Security

Microsoft security updates and public advisory evidence: affected products, fixing updates, exploitation and source coverage.

Security Update Guide CISA KEV

Advisory catalog

Public source statements across vendors. Explicit aliases connect records; each publisher keeps its own state, severity and affected-version evidence.

Collected statements

694815 source statements · aliases may refer to the same vulnerability

CVE-2026-102052Published

Junos OS and Junos OS Evolved: An attacker causes jdhcpd to crash when the DHCPv4 local-client feature is used

cve-program ·

Vendor product: Junos OS · Vendor product: Junos OS Evolved

CVSS 3.1 8.8 · CVSS 4.0 8.7Source modified 16 Oct 2026Recorded 23 Oct 2026

CVE-2026-102055Published

Junos OS and Junos OS Evolved: MX Series, PTX Series: An attacker causes remote code execution and denial of service when enhanced CFM is enabled

cve-program ·

Vendor product: Junos OS · Vendor product: Junos OS Evolved

CVSS 3.1 8.8 · CVSS 4.0 8.7Source modified 16 Oct 2026Recorded 23 Oct 2026

CVE-2026-102059Published

Junos OS and Junos OS Evolved: EX Series, SRX Series, QFX Series: A rogue DHCP server causes root-level command execution when the phone-home client processes specific information

cve-program ·

Vendor product: Junos OS · Vendor product: Junos OS Evolved

CVSS 3.1 8.8 · CVSS 4.0 8.7Source modified 16 Oct 2026Recorded 23 Oct 2026

CVE-2026-102061Published

Junos OS and Junos OS Evolved: An attacker causes root code execution when SZTP DHCP provisioning is used

cve-program ·

Vendor product: Junos OS · Vendor product: Junos OS Evolved

CVSS 3.1 8.8 · CVSS 4.0 8.7Source modified 16 Oct 2026Recorded 23 Oct 2026

CVE-2026-102174Published

Junos OS: SRX Series: An authenticated remote-access VPN client causes iked denial of service or root-level code execution when JIMS identity publishing is enabled

cve-program ·

Vendor product: Junos OS

CVSS 3.1 8.8 · CVSS 4.0 8.7Source modified 16 Oct 2026Recorded 23 Oct 2026

CVE-2026-102175Published

Junos OS and Junos OS Evolved: An attacker causes remote code execution or denial of service when service-deployment processing is used

cve-program ·

Vendor product: Junos OS · Vendor product: Junos OS Evolved

CVSS 3.1 9.8 · CVSS 4.0 9.3Source modified 16 Oct 2026Recorded 23 Oct 2026

CVE-2026-101981Published

Junos OS and Junos OS Evolved: An adjacent LDP peer causes routing-engine compromise when LDP is enabled

cve-program ·

Vendor product: Junos OS · Vendor product: Junos OS Evolved

CVSS 3.1 8.8 · CVSS 4.0 8.7Source modified 16 Oct 2026Recorded 23 Oct 2026

CVE-2026-101982Published

Junos OS and Junos OS Evolved: A EVPN peer causes an rpd crash or root-level compromise when EVPN-VPWS is used

cve-program ·

Vendor product: Junos OS · Vendor product: Junos OS Evolved

CVSS 3.1 9.8 · CVSS 4.0 9.3Source modified 16 Oct 2026Recorded 23 Oct 2026

CVE-2026-101954Published

Junos OS and Junos OS Evolved: Unauthenticated network access causes full device takeover when J-Web is enabled

cve-program ·

Vendor product: Junos OS · Vendor product: Junos OS Evolved

CVSS 3.1 9.8 · CVSS 4.0 9.3Source modified 16 Oct 2026Recorded 23 Oct 2026

CVE-2026-107350Published

Authentication bypass via second StartupMessage during SCRAM authentication in PgBouncer

cve-program ·

Vendor product: PgBouncer

CVSS 3.1 8.8Source modified 16 Oct 2026Recorded 23 Oct 2026

CVE-2026-102298Published

Insufficient Authorization and User Boundary Validation in Omada Controller MSP

cve-program ·

Vendor product: Omada Software Controller (Windows)

CVSS 4.0 7.5Source modified 16 Oct 2026Recorded 23 Oct 2026

CVE-2026-16453Published

Mattermost SAML RelayState forgery allows unauthorized team membership

cve-program ·

Vendor product: Mattermost

CVSS 3.1 7.1Source modified 16 Oct 2026Recorded 23 Oct 2026

CVE-2026-18560Published

Improper order of authorisations in Mattermost GetFile API leads to an authenticated user to determine a post’s quarantined status

cve-program ·

Vendor product: Mattermost

CVSS 3.1 4.3Source modified 16 Oct 2026Recorded 23 Oct 2026

CVE-2026-58098Published

Heap out-of-bounds access in semop(2)

cve-program ·

Vendor product: FreeBSD

Source modified 16 Oct 2026Recorded 23 Oct 2026

CVE-2026-18223Published

Mattermost invitation tokens not bound to invited email address allowing unauthorized team and private channel access

cve-program ·

Vendor product: Mattermost

CVSS 3.1 5.0Source modified 16 Oct 2026Recorded 23 Oct 2026

CVE-2026-100106Published

FiboSearch <= 1.34.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'purchased_plan' Parameter

cve-program ·

Vendor product: FiboSearch – Ajax Search for WooCommerce

CVSS 3.1 6.4Source modified 16 Oct 2026Recorded 23 Oct 2026

CVE-2026-96870Published

SureDash <= 1.12.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'display_name' Parameter

cve-program ·

Vendor product: SureDash – Community, Courses & Member Dashboard

CVSS 3.1 6.4Source modified 16 Oct 2026Recorded 23 Oct 2026

CVE-2026-111368Published

ClassroomIO through 1.0.0 IDOR via Course Submission Update, Grade and Delete Routes

cve-program ·

Vendor product: ClassroomIO

CVSS 4.0 6.1 · CVSS 3.1 6.4Source modified 16 Oct 2026Recorded 23 Oct 2026

CVE-2026-111311Published

DoubleScale | All-in-One CRM <= 1.5.1 - Authenticated (Subscriber+) Arbitrary File Upload via Portal 'ticketless' Attachment Endpoint

cve-program ·

Vendor product: DoubleScale CRM | All-in-One CRM – Sales, Multi-Channel Marketing, Newsletter, Booking, Helpdesk, Automation, MCP & More

CVSS 3.1 8.8Source modified 16 Oct 2026Recorded 23 Oct 2026

CVE-2026-110703Published

GeoDirectory <= 2.8.191 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'post_content' Parameter via data-embed-url Attribute

cve-program ·

Vendor product: GeoDirectory – WP Business Directory Plugin and Classified Listings Directory

CVSS 3.1 6.4Source modified 16 Oct 2026Recorded 23 Oct 2026

CVE-2026-109118Published

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in rdiffweb

cve-program ·

Vendor product: rdiffweb

CVSS 3.1 4.6Source modified 16 Oct 2026Recorded 23 Oct 2026

CVE-2026-11732Published

Insufficient input validation vulnerability exists in website blocking feature of certain NETGEAR RAX/CAX series models

cve-program ·

Vendor product: CAX30 · Vendor product: RAX30 · Vendor product: RAX5

CVSS 4.0 6.3 · CVSS 3.1 8.8Source modified 16 Oct 2026Recorded 23 Oct 2026

CVE-2026-16754Published

A potential improper certificate validation vulnerability was reported in Lenovo Smart Camera C33, distributed exclusively in the Chinese market, that could allow an adjacent user to intercept or manipulate network communications.

cve-program ·

Vendor product: Smart Camera C33 · Vendor product: Smart Camera C33 Pro · Vendor product: Smart Camera C35

CVSS 4.0 5.9 · CVSS 3.1 4.8Source modified 16 Oct 2026Recorded 23 Oct 2026

CVE-2026-34508Rejected

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

nvd ·

Source modified 16 Oct 2026Recorded 25 Oct 2026

CVE-2026-16755Published

A potential vulnerability was reported in Lenovo Smart Camera C33, distributed exclusively in the Chinese market, that could allow an unauthorized remote user to disclose sensitive information.

cve-program ·

Vendor product: Smart Camera C33 · Vendor product: Smart Camera C33 Pro · Vendor product: Smart Camera C35

CVSS 4.0 6.0 · CVSS 3.1 5.3Source modified 16 Oct 2026Recorded 23 Oct 2026

CVE-2026-75941Published

A potential vulnerability was reported in the Lenovo Legion Zone application, distributed exclusively in the Chinese market, that could allow an attacker on the same logical network to execute arbitrary code.

cve-program ·

Vendor product: Legion Zone Application

CVSS 4.0 8.6 · CVSS 3.1 8.0Source modified 16 Oct 2026Recorded 23 Oct 2026

CVE-2026-19076Published

Mattermost fails to reject OAuth application sessions in account type switch, allowing account takeover via bearer token

cve-program ·

Vendor product: Mattermost

CVSS 3.1 4.4Source modified 16 Oct 2026Recorded 23 Oct 2026

CVE-2026-89062Published

A potential out-of-bounds write vulnerability was reported in the Lenovo Energy Management driver that could allow a local authenticated user to cause a blue screen error.

cve-program ·

Vendor product: Energy Management Driver

CVSS 4.0 6.8 · CVSS 3.1 5.5Source modified 16 Oct 2026Recorded 23 Oct 2026

CVE-2026-63618Published

Apache Kylin: Low-Privilege Config Exposure

cve-program ·

Vendor product: Apache Kylin

Source modified 16 Oct 2026Recorded 23 Oct 2026

CVE-2026-111397Published

WordPress MapSVG plugin <= 8.16.1 - Sensitive Data Exposure vulnerability

cve-program ·

https://wordpress.org/plugins: mapsvg-lite-interactive-vector-maps

CVSS 3.1 5.3Source modified 16 Oct 2026Recorded 23 Oct 2026

CVE-2026-107564Published

gocsaf/csaf: csaf_provider prone to uncontrolled resource consumption

cve-program ·

Vendor product: csaf_provider

CVSS 4.0 8.7 · CVSS 3.1 7.5Source modified 16 Oct 2026Recorded 23 Oct 2026

CVE-2026-110896Published

WordPress Passster plugin <= 4.3.18 - Broken Access Control vulnerability

cve-program ·

https://wordpress.org/plugins: content-protector

CVSS 3.1 5.3Source modified 16 Oct 2026Recorded 23 Oct 2026

CVE-2026-92629Published

A potential improper authorization vulnerability was reported in Lenovo Baiying PC Client, distributed exclusively in the Chinese market, that could allow a local authenticated user to execute arbitrary code with elevated privileges.

cve-program ·

Vendor product: LenovoBaiyingCommercialAddin

CVSS 4.0 7.0 · CVSS 3.1 7.3Source modified 16 Oct 2026Recorded 23 Oct 2026

CVE-2026-11731Published

Authentication Bypass Vulnerability in Certain NETGEAR RAX Series Models

cve-program ·

Vendor product: RAX30 · Vendor product: RAX29 · Vendor product: RAX28

CVSS 4.0 6.3 · CVSS 3.1 8.8Source modified 16 Oct 2026Recorded 23 Oct 2026

CVE-2026-111376Published

FreeRDP 3.30.0 before 3.32.0 Heap Over-Read via Windows cliprdr FILECONTENTS_SIZE

cve-program ·

Vendor product: FreeRDP

CVSS 4.0 2.3 · CVSS 3.1 5.0Source modified 16 Oct 2026Recorded 23 Oct 2026

CVE-2026-111386Published

Nezha 1.7.0 before 2.3.15 Cross-Tenant Server-ID Enumeration via getServerConfig

cve-program ·

Vendor product: nezha

CVSS 4.0 5.3 · CVSS 3.1 4.3Source modified 16 Oct 2026Recorded 23 Oct 2026

CVE-2026-109813Published

Shared Hard-coded Root CA Private Key

cve-program ·

Vendor product: AIG-302 Series

CVSS 4.0 8.6Source modified 16 Oct 2026Recorded 23 Oct 2026

CVE-2026-111391Published

SGLang 0.5.10 through 0.5.22 Code Injection via Debug Dumper Filter

cve-program ·

https://pypi.org: sglang

CVSS 4.0 9.2 · CVSS 3.1 8.1Source modified 16 Oct 2026Recorded 23 Oct 2026

CVE-2026-111405Published

WordPress MapSVG plugin <= 8.16.1 - Cross Site Scripting (XSS) vulnerability

cve-program ·

https://wordpress.org/plugins: mapsvg-lite-interactive-vector-maps

CVSS 3.1 6.5Source modified 16 Oct 2026Recorded 23 Oct 2026

CVE-2026-111396Published

WordPress Advanced Post Manager plugin <= 4.5.6 - Broken Access Control vulnerability

cve-program ·

https://wordpress.org/plugins: advanced-post-manager

CVSS 3.1 7.1Source modified 16 Oct 2026Recorded 23 Oct 2026

CVE-2026-9218Published

Insufficient input validation vulnerability in Certain NETGEAR routers allows unauthorized access

cve-program ·

Vendor product: CBR40 · Vendor product: R7000 · Vendor product: R7000P

CVSS 4.0 4.3 · CVSS 3.1 4.5Source modified 16 Oct 2026Recorded 23 Oct 2026

CVE-2026-111593Rejected

This CVE ID was reserved for a reported issue in the PDF Invoices & Packing Slips for WooCommerce WordPress plugin and was never published. On validation the reported behaviour was determined not to be a vulnerability: the Shop Manager role…

cve-program ·

Source modified 16 Oct 2026Recorded 23 Oct 2026

CVE-2026-111413Published

WordPress aThemeArt theme Helper plugin <= 1.0.8 - Cross Site Request Forgery (CSRF) vulnerability

cve-program ·

https://wordpress.org/plugins: athemeart-theme-helper

CVSS 3.1 8.8Source modified 16 Oct 2026Recorded 23 Oct 2026

CVE-2026-109119Published

Missing Authorization in rdiffweb

cve-program ·

Vendor product: rdiffweb

CVSS 3.1 8.8Source modified 16 Oct 2026Recorded 23 Oct 2026

CVE-2024-12534Rejected

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

nvd ·

Source modified 16 Oct 2026Recorded 24 Oct 2026

CVE-2024-12537Rejected

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

nvd ·

Source modified 16 Oct 2026Recorded 24 Oct 2026

CVE-2026-108798Published

ZKTeco BioTime hard-coded key

cve-program ·

Vendor product: BioTime

CVSS 4.0 6.9 · CVSS 3.1 7.3 · CVSS 3.0 7.3 · CVSS 2.0 7.5Source modified 16 Oct 2026Recorded 23 Oct 2026

CVE-2026-108797Published

ZKTeco BioTime Employee REST API employees authorization

cve-program ·

Vendor product: BioTime

CVSS 4.0 5.3 · CVSS 3.1 4.3 · CVSS 3.0 4.3 · CVSS 2.0 4.0Source modified 16 Oct 2026Recorded 23 Oct 2026

CVE-2026-108796Published

ZKTeco BioTime Biometric Data Endpoint finger_data authorization

cve-program ·

Vendor product: BioTime

CVSS 4.0 5.3 · CVSS 3.1 4.3 · CVSS 3.0 4.3 · CVSS 2.0 4.0Source modified 16 Oct 2026Recorded 23 Oct 2026

CVE-2026-108795Published

ZKTeco BioTime System Settings API systemSettings access control

cve-program ·

Vendor product: BioTime

CVSS 4.0 5.3 · CVSS 3.1 4.3 · CVSS 3.0 4.3 · CVSS 2.0 4.0Source modified 16 Oct 2026Recorded 23 Oct 2026

A catalog match establishes published evidence, not applicability to your environment. Check resolved package dependencies, or open a Microsoft CVE for fixing KBs, releases and planning.