS 4.0 5.3 · CVSS 3.1 4.3Source modified 16 Oct 2026Recorded 23 Oct 2026

CVE-2026-109952Published

FreeRDP 3.0.0 before 3.32.0 Security Protocol Downgrade via Negotiation Response

cve-program ·

Vendor product: FreeRDP

CVSS 4.0 6.0 · CVSS 3.1 5.3Source modified 16 Oct 2026Recorded 23 Oct 2026

CVE-2026-109947Published

FreeRDP 3.20.1 before 3.32.0 Unbounded Allocation via drive_process_irp_read

cve-program ·

Vendor product: FreeRDP

CVSS 4.0 7.1 · CVSS 3.1 6.5Source modified 16 Oct 2026Recorded 23 Oct 2026

CVE-2026-109942Published

FreeRDP 2.3.0 before 3.32.0 NULL Pointer Dereference via RD Gateway Close Channel Packet

cve-program ·

Vendor product: FreeRDP

CVSS 4.0 7.1 · CVSS 3.1 6.5Source modified 16 Oct 2026Recorded 23 Oct 2026

CVE-2026-109680Published

FreeRDP 3.18.0 before 3.32.0 Heap Out-of-Bounds Write via ARM Redirected Username

cve-program ·

Vendor product: FreeRDP

CVSS 4.0 6.0 · CVSS 3.1 5.3Source modified 16 Oct 2026Recorded 23 Oct 2026

CVE-2026-109405Published

conductor-oss conductor KafkaPublishTask.java KafkaPublishTask.start server-side request forgery

cve-program ·

Vendor product: conductor

CVSS 4.0 6.9 · CVSS 3.1 7.3 · CVSS 3.0 7.3 · CVSS 2.0 7.5Source modified 16 Oct 2026Recorded 23 Oct 2026

CVE-2026-109190Published

conductor-oss conductor API Tool Configuration ListApiToolsTask.java ListApiToolsTask.start server-side request forgery

cve-program ·

Vendor product: conductor

CVSS 4.0 5.3 · CVSS 3.1 6.3 · CVSS 3.0 6.3 · CVSS 2.0 6.5Source modified 16 Oct 2026Recorded 23 Oct 2026

CVE-2026-109156Published

SeldonIO MLServer environment_tarball env.py _extract_env path traversal

cve-program ·

Vendor product: MLServer

CVSS 4.0 5.3 · CVSS 3.1 6.3 · CVSS 3.0 6.3 · CVSS 2.0 7.5Source modified 16 Oct 2026Recorded 23 Oct 2026

CVE-2026-109149Published

beautifier js-beautify memory allocation

cve-program ·

Vendor product: js-beautify

CVSS 4.0 6.9 · CVSS 3.1 5.3 · CVSS 3.0 5.3 · CVSS 2.0 5.0Source modified 16 Oct 2026Recorded 23 Oct 2026

CVE-2026-85114Published

A vulnerability has been identified in .NET Client Library for SIMATIC S7 Webserver API (All versions < V3.3.61). Affected applications do not properly validate filenames received from remote servers during ticket downloads.

cve-program ·

Vendor product: .NET Client Library for SIMATIC S7 Webserver API

CVSS 3.1 7.5 · CVSS 4.0 8.7Source modified 16 Oct 2026Recorded 23 Oct 2026

CVE-2026-109115Published

AdithyaYelloju Restaurant-Management-System Password Reset forgot3.php sql injection

cve-program ·

Vendor product: Restaurant-Management-System

CVSS 4.0 6.9 · CVSS 3.1 7.3 · CVSS 3.0 7.3 · CVSS 2.0 7.5Source modified 16 Oct 2026Recorded 23 Oct 2026

CVE-2026-109108Published

Wavlink WL-WN530BE1-A uploadVpn.cgi popen os command injection

cve-program ·

Vendor product: WL-WN530BE1-A

CVSS 4.0 9.4 · CVSS 3.1 9.9 · CVSS 3.0 9.9 · CVSS 2.0 9.0Source modified 16 Oct 2026Recorded 23 Oct 2026

CVE-2026-108974Published

SourceCodester E-Learning System Users.php save_users unrestricted upload

cve-program ·

Vendor product: E-Learning System

CVSS 4.0 6.9 · CVSS 3.1 7.3 · CVSS 3.0 7.3 · CVSS 2.0 7.5Source modified 16 Oct 2026Recorded 23 Oct 2026

CVE-2026-108970Published

itsmeravitejak Online-Examination-System Registration Form database.php addNewUser sql injection

cve-program ·

Vendor product: Online-Examination-System

CVSS 4.0 6.9 · CVSS 3.1 7.3 · CVSS 3.0 7.3 · CVSS 2.0 7.5Source modified 16 Oct 2026Recorded 23 Oct 2026

CVE-2026-108966Published

SourceCodester Performance Indicator System product.php sql injection

cve-program ·

Vendor product: Performance Indicator System

CVSS 4.0 6.9 · CVSS 3.1 7.3 · CVSS 3.0 7.3 · CVSS 2.0 7.5Source modified 16 Oct 2026Recorded 23 Oct 2026

CVE-2026-102692Published

RIOT: Potential integer overflow in nanocoap Block2 handling leading to out-of-bounds memory access

cve-program ·

Vendor product: RIOT

CVSS 3.1 9.1Source modified 16 Oct 2026Recorded 23 Oct 2026

CVE-2026-111606Published

Huly Platform through 0.7.432 Account Takeover via mergeSpecifiedPersons RPC

cve-program ·

Vendor product: Huly Platform

CVSS 4.0 8.6 · CVSS 3.1 8.1Source modified 16 Oct 2026Recorded 23 Oct 2026

CVE-2026-111611Published

roncoo-education through 25.0.0-RELEASE IDOR via Order Pay Cancel and Continue Endpoints

cve-program ·

Vendor product: roncoo-education

CVSS 4.0 5.3 · CVSS 3.1 5.4Source modified 16 Oct 2026Recorded 23 Oct 2026

CVE-2026-111616Published

Oqtane Framework through 10.2.6 Cross-Site Settings Disclosure via Setting API

cve-program ·

Vendor product: Oqtane Framework

CVSS 4.0 6.9 · CVSS 3.1 4.9Source modified 16 Oct 2026Recorded 23 Oct 2026

CVE-2026-111621Published

TDuck Survey Form through 5.3 Missing Authorization via /user/form/setting/{key}

cve-program ·

Vendor product: tduck-survey-form

CVSS 4.0 5.3 · CVSS 3.1 4.3Source modified 16 Oct 2026Recorded 23 Oct 2026

CVE-2026-111626Published

Webreaper Damselfly through 4.5.3 Missing Authentication on REST API Controllers

cve-program ·

Vendor product: Damselfly

CVSS 4.0 9.3 · CVSS 3.1 9.8Source modified 16 Oct 2026Recorded 23 Oct 2026

CVE-2026-111631Published

Distributor before 2.3.2 Missing Authorization in External Connection AJAX Actions

cve-program ·

Vendor product: Distributor

CVSS 4.0 5.3 · CVSS 3.1 5.4Source modified 16 Oct 2026Recorded 23 Oct 2026

CVE-2026-111636Published

OpenBMB StaffDeck through 0.5.6 Authentication Bypass via Hard-Coded Session Secret

cve-program ·

Vendor product: StaffDeck

CVSS 4.0 9.2 · CVSS 3.1 8.1Source modified 16 Oct 2026Recorded 23 Oct 2026

CVE-2026-111641Published

FastapiAdmin through 3.0 Authentication Bypass via Auto-Login Endpoints

cve-program ·

Vendor product: FastapiAdmin

CVSS 4.0 9.3 · CVSS 3.1 9.8Source modified 16 Oct 2026Recorded 23 Oct 2026

CVE-2026-111646Published

SurveyKing before 1.13.0 Unauthenticated File Download via /api/public/preview

cve-program ·

Vendor product: SurveyKing

CVSS 4.0 8.2 · CVSS 3.1 5.9Source modified 16 Oct 2026Recorded 23 Oct 2026

CVE-2026-111651Published

Risesoft Digital-Infrastructure through 9.6.11 Cross-Tenant Data Exposure via DownloadController

cve-program ·

Vendor product: Digital-Infrastructure

CVSS 4.0 7.1 · CVSS 3.1 6.5Source modified 16 Oct 2026Recorded 23 Oct 2026

CVE-2026-111656Published

ChatWiki through 2.9.6 Cross-Tenant IDOR via Form Filter Management Endpoints

cve-program ·

Vendor product: chatwiki

CVSS 4.0 5.3 · CVSS 3.1 5.4Source modified 16 Oct 2026Recorded 23 Oct 2026

CVE-2026-111661Published

waynboot-mall through 2.0.0 Missing Authentication via /callback/email Mail Endpoint

cve-program ·

Vendor product: waynboot-mall

CVSS 4.0 6.9 · CVSS 3.1 5.3Source modified 16 Oct 2026Recorded 23 Oct 2026

A catalog match establishes published evidence, not applicability to your environment. Check resolved package dependencies, or open a Microsoft CVE for fixing KBs, releases and planning.