Security

Microsoft security updates and public advisory evidence: affected products, fixing updates, exploitation and source coverage.

Security Update Guide CISA KEV

Advisory catalog

Public source statements across vendors. Explicit aliases connect records; each publisher keeps its own state, severity and affected-version evidence.

Collected statements

695826 source statements · aliases may refer to the same vulnerability

CVE-2026-43969Published

Cookie Request Header Injection via Unvalidated Encoder in cow_cookie:cookie/1

cve-program ·

https://repo.hex.pm: cowlib · https://github.com: ninenines/cowlib

CVSS 4.0 2.1Source modified 9 Oct 2026Recorded 23 Oct 2026

CVE-2026-107510Published

Authenticated argument injection in NIOS command line leading to privilege escalation

cve-program ·

Vendor product: NIOS

CVSS 3.1 9.1Source modified 9 Oct 2026Recorded 23 Oct 2026

CVE-2026-106177Published

HP Sure Click Kernel Buffer Overflow

cve-program ·

Vendor product: HP Sure Click Enterprise · Vendor product: HP Wolf Security for Business · Vendor product: HP Wolf Pro Security

CVSS 3.1 6.4Source modified 9 Oct 2026Recorded 23 Oct 2026

CVE-2026-105816Published

Vault Vulnerable to Arbitrary Code Execution via Plugin Catalog Entries Restored From Raft Snapshots

cve-program ·

Vendor product: Vault · Vendor product: Vault Enterprise

CVSS 3.1 8.0Source modified 9 Oct 2026Recorded 23 Oct 2026

CVE-2026-89322Published

Vault ACL Policy Evaluation May Allow Bypass of Deny Restrictions

cve-program ·

Vendor product: Vault · Vendor product: Vault Enterprise

CVSS 3.1 7.2Source modified 9 Oct 2026Recorded 23 Oct 2026

CVE-2026-14269Published

IBM DataPower Gateway Buffer Overflow

cve-program ·

Vendor product: DataPower Gateway 10.6CD · Vendor product: DataPower Gateway 10.6.0 · Vendor product: DataPower Gateway 11.0.0

CVSS 3.1 9.8Source modified 9 Oct 2026Recorded 23 Oct 2026

CVE-2026-14497Published

IBM DataPower Gateway Improper Verification of Cryptographic Signature

cve-program ·

Vendor product: DataPower Gateway 10.6CD · Vendor product: DataPower Gateway 10.6.0 · Vendor product: DataPower Gateway 11.0.0

CVSS 3.1 8.1Source modified 9 Oct 2026Recorded 23 Oct 2026

CVE-2026-14888Published

IBM DataPower Gateway Buffer Overflow

cve-program ·

Vendor product: DataPower Gateway 10.6CD · Vendor product: DataPower Gateway 10.6.0 · Vendor product: DataPower Gateway 11.0.0

CVSS 3.1 8.1Source modified 9 Oct 2026Recorded 23 Oct 2026

CVE-2026-105331Published

mk-oracle: Local privilege escalation via malicious Oracle Instant Client

cve-program ·

Vendor product: Checkmk

CVSS 4.0 5.2Source modified 9 Oct 2026Recorded 23 Oct 2026

CVE-2026-14999Published

IBM DataPower Gateway Improper Verification of Cryptographic Signature

cve-program ·

Vendor product: DataPower Gateway 10.6CD · Vendor product: DataPower Gateway 10.6.0 · Vendor product: DataPower Gateway 11.0.0

CVSS 3.1 7.4Source modified 9 Oct 2026Recorded 23 Oct 2026

CVE-2026-14992Published

IBM DataPower Gateway Out-of-bounds Write

cve-program ·

Vendor product: DataPower Gateway 10.6CD · Vendor product: DataPower Gateway 10.6.0 · Vendor product: DataPower Gateway 11.0.0

CVSS 3.1 9.8Source modified 9 Oct 2026Recorded 23 Oct 2026

CVE-2026-15781Published

IBM DataPower Gateway Buffer Overflow

cve-program ·

Vendor product: DataPower Gateway 10.6CD · Vendor product: DataPower Gateway 10.6.0 · Vendor product: DataPower Gateway 11.0.0

CVSS 3.1 8.0Source modified 9 Oct 2026Recorded 23 Oct 2026

CVE-2026-15784Published

IBM DataPower Gateway Out-of-bounds Write

cve-program ·

Vendor product: DataPower Gateway 10.6CD · Vendor product: DataPower Gateway 10.6.0 · Vendor product: DataPower Gateway 11.0.0

CVSS 3.1 8.1Source modified 9 Oct 2026Recorded 23 Oct 2026

CVE-2026-15762Published

IBM DataPower Gateway Out-of-bounds Write

cve-program ·

Vendor product: DataPower Gateway 10.6CD · Vendor product: DataPower Gateway 10.6.0 · Vendor product: DataPower Gateway 11.0.0

CVSS 3.1 9.8Source modified 9 Oct 2026Recorded 23 Oct 2026

CVE-2026-16340Published

IBM DataPower Gateway Out-of-bounds Write

cve-program ·

Vendor product: DataPower Gateway 10.6CD · Vendor product: DataPower Gateway 10.6.0 · Vendor product: DataPower Gateway 11.0.0

CVSS 3.1 9.8Source modified 9 Oct 2026Recorded 23 Oct 2026

CVE-2026-16181Published

IBM DataPower Gateway Improper Authorization

cve-program ·

Vendor product: DataPower Gateway 10.6CD · Vendor product: DataPower Gateway 10.6.0 · Vendor product: DataPower Gateway 11.0.0

CVSS 3.1 7.4Source modified 9 Oct 2026Recorded 23 Oct 2026

CVE-2026-87685Published

An arbitrary file manipulation vulnerability exists in the WebTools management interface of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. When processing configuration transfer requests, the application fails to prop…

cve-program ·

Vendor product: Fabric OS

CVSS 4.0 8.4Source modified 9 Oct 2026Recorded 23 Oct 2026

CVE-2026-87687Published

An authorization and input validation vulnerability exists in Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. An authenticated user with restricted privileges in one Virtual Fabric can exploit this issue by submitting …

cve-program ·

Vendor product: Fabric OS

CVSS 4.0 8.5Source modified 9 Oct 2026Recorded 23 Oct 2026

CVE-2026-87673Published

An OS command injection vulnerability exists in maintenance command-line diagnostic utilities on Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. The binary fails to sanitize user-supplied input options when invoking un…

cve-program ·

Vendor product: Fabric OS

CVSS 4.0 7.0Source modified 9 Oct 2026Recorded 23 Oct 2026

CVE-2026-87674Published

A local privilege escalation vulnerability exists in the system logging daemon of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. Insufficient access controls on internal inter-process communication (IPC) channels allo…

cve-program ·

Vendor product: Fabric OS

CVSS 4.0 8.5Source modified 9 Oct 2026Recorded 23 Oct 2026

CVE-2026-87675Published

An OS command injection vulnerability exists in the configuration management subsystem of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. When performing a configuration download operation, the management daemon will r…

cve-program ·

Vendor product: Fabric OS

CVSS 4.0 7.3Source modified 9 Oct 2026Recorded 23 Oct 2026

CVE-2026-87666Published

An OS command injection vulnerability exists in the time and zone management subsystem of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. When updating system timezone settings via the REST API or configuration downloa…

cve-program ·

Vendor product: Fabric OS

CVSS 4.0 8.6Source modified 9 Oct 2026Recorded 23 Oct 2026

CVE-2026-87662Published

Brocade Fabric versions before 9.2.2d and 10.0.0 through 10.0.0a1 handling of specific download protocols utilizes unsanitized parameter strings. When processing upgrade requests, parameters are converted into system command strings and exe…

cve-program ·

Vendor product: Fabric OS

CVSS 4.0 7.0Source modified 9 Oct 2026Recorded 23 Oct 2026

CVE-2026-87663Published

An authentication bypass and command injection vulnerability exists in the inter-switch remote execution service of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. When processing remote command execution IPC frames ac…

cve-program ·

Vendor product: Fabric OS

CVSS 4.0 7.1Source modified 9 Oct 2026Recorded 23 Oct 2026

CVE-2026-87664Published

A session context forgery vulnerability exists in the web management daemon of Brocade Fabric OS versions 9.2.2d and 10.0.0 through 10.0.0a1. When processing local inter-process communication (IPC) storage callbacks, the service accepts and…

cve-program ·

Vendor product: Fabric OS

CVSS 4.0 8.5Source modified 9 Oct 2026Recorded 23 Oct 2026

CVE-2026-94577Published

A privilege escalation vulnerability exists in the internal Command-Line Interface (CLI) authorization handling mechanism of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. An authenticated user or local process that c…

cve-program ·

Vendor product: Fabric OS

CVSS 4.0 7.3Source modified 9 Oct 2026Recorded 23 Oct 2026

CVE-2026-94581Published

An OS command injection vulnerability exists in the REST API management interface of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1 allows an authenticated, high-privileged remote attacker to execute arbitrary system c…

cve-program ·

Vendor product: Fabric OS

CVSS 4.0 8.5Source modified 9 Oct 2026Recorded 23 Oct 2026

CVE-2026-94586Published

A command injection vulnerability exists in the WebTools administrative interface handling configuration download or file transfer operations of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. An authenticated user wit…

cve-program ·

Vendor product: Fabric OS

CVSS 4.0 8.5Source modified 9 Oct 2026Recorded 23 Oct 2026

CVE-2021-3199Published

Directory traversal with remote code execution can occur in /upload in ONLYOFFICE Document Server before 5.6.3, when JWT is used, via a /.. sequence in an image upload parameter.

cve-program ·

Vendor product: n/a

Source modified 9 Oct 2026Recorded 23 Oct 2026

CVE-2016-3081Published

Apache Struts 2.3.19 to 2.3.20.2, 2.3.21 to 2.3.24.1, and 2.3.25 to 2.3.28, when Dynamic Method Invocation is enabled, allow remote attackers to execute arbitrary code via method: prefix, related to chained expressions.

cve-program ·

Vendor product: n/a

Source modified 9 Oct 2026Recorded 23 Oct 2026

CVE-2026-76266Published

Local Privilege Escalation through Linux Package Upgrades in Splunk Enterprise

cve-program ·

Vendor product: Splunk Enterprise

CVSS 3.1 7.7Source modified 9 Oct 2026Recorded 23 Oct 2026

CVE-2023-22894Published

Strapi through 4.5.5 allows attackers (with access to the admin panel) to discover sensitive user details by exploiting the query filter. The attacker can filter users by columns that contain sensitive information and infer a value from API…

cve-program ·

Vendor product: n/a

Source modified 9 Oct 2026Recorded 23 Oct 2026

CVE-2026-89191Published

Stored Cross-Site Scripting in SQLView KRIS

cve-program ·

Vendor product: SQLView KRIS

CVSS 3.1 6.8Source modified 9 Oct 2026Recorded 23 Oct 2026

CVE-2026-106120Published

LiquidJS is a Shopify / GitHub Pages compatible template engine in pure JavaScript. Prior to 10.27.2, enabling ownPropertyOnly does not consistently restrict inherited array indices because negative indexing, .first, .last, the first filter…

nvd ·

CVSS 4.0 · [email protected] · Secondary 6.0Source modified 9 Oct 2026Recorded 25 Oct 2026

CVE-2026-106104Published

Quasar Framework is a framework for building high-performance Vue.js user interfaces. Prior to 2.23.3, Platform.parseSSR() passed an unbounded User-Agent request header to getMatch() in ui/src/plugins/platform/Platform.js, whose browser-det…

nvd ·

CVSS 4.0 · [email protected] · Secondary 8.7Source modified 9 Oct 2026Recorded 25 Oct 2026

CVE-2026-105844Published

Payload is a free and open source headless content management system. In versions from 3.0.0 before 3.88.0 and canary versions before 4.0.0-canary.27, an unauthenticated user can submit prototype-sensitive field paths when @payloadcms/plugi…

nvd ·

CVSS 4.0 · [email protected] · Secondary 9.3Source modified 9 Oct 2026Recorded 25 Oct 2026

CVE-2026-105796Published

Kiota is an OpenAPI based HTTP Client code generator. From 0.5.0 until 1.35.0, Kiota's Java and PHP documentation-comment sanitizers delete block-comment terminators rather than neutralizing them, allowing overlapping characters to reform a…

nvd ·

CVSS 3.1 · [email protected] · Secondary 8.8Source modified 9 Oct 2026Recorded 25 Oct 2026

CVE-2026-93448Published

Langflow OSS is affected by multiple vulnerabilities

cve-program ·

Vendor product: Langflow OSS

CVSS 3.1 6.5Source modified 9 Oct 2026Recorded 23 Oct 2026

CVE-2026-93678Published

Langflow OSS is affected by multiple vulnerabilities

cve-program ·

Vendor product: Langflow OSS

CVSS 3.1 7.6Source modified 9 Oct 2026Recorded 23 Oct 2026

CVE-2025-70522Published

The request handler of Fanvil x7a firmware version 2.6.0.1182 does not enforce any cross-origin resource protection for any state-changing request performed against the applications. Due to the lack of protection, cross-origin boundary can …

cve-program ·

Vendor product: n/a

Source modified 9 Oct 2026Recorded 23 Oct 2026

CVE-2025-70517Published

The request handler of Fanvil x7a firmware version 2.6.0.1182 does not enforce any cross-origin resource protection for any state-changing request performed against the applications. Due to the lack of protection, cross-origin boundary can …

cve-program ·

Vendor product: n/a

Source modified 9 Oct 2026Recorded 23 Oct 2026

CVE-2026-106508Published

Backstage: Potential file exposure through local TechDocs publisher

cve-program ·

Vendor product: backstage · Vendor product: plugin-techdocs-node

CVSS 3.1 5.3Source modified 9 Oct 2026Recorded 23 Oct 2026

CVE-2026-106503Published

Backstage: Scaffolder action input authorization bypass

cve-program ·

Vendor product: backstage · Vendor product: plugin-scaffolder-backend

CVSS 3.1 8.1Source modified 9 Oct 2026Recorded 23 Oct 2026

CVE-2026-106498Published

Backstage: Improper URL validation in catalog entity placeholder resolution

cve-program ·

Vendor product: backstage · Vendor product: plugin-catalog-backend

CVSS 3.1 7.7Source modified 9 Oct 2026Recorded 23 Oct 2026

CVE-2026-106587Published

In sshd in OpenSSH before 10.6, the value "none" for a configuration option is sometimes interpreted as a filename but was intended to mean that a feature is disabled.

cve-program ·

Vendor product: OpenSSH

CVSS 3.1 3.6Source modified 9 Oct 2026Recorded 23 Oct 2026

CVE-2026-106492Published

Backstage: Improper preservation of access restrictions during service credential delegation

cve-program ·

Vendor product: backstage · Vendor product: backend-defaults

CVSS 3.1 7.6Source modified 9 Oct 2026Recorded 23 Oct 2026

CVE-2026-106487Published

Backstage: Unsupported catalog cluster authentication mode in kubernetes backend

cve-program ·

Vendor product: backstage · Vendor product: plugin-kubernetes-backend

CVSS 3.1 3.5Source modified 9 Oct 2026Recorded 23 Oct 2026

CVE-2026-106555Published

In sshd in OpenSSH before 10.6, GSSAPIAuthentication authentication state can incorrectly be persisted across authentication attempts.

cve-program ·

Vendor product: OpenSSH

CVSS 3.1 2.2Source modified 9 Oct 2026Recorded 23 Oct 2026

CVE-2026-106460Published

Backstage: Explicit negative email verification can be ignored during shared OAuth profile normalization

cve-program ·

Vendor product: backstage · Vendor product: plugin-auth-node

CVSS 3.1 6.8Source modified 9 Oct 2026Recorded 23 Oct 2026

CVE-2026-106455Published

Backstage: Improper validation of MkDocs plugin configuration in TechDocs

cve-program ·

Vendor product: backstage · Vendor product: plugin-techdocs-node

CVSS 3.1 7.7Source modified 9 Oct 2026Recorded 23 Oct 2026

A catalog match establishes published evidence, not applicability to your environment. Check resolved package dependencies, or open a Microsoft CVE for fixing KBs, releases and planning.