Security

Microsoft security updates and public advisory evidence: affected products, fixing updates, exploitation and source coverage.

Security Update Guide CISA KEV

Advisory catalog

Public source statements across vendors. Explicit aliases connect records; each publisher keeps its own state, severity and affected-version evidence.

Collected statements

694934 source statements · aliases may refer to the same vulnerability

CVE-2026-101302Published

Remote DoS via receive-side kernel TLS

cve-program ·

Vendor product: FreeBSD

Source modified 15 Oct 2026Recorded 23 Oct 2026

CVE-2026-109562Published

SnapOtter 1.15.10 through 2.2.0 Missing Authorization via Upload and Preview API

cve-program ·

Vendor product: SnapOtter

CVSS 4.0 5.3 · CVSS 3.1 5.4Source modified 15 Oct 2026Recorded 23 Oct 2026

CVE-2026-69191Published

FileRise: Login Method Restriction Bypass via Direct API Access

cve-program ·

Vendor product: FileRise

CVSS 3.1 5.4Source modified 15 Oct 2026Recorded 23 Oct 2026

CVE-2026-109557Published

EdgeEver through 1.112.0 Stored XSS via setMemoDragPreview Drag Preview

cve-program ·

Vendor product: EdgeEver

CVSS 4.0 8.4 · CVSS 3.1 8.7Source modified 15 Oct 2026Recorded 23 Oct 2026

CVE-2026-104105Published

FileRise: TOTP codes are not single-use — valid 6-digit code can be replayed within its window (capture-replay)

cve-program ·

Vendor product: FileRise

CVSS 3.1 6.4Source modified 15 Oct 2026Recorded 23 Oct 2026

CVE-2026-6432Published

Improper bounds validation in EmberZNet SDK

cve-program ·

Vendor product: EmberZNet

CVSS 4.0 5.3Source modified 15 Oct 2026Recorded 23 Oct 2026

CVE-2026-109377Published

ERPNext 9.0.0 through 16.50.0 Missing Authorization in Batch Lookup Methods

cve-program ·

Vendor product: ERPNext

CVSS 4.0 5.3 · CVSS 3.1 4.3Source modified 15 Oct 2026Recorded 23 Oct 2026

CVE-2026-76184Published

In Eclipse Jetty, HttpClient may receive a redirect of the form:

cve-program ·

Vendor product: org.eclipse.jetty:jetty-client

CVSS 4.0 8.2Source modified 15 Oct 2026Recorded 23 Oct 2026

CVE-2026-77711Published

When Jetty's `HttpClient` make a request to a server through a forward proxy, the server may reply with a 407 (Proxy Authentication Required).

cve-program ·

Vendor product: org.eclipse.jetty:jetty-client

CVSS 4.0 8.2Source modified 15 Oct 2026Recorded 23 Oct 2026

CVE-2026-110694Published

OAID Tengine tmfile Model Loader tm2_serializer.c get_tm_file_model out-of-bounds

cve-program ·

Vendor product: Tengine

CVSS 4.0 5.3 · CVSS 3.1 6.3 · CVSS 3.0 6.3 · CVSS 2.0 7.5Source modified 15 Oct 2026Recorded 23 Oct 2026

CVE-2026-101290Published

CVE-2026-101290

cve-program ·

Vendor product: Sick_Safetyscanners_Base CPP Driver

CVSS 3.1 7.5Source modified 15 Oct 2026Recorded 23 Oct 2026

CVE-2022-51020Published

Flower before 2.2.0 CSRF via Worker and Task Control API Endpoints

cve-program ·

Vendor product: flower

CVSS 4.0 6.0 · CVSS 3.1 5.9Source modified 15 Oct 2026Recorded 23 Oct 2026

CVE-2026-101287Published

Authentication bypass in Stela by Diaple Networking

cve-program ·

Vendor product: Stela

CVSS 4.0 9.3Source modified 15 Oct 2026Recorded 23 Oct 2026

CVE-2026-84313Published

Nginx UI: TOTP / passkey enrolment requires no re-authentication, enabling persistent account takeover

cve-program ·

Vendor product: nginx-ui

CVSS 3.1 8.8Source modified 15 Oct 2026Recorded 23 Oct 2026

CVE-2026-110832Published

FreeRDP 2.0.0 before 3.32.0 Memory Exhaustion via DRDYNVC DATA_FIRST

cve-program ·

Vendor product: FreeRDP

CVSS 4.0 7.1 · CVSS 3.1 6.5Source modified 15 Oct 2026Recorded 23 Oct 2026

CVE-2026-35088Published

Inadequate Encryption Strength in Slican telephone exchanges

cve-program ·

Vendor product: IPx · Vendor product: CCT-1668 · Vendor product: MAC-6400

CVSS 4.0 8.2Source modified 15 Oct 2026Recorded 23 Oct 2026

CVE-2026-63314Published

SQL Injection in WebCTI

cve-program ·

Vendor product: IPx

CVSS 4.0 8.7Source modified 15 Oct 2026Recorded 23 Oct 2026

CVE-2026-110837Published

FreeRDP 2.0.0 before 3.32.0 Heap Buffer Overflow via MP3 Audio Decoding

cve-program ·

Vendor product: FreeRDP

CVSS 4.0 6.1 · CVSS 3.1 7.1Source modified 15 Oct 2026Recorded 23 Oct 2026

CVE-2026-102676Published

Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to 41.10.6, 42.9.2, 43.4.1, and 44.0.0-beta.5, an Electron <webview> guest could enable nodeIntegrationInWorker for its Web Worker…

nvd ·

CVSS 3.1 · [email protected] · Secondary 8.3 · CVSS 3.1 · [email protected] · Primary 9.8Source modified 15 Oct 2026Recorded 25 Oct 2026

CVE-2026-53997Published

Netherman Portal del Hermano Account Takeover via Password Reset Oracle

cve-program ·

Vendor product: Portal del Hermano (portaldelhermano.es)

CVSS 4.0 9.1 · CVSS 3.1 7.4Source modified 15 Oct 2026Recorded 23 Oct 2026

CVE-2026-63315Published

Plaintext storage of a password in WebCTI

cve-program ·

Vendor product: IPx

CVSS 4.0 8.2Source modified 15 Oct 2026Recorded 23 Oct 2026

CVE-2026-79823Published

HPE NonStop EMS Distributor - Buffer Overflow vulnerability

cve-program ·

Vendor product: HPE NonStop EMS Distributor

CVSS 3.1 4.0Source modified 15 Oct 2026Recorded 23 Oct 2026

CVE-2026-18661Published

In Eclipse Jetty, across various versions of `jetty-annotations`, and `jetty-eeN-annotations`, the Jakarta Spec authoritative url-pattern rules for mixed `@ServletSecurity` annotation, and `web.xml` defined `security-constraint` on the same…

cve-program ·

https://repo.maven.apache.org/maven2: org.eclipse.jetty.ee11:jetty-ee11-annotations · https://repo.maven.apache.org/maven2: org.eclipse.jetty.ee10:jetty-ee10-annotations · https://repo.maven.apache.org/maven2: org.eclipse.jetty.ee9:jetty-ee9-annotations

CVSS 4.0 8.8Source modified 15 Oct 2026Recorded 23 Oct 2026

CVE-2026-79825Published

HPE NonStop NDSREST - Heap buffer overflow vulnerability

cve-program ·

Vendor product: HPE NonStop NDSREST

CVSS 3.1 7.1Source modified 15 Oct 2026Recorded 23 Oct 2026

CVE-2026-97691Published

Convex: Unauthorized data access

cve-program ·

Vendor product: convex-backend

CVSS 3.1 4.3Source modified 15 Oct 2026Recorded 23 Oct 2026

CVE-2026-41541Published

Symlink creation in qsyncsrv.cgi

cve-program ·

Vendor product: Qsync Central

CVSS 4.0 5.3Source modified 15 Oct 2026Recorded 23 Oct 2026

CVE-2026-41545Published

WebSocket timelapse path traversal and command injection

cve-program ·

Vendor product: QuMagie

CVSS 4.0 8.6Source modified 15 Oct 2026Recorded 23 Oct 2026

CVE-2026-110842Published

n8n before 2.41.4 and 2.42.1 Prototype Pollution via MCP Workflow-Validation Interpreter

cve-program ·

Vendor product: n8n

CVSS 4.0 7.7Source modified 15 Oct 2026Recorded 23 Oct 2026

CVE-2026-108927Published

itsourcecode Baptism Information Management System pbaptism.php sql injection

cve-program ·

Vendor product: Baptism Information Management System

CVSS 4.0 5.3 · CVSS 3.1 6.3 · CVSS 3.0 6.3 · CVSS 2.0 6.5Source modified 15 Oct 2026Recorded 23 Oct 2026

CVE-2026-50612Published

Import Symlink Following Remote Code Execution Vulnerability in QuMagie

cve-program ·

Vendor product: QuMagie

CVSS 4.0 9.4Source modified 15 Oct 2026Recorded 23 Oct 2026

CVE-2026-110847Published

n8n before 1.123.83, 2.41.4, and 2.42.1 Stored XSS via Chat Trigger customCss Parameter

cve-program ·

Vendor product: n8n

CVSS 4.0 7.0Source modified 15 Oct 2026Recorded 23 Oct 2026

CVE-2026-53882Published

Path Traversal in Virtualization Station VM Import

cve-program ·

Vendor product: Virtualization Station

CVSS 4.0 8.7Source modified 15 Oct 2026Recorded 23 Oct 2026

CVE-2026-41510Published

OWASP Coraza WAF: Silent argument drop at ArgumentLimit allows bypass of ARGS-targeted rules via parameter flooding

cve-program ·

Vendor product: coraza

CVSS 3.1 7.2Source modified 15 Oct 2026Recorded 23 Oct 2026

CVE-2026-39989Published

SSRF in QNAP Download Station

cve-program ·

Vendor product: Download Station

CVSS 4.0 5.3Source modified 15 Oct 2026Recorded 23 Oct 2026

CVE-2026-110852Published

n8n before 1.123.83, 2.41.4, and 2.42.1 Unauthenticated Workflow Execution via Dynamic-Path Webhook Resolution

cve-program ·

Vendor product: n8n

CVSS 4.0 6.3Source modified 15 Oct 2026Recorded 23 Oct 2026

CVE-2026-109423Published

NetEase Cloud Music TLS Certificate Validation Bypass

cve-program ·

Vendor product: NetEase Cloud Music for Windows

CVSS 4.0 9.1 · CVSS 3.1 7.4Source modified 15 Oct 2026Recorded 23 Oct 2026

CVE-2026-108361Published

Privasys Intra-handshake attested TLS implementation is vulnerable to TOCTOU Attacks

cve-program ·

Vendor product: ra-tls-clients

CVSS 4.0 7.2Source modified 15 Oct 2026Recorded 23 Oct 2026

CVE-2026-108922Published

KusalkaSilva Learning-Management-System upload_save.php getimagesize unrestricted upload

cve-program ·

Vendor product: Learning-Management-System

CVSS 4.0 5.3 · CVSS 3.1 6.3 · CVSS 3.0 6.3 · CVSS 2.0 6.5Source modified 15 Oct 2026Recorded 23 Oct 2026

CVE-2026-34015Published

Remote Code Execution in upload.php of Video Station

cve-program ·

Vendor product: Video Station

CVSS 4.0 8.7Source modified 15 Oct 2026Recorded 23 Oct 2026

CVE-2026-34014Published

ds-move-files.sh is writable and executed as root

cve-program ·

Vendor product: Download Station

CVSS 4.0 8.4Source modified 15 Oct 2026Recorded 23 Oct 2026

CVE-2026-57118Published

PraisonAI AgentTeam.launch exposes unauthenticated remote agent listing and invocation endpoints

cve-program ·

Vendor product: PraisonAI · Vendor product: praisonaiagents

CVSS 3.1 9.8Source modified 15 Oct 2026Recorded 23 Oct 2026

CVE-2026-34006Published

Pre-Authentication Multiple Critical Vulnerabilities in QNAP sMedioDTCPServer

cve-program ·

Vendor product: sMedio DTCP MOVE

CVSS 4.0 9.3Source modified 15 Oct 2026Recorded 23 Oct 2026

CVE-2026-26245Published

SQLi#2 SQL Injection in class_videos.php getSmartVideosByOffset

cve-program ·

Vendor product: Video Station

CVSS 4.0 7.1Source modified 15 Oct 2026Recorded 23 Oct 2026

CVE-2026-108918Published

Edimax BR-6208AC formWlanMP command injection

cve-program ·

Vendor product: BR-6208AC

CVSS 4.0 10.0 · CVSS 3.1 10.0 · CVSS 3.0 10.0 · CVSS 2.0 10.0Source modified 15 Oct 2026Recorded 23 Oct 2026

CVE-2026-26243Published

Arbitrary Folder Deletion in Qsync Central 5.0.0.5

cve-program ·

Vendor product: Qsync Central

CVSS 4.0 7.2Source modified 15 Oct 2026Recorded 23 Oct 2026

CVE-2026-26244Published

SQLi#1 SQL Injection in class_videos.php _getFilters

cve-program ·

Vendor product: Video Station

CVSS 4.0 7.1Source modified 15 Oct 2026Recorded 23 Oct 2026

CVE-2026-34007Published

RCE Unsanitized `X-Forwarded-For` header passed to `shell_exec()` via broken IP validation fallback in `getClientIP()`

cve-program ·

Vendor product: Notes Station 3

CVSS 4.0 6.9Source modified 15 Oct 2026Recorded 23 Oct 2026

CVE-2026-77364Published

obsidian-tc fail-open default ACL exposes Obsidian control-directory secrets

cve-program ·

Vendor product: obsidian-tc

CVSS 3.1 6.5Source modified 15 Oct 2026Recorded 23 Oct 2026

CVE-2026-110857Published

GitPython before 3.2.0 Command Execution via ls_remote ext:: URLs

cve-program ·

Vendor product: GitPython

CVSS 4.0 7.7 · CVSS 3.1 7.5Source modified 15 Oct 2026Recorded 23 Oct 2026

CVE-2026-108914Published

Edimax BR-6208AC formWlSiteSurvey buffer overflow

cve-program ·

Vendor product: BR-6208AC

CVSS 4.0 9.4 · CVSS 3.1 9.9 · CVSS 3.0 9.9 · CVSS 2.0 9.0Source modified 15 Oct 2026Recorded 23 Oct 2026

A catalog match establishes published evidence, not applicability to your environment. Check resolved package dependencies, or open a Microsoft CVE for fixing KBs, releases and planning.