ChangeIntelIT change radar

Public mode

No access to your tenant or devices. Every item links to its source. What this means

Advisory catalog

Public source statements across vendors. Explicit aliases connect records; each publisher keeps its own state, severity and affected-version evidence.

Collected statements

678823 source statements · aliases may refer to the same vulnerability

CVE-2026-116543Published

Open5GS 1.3.0 through 2.8.0 Heap Out-of-Bounds Write via SBI Multipart Parser

cve-program ·

Vendor product: open5gs

CVSS 4.0 8.7 · CVSS 3.1 7.5Source modified 26 Oct 2026Recorded 26 Oct 2026

CVE-2026-116542Published

Netty netty-tcnative before 2.0.84.Final SNI Hostname Spoofing via Modified UTF-8 Decoding

cve-program ·

https://repo1.maven.org/maven2/io/netty/netty-tcnative/: io.netty:netty-tcnative · https://repo1.maven.org/maven2/io/netty/netty-tcnative-boringssl-static/: io.netty:netty-tcnative-boringssl-static

CVSS 4.0 6.9 · CVSS 3.1 5.3Source modified 26 Oct 2026Recorded 26 Oct 2026

CVE-2026-116539Published

Netty netty-tcnative before 2.0.84.Final Heap Buffer Overflow via OpenSSL BIO

cve-program ·

https://repo1.maven.org/maven2/io/netty/netty-tcnative/: io.netty:netty-tcnative · https://repo1.maven.org/maven2/io/netty/netty-tcnative-boringssl-static/: io.netty:netty-tcnative-boringssl-static

CVSS 4.0 8.2 · CVSS 3.1 5.9Source modified 26 Oct 2026Recorded 26 Oct 2026

CVE-2026-116538Published

HtmlSanitizer before 9.2.1039 XSS via SanitizeDom Body and HTML Attributes

cve-program ·

NuGet: HtmlSanitizer

CVSS 4.0 2.3 · CVSS 3.1 4.7Source modified 26 Oct 2026Recorded 26 Oct 2026

CVE-2026-116489Published

Timescale pgvectorscale before 0.9.1 Type Confusion via Unqualified DiskANN Operator Classes

cve-program ·

Vendor product: pgvectorscale

CVSS 4.0 7.7 · CVSS 3.1 7.5Source modified 26 Oct 2026Recorded 26 Oct 2026

CVE-2026-85297Published

Bucket Squatting in Cloud Run MCP leads to Service Account Takeover

cve-program ·

Vendor product: Cloud Run MCP

CVSS 4.0 7.7Source modified 26 Oct 2026Recorded 26 Oct 2026

CVE-2026-98943Rejected

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

cve-program ·

Source modified 26 Oct 2026Recorded 26 Oct 2026

CVE-2026-99099Published

x86/CPU/AMD: Fix AMD TLBI Erratum #1718

cve-program ·

Vendor product: Linux · Vendor product: Linux

Source modified 26 Oct 2026Recorded 26 Oct 2026

CVE-2026-99098Published

dm-integrity: fix buffer overflow in inline mode with large tag size

cve-program ·

Vendor product: Linux · Vendor product: Linux

Source modified 26 Oct 2026Recorded 26 Oct 2026

CVE-2026-99097Published

tee: shm: reject zero-sized allocations in tee_dyn_shm_alloc_helper()

cve-program ·

Vendor product: Linux · Vendor product: Linux

Source modified 26 Oct 2026Recorded 26 Oct 2026

CVE-2026-99096Published

io_uring/register: don't exempt disabled rings from task restrictions

cve-program ·

Vendor product: Linux · Vendor product: Linux

Source modified 26 Oct 2026Recorded 26 Oct 2026

CVE-2026-99095Published

drm/vc4: drain the hangcheck timer and works on V3D unbind

cve-program ·

Vendor product: Linux · Vendor product: Linux

Source modified 26 Oct 2026Recorded 26 Oct 2026

CVE-2026-99094Published

Bluetooth: btintel_pcie: fix TX descriptor bounds check

cve-program ·

Vendor product: Linux · Vendor product: Linux

Source modified 26 Oct 2026Recorded 26 Oct 2026

CVE-2026-99093Published

mm: don't schedule deferred kernel page table freeing while booting

cve-program ·

Vendor product: Linux · Vendor product: Linux

Source modified 26 Oct 2026Recorded 26 Oct 2026

CVE-2026-99092Published

riscv: patch: fix handling of bpf-jit execmem addresses

cve-program ·

Vendor product: Linux · Vendor product: Linux

Source modified 26 Oct 2026Recorded 26 Oct 2026

CVE-2026-99091Published

Bluetooth: MGMT: Fix status of pending commands flushed on power off

cve-program ·

Vendor product: Linux · Vendor product: Linux

Source modified 26 Oct 2026Recorded 26 Oct 2026

CVE-2026-99090Published

drm/amdgpu: serialize vblank counter reads against GPU reset

cve-program ·

Vendor product: Linux · Vendor product: Linux

Source modified 26 Oct 2026Recorded 26 Oct 2026

CVE-2026-99089Published

ASoC: samsung: i2s: enable op_clk in probe to balance runtime PM

cve-program ·

Vendor product: Linux · Vendor product: Linux

Source modified 26 Oct 2026Recorded 26 Oct 2026

CVE-2026-99088Published

net: openvswitch: validate transport header presence in set_ipv6_addr

cve-program ·

Vendor product: Linux · Vendor product: Linux

Source modified 26 Oct 2026Recorded 26 Oct 2026

CVE-2026-65547Rejected

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. Duplicate to CVE-2026-3985.

cve-program ·

Source modified 26 Oct 2026Recorded 26 Oct 2026

CVE-2026-77057Published

Improper Restriction of Excessive Authentication Attempts in boneIO

cve-program ·

https://pypi.python.org: boneio

CVSS 4.0 2.3Source modified 26 Oct 2026Recorded 26 Oct 2026

CVE-2026-77055Published

Improper Privilege Assignment in boneIO

cve-program ·

Vendor product: black_debian_images

CVSS 4.0 9.3Source modified 26 Oct 2026Recorded 26 Oct 2026

CVE-2026-77053Published

Missing Authentication in Default Configuration in boneIO

cve-program ·

https://pypi.python.org: boneio

CVSS 4.0 8.7Source modified 26 Oct 2026Recorded 26 Oct 2026

CVE-2026-77052Published

Missing Authentication for Node-RED in boneIO

cve-program ·

https://pypi.python.org: boneio

CVSS 4.0 8.7Source modified 26 Oct 2026Recorded 26 Oct 2026

CVE-2026-116340Published

iFlytek astron-agent Console Knowledge-List Endpoint FileInfoV2Service.java FileInfoV2Service.listKnowledgeByPage authorization

cve-program ·

Vendor product: astron-agent

CVSS 4.0 5.3 · CVSS 3.1 4.3 · CVSS 3.0 4.3 · CVSS 2.0 4.0Source modified 26 Oct 2026Recorded 26 Oct 2026

GHSA-7cxh-94cf-mfp6Published

Talos Linux: Support bundle does not redact registry credentials

osv · CVE-2026-77564

Go: github.com/siderolabs/talos

LOWSource modified 26 Oct 2026Recorded 26 Oct 2026

GHSA-h895-cgqg-jf52Published

toml-node: Prototype pollution: parsing a TOML document can write to Object.prototype

osv · CVE-2026-114142

npm: toml

HIGHSource modified 26 Oct 2026Recorded 26 Oct 2026

CVE-2026-110748Published

Apache SIS: CWE-22: improper limitation of paths to GML, GeoTIFF, NADCON or NTv2 files

cve-program ·

https://repo.maven.apache.org/maven2: org.apache.sis:sis-metadata

Source modified 26 Oct 2026Recorded 26 Oct 2026

CVE-2026-84823Published

Org.wildfly.core: wildfly: path traversal in take-snapshot discloses the server configuration to the monitor role

cve-program ·

https://access.redhat.com/downloads/content/package-browser/: pki-core:10.6/resteasy · https://access.redhat.com/downloads/content/package-browser/: pki-deps:10.6/resteasy · https://access.redhat.com/downloads/content/package-browser/: resteasy

CVSS 3.1 7.1Source modified 26 Oct 2026Recorded 26 Oct 2026

CVE-2026-106781Published

An issue in WCH CH340/CH341 USB-to-Serial Windows Driver setup package CH341SER.EXE version 4.0 allows a local attacker to escalate privileges.

cve-program ·

Vendor product: n/a

Source modified 26 Oct 2026Recorded 26 Oct 2026

CVE-2026-105930Published

Apache Pulsar: Improper Authorization of Function, Source and Sink Package URLs Allows Cross-Tenant Package Download

cve-program ·

Vendor product: Apache Pulsar

CVSS 4.0 6.0Source modified 26 Oct 2026Recorded 26 Oct 2026

CVE-2026-114214Published

Loading a through relationship with a limit of 1 in Ash ignores the through path and returns unrelated destination records

cve-program ·

https://repo.hex.pm: ash · https://github.com: ash-project/ash

CVSS 4.0 6.0Source modified 26 Oct 2026Recorded 26 Oct 2026

CVE-2026-115635Published

AshPostgres returns another tenant's record for a skipped upsert when return_skipped_upsert? is set

cve-program ·

https://repo.hex.pm: ash_postgres · https://github.com: ash-project/ash_postgres

CVSS 4.0 6.0Source modified 26 Oct 2026Recorded 26 Oct 2026

CVE-2026-115627Published

AshPostgres ignores attribute multitenancy on the join resource when loading many_to_many and through relationships, returning records related through other tenants' rows

cve-program ·

https://repo.hex.pm: ash_postgres · https://github.com: ash-project/ash_postgres

CVSS 4.0 6.0Source modified 26 Oct 2026Recorded 26 Oct 2026

CVE-2026-113345Published

Electronic delivery item Inspection Support System provided by Japan's Ministry of Land, Infrastructure, Transport and Tourism contains an improper file access permission vulnerability. Files in the installation folder of the application ma…

cve-program ·

Vendor product: Electronic delivery item Inspection Support System

CVSS 3.0 7.8 · CVSS 4.0 8.5Source modified 26 Oct 2026Recorded 26 Oct 2026

CVE-2026-107894Published

V-SFT provided by FUJI ELECTRIC CO., LTD. contains a stack-based buffer overflow vulnerability. Opening a crafted V7 file may lead to information exposure or arbitrary code execution on the affected product.

cve-program ·

Vendor product: V-SFT

CVSS 3.1 7.8 · CVSS 4.0 8.4Source modified 26 Oct 2026Recorded 26 Oct 2026

CVE-2026-107895Published

V-SFT provided by FUJI ELECTRIC CO., LTD. contains an out-of-bounds write vulnerability. Opening a crafted V7 file may lead to information exposure or arbitrary code execution on the affected product.

cve-program ·

Vendor product: V-SFT

CVSS 3.1 7.8 · CVSS 4.0 8.4Source modified 26 Oct 2026Recorded 26 Oct 2026

CVE-2026-107896Published

V-SFT provided by FUJI ELECTRIC CO., LTD. contains an out-of-bounds read vulnerability in VS6ComFile!load_gr_item. Opening a crafted V7 file may lead to information exposure or arbitrary code execution on the affected product.

cve-program ·

Vendor product: V-SFT

CVSS 3.1 7.8 · CVSS 4.0 8.4Source modified 26 Oct 2026Recorded 26 Oct 2026

CVE-2026-107897Published

V-SFT provided by FUJI ELECTRIC CO., LTD. contains an out-of-bounds read vulnerability in VS6MemInIF!set_temp_type_default. Opening a crafted V7 file may lead to information exposure or arbitrary code execution on the affected product.

cve-program ·

Vendor product: V-SFT

CVSS 3.1 7.8 · CVSS 4.0 8.4Source modified 26 Oct 2026Recorded 26 Oct 2026

CVE-2026-107898Published

V-SFT provided by FUJI ELECTRIC CO., LTD. contains an out-of-bounds read vulnerability in VS6EditData!CDataRomErrorCheck::MacroCommandCheck. Opening a crafted V7 file may lead to information exposure or arbitrary code execution on the affec…

cve-program ·

Vendor product: V-SFT

CVSS 3.1 7.8 · CVSS 4.0 8.4Source modified 26 Oct 2026Recorded 26 Oct 2026

CVE-2026-107899Published

V-SFT provided by FUJI ELECTRIC CO., LTD. contains an out-of-bounds read vulnerability in VS6EditData!CDataRomErrorCheck::CheckSymbolMacroParam. Opening a crafted V7 file may lead to information exposure or arbitrary code execution on the a…

cve-program ·

Vendor product: V-SFT

CVSS 3.1 7.8 · CVSS 4.0 8.4Source modified 26 Oct 2026Recorded 26 Oct 2026

CVE-2026-107900Published

V-SFT provided by FUJI ELECTRIC CO., LTD. contains an out-of-bounds read vulnerability in VS6ComFile!CCheck::ItemCheck. Opening a crafted V7 file may lead to information exposure or arbitrary code execution on the affected product.

cve-program ·

Vendor product: V-SFT

CVSS 3.1 7.8 · CVSS 4.0 8.4Source modified 26 Oct 2026Recorded 26 Oct 2026

CVE-2026-96581Published

An upsert on the primary key in Ash ignores attribute multitenancy, so one tenant can read, overwrite and take over another tenant's records

cve-program ·

https://repo.hex.pm: ash · https://github.com: ash-project/ash

CVSS 4.0 7.6Source modified 26 Oct 2026Recorded 26 Oct 2026

CVE-2026-82943Published

Out-of-Bounds Read via Unchecked Length Values

cve-program ·

Vendor product: SOEM

CVSS 3.1 6.5Source modified 26 Oct 2026Recorded 26 Oct 2026

CVE-2026-95628Published

Apache Camel: Camel-Docling Custom CLI Argument Path Validation Does Not Reject Absolute Paths (Incomplete Fix of CVE-2026-40047)

cve-program ·

https://repo.maven.apache.org/maven2: org.apache.camel:camel-docling

CVSS 3.1 5.4Source modified 26 Oct 2026Recorded 26 Oct 2026

CVE-2026-82945Published

Memory Corruption via FMMU Configuration Table Overflow

cve-program ·

Vendor product: SOEM

CVSS 3.1 6.5Source modified 26 Oct 2026Recorded 26 Oct 2026

CVE-2026-82946Published

Null Pointer Dereference in Mailbox Error Handling

cve-program ·

Vendor product: SOEM

CVSS 3.1 6.5Source modified 26 Oct 2026Recorded 26 Oct 2026

CVE-2026-113438Published

Pleasanter provided fails to properly verify passwords in LDAP authentication when processing specially crafted requests under certain configurations. If exploited, an attacker may bypass LDAP authentication by providing only a valid Login…

cve-program ·

Vendor product: Pleasanter

CVSS 3.0 6.5 · CVSS 4.0 6.9Source modified 26 Oct 2026Recorded 26 Oct 2026

CVE-2026-103377Published

Reflected cross-site scripting in the video library of the Regional Parliament of Castile-La Mancha

cve-program ·

Vendor product: Video library of the Regional Parliament of Castile-La Mancha

CVSS 4.0 5.1Source modified 26 Oct 2026Recorded 26 Oct 2026

CVE-2026-112250Published

Cleartext Storage of Windows Service Account Password in BRAIN2 Setup Log Files

cve-program ·

Vendor product: BRAIN2

CVSS 3.1 4.4Source modified 26 Oct 2026Recorded 26 Oct 2026

A catalog match establishes published evidence, not applicability to your environment. Check resolved package dependencies, or open a Microsoft CVE for fixing KBs, releases and planning.