ChangeIntel IT change radar

Public mode

No access to your tenant or devices. Every item links to its source. What this means

Security

Microsoft security updates and public advisory evidence: affected products, fixing updates, exploitation and source coverage.

Security Update Guide CISA KEV

Advisory catalog

Public source statements across vendors. Explicit aliases connect records; each publisher keeps its own state, severity and affected-version evidence.

Collected statements

695749 source statements · aliases may refer to the same vulnerability

CVE-2026-103903Published

MikroTik RouterOS WinBox split-principal authentication bypass allows privilege escalation

cve-program ·

Vendor product: RouterOS

CVSS 4.0 8.7 · CVSS 3.1 8.8Source modified 13 Oct 2026Recorded 23 Oct 2026

CVE-2026-78404Published

IBM® Db2® is vulnerable to local privilege escalation via the db2pd utility

cve-program ·

Vendor product: Db2

CVSS 3.1 6.5Source modified 13 Oct 2026Recorded 23 Oct 2026

CVE-2026-105465Published

IBM® Db2® is vulnerable to privilege escalation when db2ssh is enabled with the db2 instance

cve-program ·

Vendor product: Db2

CVSS 3.1 8.8Source modified 13 Oct 2026Recorded 23 Oct 2026

CVE-2026-105464Published

IBM® Db2® is vulnerable to a local attacker with DBADM authorization gaining elevated privileges due to improper privilege management

cve-program ·

Vendor product: Db2

CVSS 3.1 8.8Source modified 13 Oct 2026Recorded 23 Oct 2026

CVE-2026-96012Published

IBM Db2 Mirror for i Privilege Escalation

cve-program ·

Vendor product: Db2 Mirror for i

CVSS 3.1 9.9Source modified 13 Oct 2026Recorded 23 Oct 2026

CVE-2026-96266Published

IBM Power Systems Firmware Buffer Overflow

cve-program ·

Vendor product: PowerVM Hypervisor

CVSS 3.1 8.2Source modified 13 Oct 2026Recorded 23 Oct 2026

CVE-2026-96265Published

IBM Power Systems Firmware Improper Memory Buffer Restriction

cve-program ·

Vendor product: PowerVM Hypervisor

CVSS 3.1 8.2Source modified 13 Oct 2026Recorded 23 Oct 2026

CVE-2026-96264Published

IBM Power Systems Firmware Buffer Overflow

cve-program ·

Vendor product: PowerVM Hypervisor

CVSS 3.1 8.2Source modified 13 Oct 2026Recorded 23 Oct 2026

CVE-2026-96263Published

IBM Power Systems Firmware Buffer Overflow

cve-program ·

Vendor product: PowerVM Hypervisor

CVSS 3.1 8.2Source modified 13 Oct 2026Recorded 23 Oct 2026

CVE-2026-96262Published

IBM Power Systems Firmware Buffer Overflow

cve-program ·

Vendor product: PowerVM Hypervisor

CVSS 3.1 8.2Source modified 13 Oct 2026Recorded 23 Oct 2026

CVE-2026-108609Published

JeecgBoot through 3.9.5 IDOR via /airag/voice/listByUser userId Parameter

cve-program ·

Vendor product: JeecgBoot

CVSS 4.0 5.3 · CVSS 3.1 4.3Source modified 13 Oct 2026Recorded 23 Oct 2026

CVE-2026-89271Published

WP-BusinessDirectory <= 4.0.2 - Unauthenticated Arbitrary File Write via uploadFile

cve-program ·

Vendor product: WP-BusinessDirectory

Source modified 13 Oct 2026Recorded 23 Oct 2026

CVE-2026-89269Published

WP Testimonials <= 1.4.13 - Author+ Stored XSS via wp-testimonials Shortcode

cve-program ·

Vendor product: WP Testimonials

Source modified 13 Oct 2026Recorded 23 Oct 2026

CVE-2026-108604Published

Tabularis through 0.27.0 Read-Only Bypass via MCP run_query SELECT Classification

cve-program ·

Vendor product: tabularis

CVSS 4.0 5.8 · CVSS 3.1 6.3Source modified 13 Oct 2026Recorded 23 Oct 2026

CVE-2026-108598Published

Floci 1.1.0 before 2.2.0 RCE via API Gateway VTL Mapping Templates

cve-program ·

Vendor product: floci

CVSS 4.0 9.3 · CVSS 3.1 9.8Source modified 13 Oct 2026Recorded 23 Oct 2026

CVE-2026-108593Published

9router 0.4.1 through 0.5.99 Config Injection RCE via hermes-settings Endpoint

cve-program ·

https://registry.npmjs.org: 9router

CVSS 4.0 7.3 · CVSS 3.1 6.4Source modified 13 Oct 2026Recorded 23 Oct 2026

CVE-2026-108555Published

PairDrop through 1.11.2 IP Spoofing via cf-connecting-ip Header

cve-program ·

Vendor product: PairDrop

CVSS 4.0 2.3 · CVSS 3.1 4.2Source modified 13 Oct 2026Recorded 23 Oct 2026

CVE-2026-108549Published

cc-connect through 1.5.0 Missing Authentication via MAX Webhook Sender Spoofing

cve-program ·

Vendor product: cc-connect

CVSS 4.0 9.2 · CVSS 3.1 8.1Source modified 13 Oct 2026Recorded 23 Oct 2026

CVE-2026-108115Published

Kortix Suna 0.10.7 before 0.13.52 SSRF Guard Bypass via IPv6 6to4 Addresses

cve-program ·

Vendor product: suna

CVSS 4.0 2.3 · CVSS 3.1 4.9Source modified 13 Oct 2026Recorded 23 Oct 2026

CVE-2026-108162Published

Pingvin Share X before 1.22.0 Rate Limit Bypass via Spoofed X-Forwarded-For

cve-program ·

Vendor product: pingvin-share-x

CVSS 4.0 6.9 · CVSS 3.1 6.5Source modified 13 Oct 2026Recorded 23 Oct 2026

CVE-2026-108268Published

enclave-os-virtual: RA-TLS challenge certificates were not bound to the TLS session

cve-program ·

Vendor product: enclave-os-virtual

CVSS 4.0 9.1Source modified 13 Oct 2026Recorded 23 Oct 2026

CVE-2026-108265Published

enclave-os-mini: RA-TLS challenge certificates were not bound to the TLS session

cve-program ·

Vendor product: enclave-os-mini

CVSS 4.0 9.1Source modified 13 Oct 2026Recorded 23 Oct 2026

CVE-2026-108261Published

TinaCMS admin preview iframe loads an attacker-controlled origin from the URL fragment

cve-program ·

Vendor product: tinacms · Vendor product: app

CVSS 3.1 9.3Source modified 13 Oct 2026Recorded 23 Oct 2026

CVE-2026-107856Published

CiviForm: Trusted-Intermediary IDOR discloses any citizen's name and email

cve-program ·

Vendor product: civiform

CVSS 3.1 4.5Source modified 13 Oct 2026Recorded 23 Oct 2026

CVE-2026-104059Published

Lektor 3.3.14 CSRF via Admin API Endpoints

cve-program ·

Vendor product: lektor

CVSS 4.0 7.0 · CVSS 3.1 8.1Source modified 13 Oct 2026Recorded 23 Oct 2026

CVE-2026-104058Published

Podgrab Missing Authentication on WebSocket /ws Endpoint

cve-program ·

Vendor product: podgrab

CVSS 4.0 6.3 · CVSS 3.1 5.3Source modified 13 Oct 2026Recorded 23 Oct 2026

CVE-2026-104057Published

Podgrab Unauthenticated DoS via Concurrent Map Access in WebSocket Handler

cve-program ·

Vendor product: podgrab

CVSS 4.0 8.7 · CVSS 3.1 7.5Source modified 13 Oct 2026Recorded 23 Oct 2026

CVE-2026-107848Published

Contao: Cross-site request forgery in custom backend actions

cve-program ·

Vendor product: contao

CVSS 3.1 3.5Source modified 13 Oct 2026Recorded 23 Oct 2026

CVE-2025-12689Published

Mattermost versions 11.0.x <= 11.0.4, 10.12.x <= 10.12.2, 10.11.x <= 10.11.6 fail to check WebSocket request field for proper UTF-8 format, which allows attacker to crash Calls plug-in via sending malformed request.

nvd ·

CVSS 3.1 · [email protected] · Secondary 6.5Source modified 13 Oct 2026Recorded 25 Oct 2026

CVE-2025-13321Published

Mattermost Desktop App versions <6.0.0 fail to sanitize sensitive information from Mattermost logs and clear data on server deletion which allows an attacker with access to the users system to gain access to potentially sensitive informatio…

nvd ·

CVSS 3.1 · [email protected] · Secondary 3.3Source modified 13 Oct 2026Recorded 25 Oct 2026

CVE-2025-13324Published

Mattermost versions 10.11.x <= 10.11.5, 11.0.x <= 11.0.4, 10.12.x <= 10.12.2 fail to invalidate remote cluster invite tokens when using the legacy (version 1) protocol or when the confirming party does not provide a refreshed token, which a…

nvd ·

CVSS 3.1 · [email protected] · Secondary 3.7Source modified 13 Oct 2026Recorded 25 Oct 2026

CVE-2025-13352Published

Mattermost versions 10.11.x <= 10.11.6 and Mattermost GitHub plugin versions <=2.4.0 fail to validate plugin bot identity in reaction forwarding which allows attackers to hijack the GitHub reaction feature to make users add reactions to arb…

nvd ·

CVSS 3.1 · [email protected] · Secondary 3.0Source modified 13 Oct 2026Recorded 25 Oct 2026

CVE-2025-62190Published

Mattermost versions 11.0.x <= 11.0.4, 10.12.x <= 10.12.2, 10.11.x <= 10.11.6 and Mattermost Calls versions <=1.10.0 fail to implement CSRF protection on the Calls widget page which allows an authenticated attacker to initiate calls and inje…

nvd ·

CVSS 3.1 · [email protected] · Secondary 4.3Source modified 13 Oct 2026Recorded 25 Oct 2026

CVE-2025-62690Published

Mattermost versions 10.11.x <= 10.11.4 fail to validate redirect URLs on the /error page, which allows an attacker to redirect a victim to a malicious site via a crafted link opened in a new tab.

nvd ·

CVSS 3.1 · [email protected] · Secondary 3.1 · CVSS 3.1 · [email protected] · Primary 6.1Source modified 13 Oct 2026Recorded 25 Oct 2026

CVE-2025-63389Published

A critical authentication bypass vulnerability exists in Ollama platform's API endpoints in versions prior to and including v0.12.3. The platform exposes multiple API endpoints without requiring authentication, enabling remote attackers to …

nvd ·

CVSS 3.1 · 134c704f-9b21-4f2e-91b3-4a467353bcc0 · Secondary 9.8Source modified 13 Oct 2026Recorded 25 Oct 2026

CVE-2025-65581Published

An open redirect vulnerability exists in the Account module in Volosoft ABP Framework >= 5.1.0 and < 10.0.0-rc.2. Improper validation of the returnUrl parameter in the register function allows an attacker to redirect users to arbitrary exte…

nvd ·

CVSS 3.1 · [email protected] · Primary 5.3 · CVSS 3.1 · 134c704f-9b21-4f2e-91b3-4a467353bcc0 · Secondary 5.3Source modified 13 Oct 2026Recorded 25 Oct 2026

CVE-2025-68130Published

tRPC allows users to build and consume fully typesafe APIs without schemas or code generation. Starting in version 10.27.0 and prior to versions 10.45.3 and 11.8.0, a A prototype pollution vulnerability exists in `@trpc/server`'s `formDataT…

nvd ·

CVSS 4.0 · [email protected] · Secondary 8.5Source modified 13 Oct 2026Recorded 25 Oct 2026

CVE-2025-68156Published

Expr is an expression language and expression evaluation for Go. Prior to version 1.17.7, several builtin functions in Expr, including `flatten`, `min`, `max`, `mean`, and `median`, perform recursive traversal over user-provided data struct…

nvd ·

CVSS 3.1 · [email protected] · Secondary 7.5Source modified 13 Oct 2026Recorded 25 Oct 2026

CVE-2025-68469Published

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to version 7.1.1-14, ImageMagick crashes when processing a crafted TIFF file. Version 7.1.1-14 fixes the issue.

nvd ·

CVSS 4.0 · [email protected] · Secondary 2.0 · CVSS 3.1 · [email protected] · Primary 3.3Source modified 13 Oct 2026Recorded 25 Oct 2026

CVE-2025-68613Published

n8n is an open source workflow automation platform. Versions starting with 0.211.0 and prior to 1.120.4, 1.121.1, and 1.122.0 contain a critical Remote Code Execution (RCE) vulnerability in their workflow expression evaluation system. Under…

nvd ·

CVSS 3.1 · [email protected] · Secondary 9.9 · CVSS 3.1 · [email protected] · Primary 8.8Source modified 13 Oct 2026Recorded 25 Oct 2026

CVE-2026-12780Published

AOMEI Backupper Kernel Driver amwrtdrv.sys access control

cve-program ·

Vendor product: Backupper

CVSS 4.0 8.5 · CVSS 3.1 7.8 · CVSS 3.0 7.8 · CVSS 2.0 6.8Source modified 13 Oct 2026Recorded 23 Oct 2026

CVE-2026-75352Published

OpENer v2.3/commit 76b95cf, contains an integer underflow in the server-side EtherNet/IP ForwardOpen connection-path parser. This allows a remote attacker to cause a denial of service

cve-program ·

Vendor product: n/a

Source modified 13 Oct 2026Recorded 23 Oct 2026

CVE-2026-89200Published

A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly validate or sanitize input in the Name and Value fields for custom file labels. This could allow an authenticated attacker wit…

cve-program ·

Vendor product: RUGGEDCOM CROSSBOW

CVSS 3.1 6.7 · CVSS 4.0 8.4Source modified 13 Oct 2026Recorded 23 Oct 2026

CVE-2026-109152Published

jbardin scp.py SCP Receive _recv_pushd path traversal

cve-program ·

Vendor product: scp.py

CVSS 4.0 5.3 · CVSS 3.1 5.4 · CVSS 3.0 5.4 · CVSS 2.0 6.4Source modified 13 Oct 2026Recorded 23 Oct 2026

GHSA-p6ph-3jx2-3337Published

OpenList: Search metadata/count disclosure via Non-Separator-Aware Path Check in Bleve Search

osv · CVE-2026-102663 · GO-2026-6113

Go: github.com/OpenListTeam/OpenList/v4

MODERATESource modified 13 Oct 2026Recorded 24 Oct 2026

GO-2026-6113Published

OpenList: Search metadata/count disclosure via Non-Separator-Aware Path Check in Bleve Search in github.com/OpenListTeam/OpenList

osv · CVE-2026-102663 · GHSA-p6ph-3jx2-3337

Go: github.com/OpenListTeam/OpenList · Go: github.com/OpenListTeam/OpenList/v3 · Go: github.com/OpenListTeam/OpenList/v4

Source modified 13 Oct 2026Recorded 24 Oct 2026

CVE-2026-89205Published

A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly perform server-side authorization checks for requests to schedule special operations. This could allow an authenticated attack…

cve-program ·

Vendor product: RUGGEDCOM CROSSBOW

CVSS 3.1 6.3 · CVSS 4.0 5.3Source modified 13 Oct 2026Recorded 23 Oct 2026

RUSTSEC-2026-0344Published

Decompression bomb in `ruzstd`: a tiny input can exhaust memory (OOM)

osv ·

crates.io: ruzstd

Source modified 13 Oct 2026Recorded 24 Oct 2026

CVE-2025-25341Published

A vulnerability exists in the libxmljs 1.0.11 when parsing a specially crafted XML document. Accessing the internal _ref property on entity_ref and entity_decl nodes causes a segmentation fault, potentially leading to a denial-of-service (D…

nvd ·

CVSS 3.1 · 134c704f-9b21-4f2e-91b3-4a467353bcc0 · Secondary 7.5Source modified 13 Oct 2026Recorded 25 Oct 2026

CVE-2025-61914Published

n8n is an open source workflow automation platform. Prior to version 1.114.0, a stored Cross-Site Scripting (XSS) vulnerability may occur in n8n when using the “Respond to Webhook” node. When this node responds with HTML content containing …

nvd ·

CVSS 3.1 · [email protected] · Secondary 7.3 · CVSS 3.1 · [email protected] · Primary 5.4Source modified 13 Oct 2026Recorded 25 Oct 2026

A catalog match establishes published evidence, not applicability to your environment. Check resolved package dependencies, or open a Microsoft CVE for fixing KBs, releases and planning.