Security

Microsoft security updates and public advisory evidence: affected products, fixing updates, exploitation and source coverage.

Security Update Guide CISA KEV

Advisory catalog

Public source statements across vendors. Explicit aliases connect records; each publisher keeps its own state, severity and affected-version evidence.

Collected statements

695813 source statements · aliases may refer to the same vulnerability

CVE-2026-4264Published

Reflected Cross-Site Scripting in BeeTienda eCommerce platform

cve-program ·

Vendor product: eCommerce Platform

CVSS 4.0 5.1Source modified 9 Oct 2026Recorded 23 Oct 2026

CVE-2026-78013Published

Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Initialization of a Resource with an Insecure Default vulnerability. A high privileged attacker with local access could potentially exploit this vul…

cve-program ·

Vendor product: Secure Connect Gateway (SCG) Policy Manager

CVSS 3.1 5.2Source modified 9 Oct 2026Recorded 23 Oct 2026

CVE-2026-106506Published

Backstage is an open framework for building developer portals. Prior to 4.1.0, the @backstage/plugin-scaffolder-backend package is affected by improper input validation in scaffolder task list ordering. An authenticated Backstage user with …

nvd ·

CVSS 3.1 · [email protected] · Secondary 5.3Source modified 9 Oct 2026Recorded 25 Oct 2026

CVE-2026-106508Published

Backstage is an open framework for building developer portals. Prior to 1.15.4, the @backstage/plugin-techdocs-node package is affected by potential file exposure through local techdocs publisher. When using the local TechDocs publisher (te…

nvd ·

CVSS 3.1 · [email protected] · Secondary 5.3 · CVSS 3.1 · [email protected] · Primary 6.5Source modified 9 Oct 2026Recorded 25 Oct 2026

CVE-2026-96337Published

WordPress ProfilePress plugin <= 4.17.3 - Broken Access Control vulnerability

cve-program ·

https://wordpress.org/plugins: wp-user-avatar

CVSS 3.1 6.5Source modified 9 Oct 2026Recorded 23 Oct 2026

CVE-2025-12103Published

Openshift-ai: trusty ai grants all authenticated users to list pods in any namespace

cve-program ·

https://catalog.redhat.com/software/containers/: rhoai/odh-ta-lmes-driver-rhel9 · https://catalog.redhat.com/software/containers/: rhoai/odh-trustyai-service-operator-rhel9 · https://access.redhat.com/downloads/content/package-browser/: rhoai/odh-trustyai-service-operator-rhel8

CVSS 3.1 5.0Source modified 9 Oct 2026Recorded 23 Oct 2026

CVE-2025-6193Published

Trustyai-explainability: command injection via lmevaljob cr

cve-program ·

https://github.com/trustyai-explainability/trustyai-service-operator: trustyAI · https://catalog.redhat.com/software/containers/: rhoai/odh-trustyai-service-operator-rhel8 · https://access.redhat.com/downloads/content/package-browser/: rhoai/odh-rhel8-operator

CVSS 3.1 5.9Source modified 9 Oct 2026Recorded 23 Oct 2026

CVE-2026-95598Published

WordPress Search in Place plugin <= 1.5.5 - Cross Site Scripting (XSS) vulnerability

cve-program ·

https://wordpress.org/plugins: search-in-place

CVSS 3.1 7.1Source modified 9 Oct 2026Recorded 23 Oct 2026

CVE-2026-94062Published

WordPress Werkstatt theme <= 4.8.3 - Local File Inclusion vulnerability

cve-program ·

https://wordpress.org/plugins: werkstatt

CVSS 3.1 8.1Source modified 9 Oct 2026Recorded 23 Oct 2026

CVE-2026-107821Published

MariaDB: insufficient validation of binary frm data when opening a table

cve-program ·

Vendor product: server

CVSS 3.1 8.0Source modified 9 Oct 2026Recorded 23 Oct 2026

CVE-2026-94663Published

WordPress ProfileGrid plugin <= 6.0.0.2 - SQL Injection vulnerability

cve-program ·

https://wordpress.org/plugins: profilegrid-user-profiles-groups-and-communities

CVSS 3.1 8.5Source modified 9 Oct 2026Recorded 23 Oct 2026

CVE-2026-94668Published

WordPress Salon booking system plugin <= 10.31.5 - Cross Site Scripting (XSS) vulnerability

cve-program ·

https://wordpress.org/plugins: salon-booking-system

CVSS 3.1 7.1Source modified 9 Oct 2026Recorded 23 Oct 2026

CVE-2026-96607Published

WordPress NEX-Forms plugin <= 9.3.1 - Cross Site Scripting (XSS) vulnerability

cve-program ·

https://wordpress.org/plugins: nex-forms-express-wp-form-builder

CVSS 3.1 7.1Source modified 9 Oct 2026Recorded 23 Oct 2026

CVE-2026-94161Published

WordPress Grand Restaurant theme < 7.0.11 - Reflected Cross Site Scripting (XSS) vulnerability

cve-program ·

https://wordpress.org/plugins: grandrestaurant

CVSS 3.1 7.1Source modified 9 Oct 2026Recorded 23 Oct 2026

CVE-2026-62029Published

WordPress WPFunnels plugin <= 3.13.3 - Cross Site Scripting (XSS) vulnerability

cve-program ·

https://wordpress.org/plugins: wpfunnels

CVSS 3.1 6.5Source modified 9 Oct 2026Recorded 23 Oct 2026

CVE-2026-106509Published

Backstage is an open framework for building developer portals. Prior to 1.14.6, the @backstage/plugin-techdocs-node package is affected by improper validation of mkdocs theme configuration in techdocs. When TechDocs is configured to build d…

nvd ·

CVSS 3.1 · [email protected] · Secondary 7.7 · CVSS 3.1 · [email protected] · Primary 8.8Source modified 9 Oct 2026Recorded 25 Oct 2026

CVE-2026-105877Published

WordPress QA Analytics plugin <= 5.3.0.0 - Sensitive Data Exposure vulnerability

cve-program ·

https://wordpress.org/plugins: qa-heatmap-analytics

CVSS 4.0 6.9Source modified 9 Oct 2026Recorded 23 Oct 2026

CVE-2026-107803Published

ProcessMaker has SQL injection in the tasks endpoint through the order_by parameter

cve-program ·

Vendor product: processmaker

CVSS 3.1 6.5Source modified 9 Oct 2026Recorded 23 Oct 2026

CVE-2026-94066Published

WordPress Pond theme <= 2.6.1 - Reflected Cross Site Scripting (XSS) vulnerability

cve-program ·

https://themeforest.net: pond

CVSS 3.1 7.1Source modified 9 Oct 2026Recorded 23 Oct 2026

CVE-2026-108105Published

Open5GS through 2.8.0 MME Reachable Assertion via GTPv1 SGSN Context Request

cve-program ·

Vendor product: open5gs

CVSS 4.0 8.2 · CVSS 3.1 5.9Source modified 9 Oct 2026Recorded 23 Oct 2026

MAL-2026-17745Published

Malicious code in @tunstock/remact-dom (npm)

osv ·

npm: @tunstock/remact-dom

Source modified 9 Oct 2026Recorded 24 Oct 2026

CVE-2026-108109Published

PHPNuxBill through 2025.3.20 Account Takeover via Brute-Forceable Password Reset Code

cve-program ·

Vendor product: phpnuxbill

CVSS 4.0 9.3 · CVSS 3.1 9.1Source modified 9 Oct 2026Recorded 23 Oct 2026

MAL-2026-17670Published

Malicious code in @itsmee_aizat.id/baileys2 (npm)

osv · GHSA-g6w5-p954-xcfr

npm: @itsmee_aizat.id/baileys2

Source modified 9 Oct 2026Recorded 24 Oct 2026

MAL-2026-17348Published

Malicious code in @bellaxchuu/teambails (npm)

osv ·

npm: @bellaxchuu/teambails

Source modified 9 Oct 2026Recorded 24 Oct 2026

CVE-2026-107808Published

Nginx UI: Authentication bypass: password login does not enforce a passkey-only second factor (2FA bypass)

cve-program ·

Vendor product: nginx-ui

CVSS 3.1 8.1Source modified 9 Oct 2026Recorded 23 Oct 2026

CVE-2026-94440Published

Parsing a multipart form can bypass memory limits and read an arbitrarily long line into memory when the remaining limit at the start of a part is less than 400 bytes.

nvd ·

CVSS 3.1 · 134c704f-9b21-4f2e-91b3-4a467353bcc0 · Secondary 7.5Source modified 9 Oct 2026Recorded 25 Oct 2026

CVE-2026-94439Published

When an HTTP server handler sends a 2xx response to an HTTP/1 CONNECT request and returns without hijacking the connection, the server improperly continues to read and serve requests from the connection. Since a 2xx response to an HTTP/1 CO…

nvd ·

CVSS 3.1 · 134c704f-9b21-4f2e-91b3-4a467353bcc0 · Secondary 7.5Source modified 9 Oct 2026Recorded 25 Oct 2026

CVE-2026-78669Published

A malicious HTTP/2 peer can cause excessive CPU consumption in the client or server by opening a large number of streams and then sending many small SETTINGS frames containing SETTINGS_INITIAL_WINDOW_SIZE values.

nvd ·

CVSS 3.1 · 134c704f-9b21-4f2e-91b3-4a467353bcc0 · Secondary 7.5Source modified 9 Oct 2026Recorded 25 Oct 2026

CVE-2026-78667Published

When parsing a Range header containing a large number of small ranges, FileServer(FS), ServeContent, and ServeFile(FS) can consume an excessive amount of CPU.

nvd ·

CVSS 3.1 · 134c704f-9b21-4f2e-91b3-4a467353bcc0 · Secondary 7.5Source modified 9 Oct 2026Recorded 25 Oct 2026

CVE-2026-78663Published

The HTTP/2 server can refund connection-level flow control twice for the same data: Once when a client resets a stream (refunding data for any sent-but-unread portion of the stream), and again when a request handler reads the buffered data.…

nvd ·

CVSS 3.1 · 134c704f-9b21-4f2e-91b3-4a467353bcc0 · Secondary 9.1Source modified 9 Oct 2026Recorded 25 Oct 2026

CVE-2026-78660Published

Historically, we have been rather lax about malformed framing-related headers in our HTTP/2 implementation, as they cannot interfere with HTTP/2 framing. However, this makes it possible for our HTTP/2 implementation to forward responses con…

nvd ·

CVSS 3.1 · 134c704f-9b21-4f2e-91b3-4a467353bcc0 · Secondary 7.5Source modified 9 Oct 2026Recorded 25 Oct 2026

CVE-2026-107813Published

Nginx UI: Incomplete fix of CVE-2026-84315 - the api/cluster router was not - wrapped in RequireSecureSession, so those sensitive mutations run without OTP step-up

cve-program ·

Vendor product: nginx-ui

CVSS 3.1 8.8Source modified 9 Oct 2026Recorded 23 Oct 2026

CVE-2026-108157Published

Pingvin Share X 0.19.0 before 1.22.0 Account Takeover via OAuth Email Linking

cve-program ·

Vendor product: pingvin-share-x

CVSS 4.0 9.2 · CVSS 3.1 8.1Source modified 9 Oct 2026Recorded 23 Oct 2026

CVE-2026-75597Published

pyLoad: Unauthenticated access to /web/<path:filename> bypasses authentication on sensitive templates and leaks internal error details via exception attribute typo

cve-program ·

Vendor product: pyload

CVSS 3.1 5.3Source modified 9 Oct 2026Recorded 23 Oct 2026

CVE-2025-30239Published

Sensitive Data Exposure due to Hardcoded Cryptographic Keys in Multiple TP-Link Aginet Devices

cve-program ·

Vendor product: HB810(US2) V1.0/1.6/2.0/2.6 · Vendor product: HB810(EU1) V2.0 · Vendor product: HB710(US2) V1.6/1.0

CVSS 4.0 8.5Source modified 9 Oct 2026Recorded 23 Oct 2026

CVE-2026-59523Published

WordPress Simply Schedule Appointments plugin <= 1.6.11.11 - Broken Access Control vulnerability

cve-program ·

https://wordpress.org/plugins: simply-schedule-appointments

CVSS 3.1 6.5Source modified 9 Oct 2026Recorded 23 Oct 2026

CVE-2025-30238Published

Privilege Escalation via Improper Authorization in User Management in multiple TP-Link Aginet Devices

cve-program ·

Vendor product: HB810(US2) V1.0/1.6/2.0/2.6 · Vendor product: HB810(EU1) V2.0 · Vendor product: HB710(US2) V1.6/1.0

CVSS 4.0 8.6Source modified 9 Oct 2026Recorded 23 Oct 2026

CVE-2026-94439Published

HTTP/1 server connection desynchronization after 2xx CONNECT response in net/http

cve-program ·

https://pkg.go.dev: net/http

Source modified 9 Oct 2026Recorded 23 Oct 2026

CVE-2025-30237Published

Authentication Bypass via Broken Access Control in Web Server in Multiple TP-Link Aginet Devices

cve-program ·

Vendor product: HB810(US2) V1.0/1.6/2.0/2.6 · Vendor product: HB810(EU1) V2.0 · Vendor product: HB710(US2) V1.6/1.0

CVSS 4.0 8.7Source modified 9 Oct 2026Recorded 23 Oct 2026

CVE-2026-76265Published

Improper Access Control through REST API Endpoints in Splunk Secure Gateway

cve-program ·

Vendor product: Splunk Enterprise · Vendor product: Splunk Secure Gateway

CVSS 3.1 6.5Source modified 9 Oct 2026Recorded 23 Oct 2026

CVE-2026-76270Published

Structured Query Language (SQL) Injection in the SPL2 Module Catalog in Splunk Enterprise

cve-program ·

Vendor product: Splunk Enterprise

CVSS 3.1 6.5Source modified 9 Oct 2026Recorded 23 Oct 2026

CVE-2026-76275Published

Improper Authorization in Search Job Listings through the REST API in Splunk Enterprise

cve-program ·

Vendor product: Splunk Enterprise

CVSS 3.1 4.3Source modified 9 Oct 2026Recorded 23 Oct 2026

CVE-2026-76280Published

Incorrect Permission Assignment for App Key Value Store Collections in Splunk Secure Gateway

cve-program ·

Vendor product: Splunk Enterprise · Vendor product: Splunk Secure Gateway

CVSS 3.1 6.3Source modified 9 Oct 2026Recorded 23 Oct 2026

CVE-2026-7827Published

Stack-based buffer overflow in FalkorDB _RdbLoadEntity via unbounded property count in crafted RDB

cve-program ·

https://github.com/FalkorDB/FalkorDB: FalkorDB

CVSS 4.0 9.2 · CVSS 3.1 8.1Source modified 9 Oct 2026Recorded 23 Oct 2026

CVE-2026-107911Published

Type confusion in FalkorDB GRAPH.QUERY via the --bolt argument

cve-program ·

https://github.com/FalkorDB/FalkorDB: FalkorDB

CVSS 4.0 7.7 · CVSS 3.1 7.5Source modified 9 Oct 2026Recorded 23 Oct 2026

CVE-2026-87108Published

Ops Manager Improper Authorization in Daily Host Monitoring Retrieval

cve-program ·

Vendor product: Ops Manager

CVSS 4.0 2.3 · CVSS 3.1 3.1Source modified 9 Oct 2026Recorded 23 Oct 2026

CVE-2026-96393Published

The Affinity by Canva app before 3.3.1 (October 2026 release) did not perform adequate bounds checking when parsing Affinity document files, leading to an out-of-bounds pointer dereference. A threat actor could craft an Affinity document th…

cve-program ·

Vendor product: affinity

CVSS 3.1 3.6Source modified 9 Oct 2026Recorded 23 Oct 2026

CVE-2026-96394Published

The Affinity by Canva application for macOS before 3.3.1 (October 2026 release) did not validate image dimensions against the size of the pixel data when generating QuickLook thumbnails and previews of Affinity document files, leading to an…

cve-program ·

Vendor product: affinity

CVSS 3.1 2.9Source modified 9 Oct 2026Recorded 23 Oct 2026

CVE-2026-96395Published

The Affinity by Canva app for macOS before 3.3.1 (October 2026 release) did not perform adequate bounds checking when generating QuickLook thumbnails and previews of Affinity document files, leading to an out-of-bounds heap read. A threat a…

cve-program ·

Vendor product: affinity

CVSS 3.1 3.6Source modified 9 Oct 2026Recorded 23 Oct 2026

CVE-2026-96396Published

The Affinity by Canva application for macOS before 3.3.1 (October 2026 release) did not safely calculate the size of an image buffer when generating QuickLook thumbnails and previews of Affinity document files, leading to an integer overflo…

cve-program ·

Vendor product: affinity

CVSS 3.1 4.9Source modified 9 Oct 2026Recorded 23 Oct 2026

A catalog match establishes published evidence, not applicability to your environment. Check resolved package dependencies, or open a Microsoft CVE for fixing KBs, releases and planning.