Security

Microsoft security updates and public advisory evidence: affected products, fixing updates, exploitation and source coverage.

Security Update Guide CISA KEV

Advisory catalog

Public source statements across vendors. Explicit aliases connect records; each publisher keeps its own state, severity and affected-version evidence.

Collected statements

698127 source statements · aliases may refer to the same vulnerability

CVE-2026-102406Published

Authorization Bypass Through User-Controlled Key in Kibana Leading to Cross-Tenant Data Interception

cve-program ·

Vendor product: Kibana

CVSS 3.1 8.8Source modified 8 Oct 2026Recorded 23 Oct 2026

CVE-2026-79814Published

Local Arbitrary File Write Leading to Local Privilege Escalation in ClearPass Policy Manager OnGuard Agent

cve-program ·

Vendor product: ClearPass Policy Manager (CPPM)

CVSS 3.1 6.7Source modified 8 Oct 2026Recorded 23 Oct 2026

CVE-2026-79813Published

Local Privilege Escalation in ClearPass Client Software

cve-program ·

Vendor product: ClearPass Policy Manager (CPPM)

CVSS 3.1 6.7Source modified 8 Oct 2026Recorded 23 Oct 2026

CVE-2026-79811Published

Authenticated SQL Injection allows Remote Code Execution in ClearPass Policy Manager API

cve-program ·

Vendor product: ClearPass Policy Manager (CPPM)

CVSS 3.1 7.2Source modified 8 Oct 2026Recorded 23 Oct 2026

CVE-2026-79810Published

Authenticated Remote Code Execution Vulnerabilities in HPE Networking ClearPass Policy Manager

cve-program ·

Vendor product: ClearPass Policy Manager (CPPM)

CVSS 3.1 7.2Source modified 8 Oct 2026Recorded 23 Oct 2026

CVE-2026-79808Published

Local Authenticated Buffer Overflow Vulnerability in the ClearPass Policy Manager OnGuard Agent

cve-program ·

Vendor product: ClearPass Policy Manager (CPPM)

CVSS 3.1 7.8Source modified 8 Oct 2026Recorded 23 Oct 2026

CVE-2026-79807Published

Authenticated Local Missing Integrity Verification Vulnerability leads to Local Privilege Escalation in the ClearPass Policy Manager Windows Client Software

cve-program ·

Vendor product: ClearPass Policy Manager (CPPM)

CVSS 3.1 7.8Source modified 8 Oct 2026Recorded 23 Oct 2026

CVE-2026-79806Published

Authenticated Local Privilege Escalation in ClearPass Policy Manager OnGuard Linux Agent

cve-program ·

Vendor product: ClearPass Policy Manager (CPPM)

CVSS 3.1 7.8Source modified 8 Oct 2026Recorded 23 Oct 2026

CVE-2026-79805Published

Authenticated Path Traversal Vulnerability Leads to Unauthorized File Access and Modification in ClearPass Policy Manager

cve-program ·

Vendor product: ClearPass Policy Manager (CPPM)

CVSS 3.1 9.8Source modified 8 Oct 2026Recorded 23 Oct 2026

CVE-2026-79803Published

Authenticated Command Injection Leading to Privilege Escalation in ClearPass Policy Manager API

cve-program ·

Vendor product: ClearPass Policy Manager (CPPM)

CVSS 3.1 8.8Source modified 8 Oct 2026Recorded 23 Oct 2026

CVE-2026-79802Published

Command Injection Vulnerability in the ClearPass Policy Manager Client Software

cve-program ·

Vendor product: ClearPass Policy Manager (CPPM)

CVSS 3.1 8.8Source modified 8 Oct 2026Recorded 23 Oct 2026

CVE-2026-79801Published

Unauthenticated Missing Integrity Verification allows Remote Code Execution in ClearPass Policy Manager Client Agent

cve-program ·

Vendor product: ClearPass Policy Manager (CPPM)

CVSS 3.1 9.8Source modified 8 Oct 2026Recorded 23 Oct 2026

CVE-2026-79800Published

Authenticated Path Traversal Vulnerability Leads to Remote Code Execution in ClearPass Policy Manager

cve-program ·

Vendor product: ClearPass Policy Manager (CPPM)

CVSS 3.1 8.8Source modified 8 Oct 2026Recorded 23 Oct 2026

CVE-2026-76501Published

Cisco Nexus 9000 Series Switches SRv6 OAM (NGOAM) Remote Code Execution Vulnerability

cve-program ·

Vendor product: Cisco NX-OS Software

CVSS 3.1 9.8Source modified 8 Oct 2026Recorded 23 Oct 2026

CVE-2026-76486Published

Cisco Nexus 3000 and 9000 Series Switches VXLAN OAM (NGOAM) Remote Code Execution Vulnerability

cve-program ·

Vendor product: Cisco NX-OS Software

CVSS 3.1 9.8Source modified 8 Oct 2026Recorded 23 Oct 2026

CVE-2026-76465Published

Cisco Nexus 3000 and 9000 Series Switches MPLS OAM Remote Code Execution Vulnerability

cve-program ·

Vendor product: Cisco NX-OS Software

CVSS 3.1 9.8Source modified 8 Oct 2026Recorded 23 Oct 2026

CVE-2026-79798Published

Authenticated SQL Injection Vulnerabilities in ClearPass Policy Manager Web-Based Management Interface

cve-program ·

Vendor product: ClearPass Policy Manager (CPPM)

CVSS 3.1 9.9Source modified 8 Oct 2026Recorded 23 Oct 2026

CVE-2026-79797Published

Improper Access Control in HPE Networking ClearPass Android Client Application

cve-program ·

Vendor product: ClearPass Policy Manager (CPPM)

CVSS 3.1 8.8Source modified 8 Oct 2026Recorded 23 Oct 2026

CVE-2026-76471Published

Cisco NX-OS Software NX-API Remote Code Execution Vulnerability

cve-program ·

Vendor product: Cisco NX-OS Software · Vendor product: Cisco Unified Computing System (Managed)

CVSS 3.1 9.8Source modified 8 Oct 2026Recorded 23 Oct 2026

CVE-2026-79796Published

Authentication Bypass Vulnerabilities in ClearPass Policy Manager

cve-program ·

Vendor product: ClearPass Policy Manager (CPPM)

CVSS 3.1 9.8Source modified 8 Oct 2026Recorded 23 Oct 2026

CVE-2026-79794Published

Authenticated SQL Injection Vulnerability in ClearPass Policy Manager Web-based Management Interface

cve-program ·

Vendor product: ClearPass Policy Manager (CPPM)

CVSS 3.1 9.1Source modified 8 Oct 2026Recorded 23 Oct 2026

CVE-2026-76754Published

Unauthenticated SQL Injection Vulnerability leads to Remote Code Execution in ClearPass Policy Manager

cve-program ·

Vendor product: ClearPass Policy Manager (CPPM)

CVSS 3.1 9.8Source modified 8 Oct 2026Recorded 23 Oct 2026

CVE-2026-76753Published

Unauthenticated Format String Vulnerability in HPE Networking ClearPass Policy Manager

cve-program ·

Vendor product: ClearPass Policy Manager (CPPM)

CVSS 3.1 9.8Source modified 8 Oct 2026Recorded 23 Oct 2026

CVE-2026-76752Published

Authentication Bypass Vulnerabilities in HPE Networking ClearPass Policy Manager Allow Unauthorized Administrative Access

cve-program ·

Vendor product: ClearPass Policy Manager (CPPM)

CVSS 3.1 9.8Source modified 8 Oct 2026Recorded 23 Oct 2026

CVE-2026-76751Published

Missing Integrity Verification in the OnGuard Agent of ClearPass Policy Manager Allows Unauthenticated Remote Code Execution

cve-program ·

Vendor product: ClearPass Policy Manager (CPPM)

CVSS 3.1 9.8Source modified 8 Oct 2026Recorded 23 Oct 2026

CVE-2026-76750Published

Unauthenticated Deserialization of Untrusted Data allows Remote Code Execution in the Web Interface of HPE Networking ClearPass Policy Manager

cve-program ·

Vendor product: ClearPass Policy Manager (CPPM)

CVSS 3.1 9.8Source modified 8 Oct 2026Recorded 23 Oct 2026

CVE-2026-76748Published

Authenticated Privilege Escalation Vulnerability in the API of AOS-S

cve-program ·

Vendor product: AOS-Switch (AOS-S)

CVSS 3.1 8.8Source modified 8 Oct 2026Recorded 23 Oct 2026

CVE-2026-76745Published

Unauthenticated Adjacent Memory Corruption Vulnerabilities Leading to Remote Code Execution in AOS-S

cve-program ·

Vendor product: AOS-Switch (AOS-S)

CVSS 3.1 9.6Source modified 8 Oct 2026Recorded 23 Oct 2026

CVE-2026-102256Published

Post-authentication Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability has been identified in the SMA1000 appliance which in specific conditions could potentially enable a remote authent…

cve-program ·

Vendor product: SMA1000

Source modified 8 Oct 2026Recorded 23 Oct 2026

CVE-2026-102257Published

A Zip Slip vulnerability in the in the SMA1000 Appliance Management Console (AMC) interface allows an attacker to extract files outside the intended destination directory using a specially crafted archive, resulting in remote code execution…

cve-program ·

Vendor product: SMA1000

Source modified 8 Oct 2026Recorded 23 Oct 2026

CVE-2026-76744Published

Unauthenticated Buffer Overflow Vulnerabilities lead to Remote Code Execution in AOS-S

cve-program ·

Vendor product: AOS-Switch (AOS-S)

CVSS 3.1 9.8Source modified 8 Oct 2026Recorded 23 Oct 2026

CVE-2026-76743Published

Authentication Bypass Vulnerability in the Management Interface of AOS-S

cve-program ·

Vendor product: AOS-Switch (AOS-S)

CVSS 3.1 9.8Source modified 8 Oct 2026Recorded 23 Oct 2026

CVE-2025-64393Published

This vulnerability in Veeam Backup & Replication allows a Backup Viewer to execute arbitrary code as SYSTEM on the backup server.

cve-program ·

Vendor product: Backup and Replication

CVSS 4.0 9.4Source modified 8 Oct 2026Recorded 23 Oct 2026

CVE-2026-76742Published

Authentication Bypass in the Web Management Interface of AOS-S

cve-program ·

Vendor product: AOS-Switch (AOS-S)

CVSS 3.1 9.8Source modified 8 Oct 2026Recorded 23 Oct 2026

CVE-2026-105683Published

Ghost is a Node.js content management system. From 6.14.0 until 6.27.0, an input validation issue may have allowed staff users to access local files outside the intended data storage directories on the server. This issue is fixed in version…

nvd ·

CVSS 3.1 · [email protected] · Secondary 3.8Source modified 8 Oct 2026Recorded 25 Oct 2026

CVE-2026-59265Published

Apache OpenOffice, Apache OpenOffice: Opening a malicious document can lead to system takeover

cve-program ·

Vendor product: Apache OpenOffice · Vendor product: Apache OpenOffice

Source modified 8 Oct 2026Recorded 23 Oct 2026

GHSA-gxw4-4fc5-9gr5Published

figma-developer-mcp vulnerable to command injection in get_figma_data tool

osv · CVE-2025-15061 · CVE-2025-53967

npm: figma-developer-mcp

HIGHSource modified 8 Oct 2026Recorded 24 Oct 2026

CVE-2026-105705Published

SourceCodester Drug Recommendation System add_drug.php cross site scripting

cve-program ·

Vendor product: Drug Recommendation System

CVSS 4.0 5.3 · CVSS 3.1 4.3 · CVSS 3.0 4.3 · CVSS 2.0 5.0Source modified 8 Oct 2026Recorded 23 Oct 2026

CVE-2026-105611Published

chillzhuang SpringBlade User Detail Endpoint RoleController.java improper authorization

cve-program ·

Vendor product: SpringBlade

CVSS 4.0 5.1 · CVSS 3.1 2.7 · CVSS 3.0 2.7 · CVSS 2.0 3.3Source modified 8 Oct 2026Recorded 23 Oct 2026

CVE-2026-105571Published

PickMall Lilishop Mobile Binding bindMobile improper authorization

cve-program ·

Vendor product: PickMall Lilishop

CVSS 4.0 6.9 · CVSS 3.1 7.3 · CVSS 3.0 7.3 · CVSS 2.0 7.5Source modified 8 Oct 2026Recorded 23 Oct 2026

CVE-2026-105472Published

girishsaraf Online-Appointment-Booking-System Booking book.php sql injection

cve-program ·

Vendor product: Online-Appointment-Booking-System

CVSS 4.0 5.3 · CVSS 3.1 6.3 · CVSS 3.0 6.3 · CVSS 2.0 6.5Source modified 8 Oct 2026Recorded 23 Oct 2026

CVE-2025-71383Published

Dbit WIFI4 N300 1.0.0 devices allow the management interface to be crashed via a request (from the local Wi-Fi network) that lacks a /api/login username or password field. This occurs because of an error in a JSON parser.

cve-program ·

Vendor product: n/a

Source modified 8 Oct 2026Recorded 23 Oct 2026

CVE-2026-105785Published

Joplin Server password reset accepts tokens issued for unrelated purposes

cve-program ·

Vendor product: joplin

CVSS 3.1 4.8Source modified 8 Oct 2026Recorded 23 Oct 2026

CVE-2026-105763Published

Twenty: Plaintext IMAP/SMTP/CalDAV password disclosure to any workspace member via /metadata GraphQL

cve-program ·

Vendor product: twenty

CVSS 3.1 9.6Source modified 8 Oct 2026Recorded 23 Oct 2026

CVE-2026-105758Published

vLLM: Qwen2-VL / Qwen3-VL video samplers bound on request-controlled max_frames, which the num_frames ceiling does not reach

cve-program ·

Vendor product: vllm

CVSS 3.1 5.3Source modified 8 Oct 2026Recorded 23 Oct 2026

CVE-2026-105754Published

vLLM: Scale-out disaggregated multimodal transport trusts caller-supplied features

cve-program ·

Vendor product: vllm

CVSS 3.1 6.5Source modified 8 Oct 2026Recorded 23 Oct 2026

CVE-2026-105468Published

girishsaraf Online-Appointment-Booking-System Login mlogin.php mysqli_query sql injection

cve-program ·

Vendor product: Online-Appointment-Booking-System

CVSS 4.0 6.9 · CVSS 3.1 7.3 · CVSS 3.0 7.3 · CVSS 2.0 7.5Source modified 8 Oct 2026Recorded 23 Oct 2026

CVE-2026-105749Published

Docling: Unbounded table rowspan/colspan in HTML, JATS, ODS and BoxNote backends causes CPU/memory exhaustion

cve-program ·

Vendor product: docling · Vendor product: docling-slim

CVSS 3.1 6.5Source modified 8 Oct 2026Recorded 23 Oct 2026

CVE-2026-105743Published

Docling: SSRF guard bypass in remote resource fetching (DNS rebinding / multi-record resolution; no IP validation in HTML render mode)

cve-program ·

Vendor product: docling · Vendor product: docling-slim

CVSS 3.1 4.0Source modified 8 Oct 2026Recorded 23 Oct 2026

CVE-2026-105699Published

Langflow: Authenticated Cross-Project File Disclosure via Unscoped MCP Resource Handlers

cve-program ·

Vendor product: langflow

CVSS 4.0 7.1Source modified 8 Oct 2026Recorded 23 Oct 2026

A catalog match establishes published evidence, not applicability to your environment. Check resolved package dependencies, or open a Microsoft CVE for fixing KBs, releases and planning.