Security

Microsoft security updates and public advisory evidence: affected products, fixing updates, exploitation and source coverage.

Security Update Guide CISA KEV

Advisory catalog

Public source statements across vendors. Explicit aliases connect records; each publisher keeps its own state, severity and affected-version evidence.

Collected statements

698307 source statements · aliases may refer to the same vulnerability

CVE-2026-100576Published

OpenClaw before 2026.8.1 SSRF via Browser Wait Predicates

cve-program ·

Vendor product: OpenClaw

CVSS 4.0 5.3 · CVSS 3.1 5.4Source modified 5 Oct 2026Recorded 23 Oct 2026

CVE-2026-100580Published

OpenClaw before 2026.7.1 Remote Code Execution via cron tool

cve-program ·

Vendor product: OpenClaw

CVSS 4.0 8.7 · CVSS 3.1 8.8Source modified 5 Oct 2026Recorded 23 Oct 2026

CVE-2026-100584Published

OpenClaw before 2026.7.1 Allowlist Bypass via Workspace Shadows

cve-program ·

Vendor product: OpenClaw

CVSS 4.0 5.4 · CVSS 3.1 6.7Source modified 5 Oct 2026Recorded 23 Oct 2026

CVE-2026-100588Published

OpenClaw before 2026.7.1 Authentication Bypass via node.invoke

cve-program ·

Vendor product: OpenClaw

CVSS 4.0 8.7 · CVSS 3.1 8.3Source modified 5 Oct 2026Recorded 23 Oct 2026

CVE-2026-100592Published

OpenClaw before 2026.7.1 Authentication Bypass via Memory Dreaming

cve-program ·

Vendor product: OpenClaw

CVSS 4.0 5.3 · CVSS 3.1 6.3Source modified 5 Oct 2026Recorded 23 Oct 2026

CVE-2026-100596Published

OpenClaw before 2026.7.1 Authorization Bypass via MCP Configuration

cve-program ·

Vendor product: OpenClaw

CVSS 4.0 8.7 · CVSS 3.1 8.8Source modified 5 Oct 2026Recorded 23 Oct 2026

CVE-2026-96451Published

WordPress Ultimate Member plugin <= 2.13.1 - Privilege Escalation vulnerability

cve-program ·

https://wordpress.org/plugins: ultimate-member

CVSS 3.1 8.8Source modified 5 Oct 2026Recorded 23 Oct 2026

CVE-2026-105218Published

gopay before 1.5.119 Disabled TLS Certificate Verification in xhttp Client

cve-program ·

Vendor product: gopay

CVSS 4.0 9.1 · CVSS 3.1 7.4Source modified 5 Oct 2026Recorded 23 Oct 2026

CVE-2026-105219Published

Mammoth.js 1.3.0 before 1.12.3 ReDoS via Style Map Tokeniser

cve-program ·

Vendor product: mammoth.js

CVSS 4.0 8.7 · CVSS 3.1 7.5Source modified 5 Oct 2026Recorded 23 Oct 2026

CVE-2026-105302Published

Keycloak-services: keycloak-services: user session note mapper exposes upstream idp access tokens

cve-program ·

https://access.redhat.com/downloads/content/package-browser/: keycloak-services · https://access.redhat.com/downloads/content/package-browser/: rhbk/keycloak-rhel9 · https://access.redhat.com/downloads/content/package-browser/: keycloak-services

CVSS 3.1 5.7Source modified 5 Oct 2026Recorded 23 Oct 2026

CVE-2026-104408Published

WordPress Groundhogg plugin <= 4.8.3 - SQL Injection vulnerability

cve-program ·

https://wordpress.org/plugins: groundhogg

CVSS 3.1 7.6Source modified 5 Oct 2026Recorded 23 Oct 2026

CVE-2026-105060Published

WordPress Logo Showcase plugin <= 4.0.4 - Cross Site Scripting (XSS) vulnerability

cve-program ·

https://wordpress.org/plugins: logo-showcase

CVSS 3.1 6.5Source modified 5 Oct 2026Recorded 23 Oct 2026

CVE-2026-102914Published

WordPress Presto Player plugin <= 4.5.2 - Cross Site Scripting (XSS) vulnerability

cve-program ·

https://wordpress.org/plugins: presto-player

CVSS 3.1 6.5Source modified 5 Oct 2026Recorded 23 Oct 2026

CVE-2026-102393Published

WordPress Starter Templates plugin <= 4.7.7 - Cross Site Scripting (XSS) vulnerability

cve-program ·

https://wordpress.org/plugins: astra-sites

CVSS 3.1 6.5Source modified 5 Oct 2026Recorded 23 Oct 2026

CVE-2026-105064Published

WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.22 - Broken Access Control vulnerability

cve-program ·

https://wordpress.org/plugins: unlimited-elements-for-elementor

CVSS 3.1 6.5Source modified 5 Oct 2026Recorded 23 Oct 2026

CVE-2026-103684Published

WordPress WP Event Solution plugin <= 4.1.25 - Broken Access Control vulnerability

cve-program ·

https://wordpress.org/plugins: wp-event-solution

CVSS 3.1 5.3Source modified 5 Oct 2026Recorded 23 Oct 2026

CVE-2026-104427Published

Zebra before 6.1.0 Chain Stall via Stale parent_error_map Entry

cve-program ·

Vendor product: zebra

CVSS 4.0 8.2 · CVSS 3.1 5.9Source modified 5 Oct 2026Recorded 23 Oct 2026

CVE-2026-82042Published

UTMStack < 11.2.16 Authentication Bypass via InternalApiKeyFilter

cve-program ·

Vendor product: UTMStack

CVSS 4.0 9.3 · CVSS 3.1 9.8Source modified 5 Oct 2026Recorded 23 Oct 2026

CVE-2026-104474Published

OpenLiteSpeed before 1.9.3 Local Privilege Escalation via lsup.sh Auto-Update

cve-program ·

Vendor product: openlitespeed

CVSS 4.0 5.4 · CVSS 3.1 6.7Source modified 5 Oct 2026Recorded 23 Oct 2026

CVE-2026-105073Published

WordPress WP Event Solution plugin <= 4.1.25 - Sensitive Data Exposure vulnerability

cve-program ·

https://wordpress.org/plugins: wp-event-solution

CVSS 3.1 5.3Source modified 5 Oct 2026Recorded 23 Oct 2026

CVE-2026-105113Published

Nezha 1.8.0 before 2.3.13 Denial of Service via Notification Mutex Deadlock

cve-program ·

Vendor product: nezha

CVSS 4.0 7.1 · CVSS 3.1 6.5Source modified 5 Oct 2026Recorded 23 Oct 2026

CVE-2026-105175Published

SourceCodester Drug Recommendation System Student Registration add_student.php sql injection

cve-program ·

Vendor product: Drug Recommendation System

CVSS 4.0 6.9 · CVSS 3.1 7.3 · CVSS 3.0 7.3 · CVSS 2.0 7.5Source modified 5 Oct 2026Recorded 23 Oct 2026

CVE-2026-105118Published

OpenAM before 16.1.3 Open Redirect via Unverified id_token_hint in endSession

cve-program ·

Vendor product: OpenAM

CVSS 4.0 2.3 · CVSS 3.1 4.7Source modified 5 Oct 2026Recorded 23 Oct 2026

CVE-2026-105179Published

SourceCodester Drug Recommendation System Password add_user.php missing encryption

cve-program ·

Vendor product: Drug Recommendation System

CVSS 4.0 5.1 · CVSS 3.1 2.7 · CVSS 3.0 2.7 · CVSS 2.0 3.3Source modified 5 Oct 2026Recorded 23 Oct 2026

CVE-2026-105183Published

itsourcecode Online Admission System confirm.php sql injection

cve-program ·

Vendor product: Online Admission System

CVSS 4.0 6.9 · CVSS 3.1 7.3 · CVSS 3.0 7.3 · CVSS 2.0 7.5Source modified 5 Oct 2026Recorded 23 Oct 2026

CVE-2026-105187Published

itsourcecode Online Admission System key.php sql injection

cve-program ·

Vendor product: Online Admission System

CVSS 4.0 5.3 · CVSS 3.1 6.3 · CVSS 3.0 6.3 · CVSS 2.0 6.5Source modified 5 Oct 2026Recorded 23 Oct 2026

CVE-2026-105229Published

kishor-23 food-waste-management-system User Registration Endpoint signup.php sql injection

cve-program ·

Vendor product: food-waste-management-system

CVSS 4.0 6.9 · CVSS 3.1 7.3 · CVSS 3.0 7.3 · CVSS 2.0 7.5Source modified 5 Oct 2026Recorded 23 Oct 2026

CVE-2026-105233Published

kishor-23 food-waste-management-system Login Flow login.php session fixiation

cve-program ·

Vendor product: food-waste-management-system

CVSS 4.0 5.3 · CVSS 3.1 6.3 · CVSS 3.0 6.3 · CVSS 2.0 7.5Source modified 5 Oct 2026Recorded 23 Oct 2026

CVE-2026-105246Published

SourceCodester Online Reviewer Management System btn_functions.php update sql injection

cve-program ·

Vendor product: Online Reviewer Management System

CVSS 4.0 6.9 · CVSS 3.1 7.3 · CVSS 3.0 7.3 · CVSS 2.0 7.5Source modified 5 Oct 2026Recorded 23 Oct 2026

CVE-2026-105123Published

W (wcms) through 3.18.0 RCE and Arbitrary File Write via Media Upload API

cve-program ·

Vendor product: wcms

CVSS 4.0 8.7 · CVSS 3.1 8.8Source modified 5 Oct 2026Recorded 23 Oct 2026

CVE-2026-92882Published

Redact SNMP community, SNMPv3 pass phrases, and IPMI password in host config REST API GET responses

cve-program ·

Vendor product: Checkmk

CVSS 4.0 2.3Source modified 5 Oct 2026Recorded 23 Oct 2026

CVE-2026-105396Published

Heym before v0.0.112 HITL Review Token Leak via Spoofable Origin Header

cve-program ·

Vendor product: heym

CVSS 4.0 5.3 · CVSS 3.1 5.4Source modified 5 Oct 2026Recorded 23 Oct 2026

CVE-2026-105250Published

vgmstream Microsoft IMA Decoder ima_decoder.c decode_ms_ima divide by zero

cve-program ·

Vendor product: vgmstream

CVSS 4.0 5.3 · CVSS 3.1 4.3 · CVSS 3.0 4.3 · CVSS 2.0 5.0Source modified 5 Oct 2026Recorded 23 Oct 2026

CVE-2026-105128Published

LaraDashboard before 1.4.8 Open Redirect via Email Template Builder redirect_url

cve-program ·

Vendor product: laradashboard

CVSS 4.0 5.3 · CVSS 3.1 5.4Source modified 5 Oct 2026Recorded 23 Oct 2026

CVE-2026-105211Published

ZITADEL before 4.17.1 Authentication Bypass via Login V2 OTP returnCode

cve-program ·

Vendor product: zitadel

CVSS 4.0 9.2 · CVSS 3.1 8.1Source modified 5 Oct 2026Recorded 23 Oct 2026

CVE-2026-104400Published

WordPress B Blocks plugin <= 2.1.8 - Cross Site Scripting (XSS) vulnerability

cve-program ·

https://wordpress.org/plugins: b-blocks

CVSS 3.1 6.5Source modified 5 Oct 2026Recorded 23 Oct 2026

CVE-2026-105086Published

WWBN AVideo 12.4 through 29.2.0 Stored XSS via Double-Encoded Video Title

cve-program ·

Vendor product: AVideo

CVSS 4.0 9.3 · CVSS 3.1 8.7Source modified 5 Oct 2026Recorded 23 Oct 2026

CVE-2026-94171Published

WordPress CURCY plugin 2.2.18 - Cross Site Scripting (XSS) vulnerability

cve-program ·

https://wordpress.org/plugins: woo-multi-currency

CVSS 3.1 7.1Source modified 5 Oct 2026Recorded 23 Oct 2026

CVE-2026-100103Published

Authentication bypass via default auth token in P4Search

cve-program ·

Vendor product: P4Search

CVSS 4.0 10.0Source modified 5 Oct 2026Recorded 23 Oct 2026

CVE-2026-104806Published

Mitel MiVoice Office 400 System Logs Path Traversal Information Disclosure

cve-program ·

Vendor product: Mitel MiVoice Office 400

CVSS 4.0 5.5Source modified 5 Oct 2026Recorded 23 Oct 2026

CVE-2026-103507Published

Arbitrary file-write via log configuration path in P4Search

cve-program ·

Vendor product: P4Search

CVSS 4.0 7.5Source modified 5 Oct 2026Recorded 23 Oct 2026

CVE-2026-103344Published

WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.20 - Cross Site Scripting (XSS) vulnerability

cve-program ·

https://wordpress.org/plugins: unlimited-elements-for-elementor

CVSS 3.1 7.1Source modified 5 Oct 2026Recorded 23 Oct 2026

CVE-2026-105148Published

SciPhi-AI R2R Retrieval Completion API Endpoint llm.py server-side request forgery

cve-program ·

Vendor product: R2R

CVSS 4.0 6.9 · CVSS 3.1 7.3 · CVSS 3.0 7.3 · CVSS 2.0 7.5Source modified 5 Oct 2026Recorded 23 Oct 2026

CVE-2026-105205Published

SiYuan before 3.8.5 Information Disclosure via /api/block/getDocInfo and getDocsInfo

cve-program ·

Vendor product: siyuan

CVSS 4.0 6.9 · CVSS 3.1 5.3Source modified 5 Oct 2026Recorded 23 Oct 2026

CVE-2026-37604Published

pH7Software pH7Builder (pH7 Social Dating CMS) through 18.2.0 resolves the client IP address in _protected/framework/Ip/Ip.class.php from the HTTP_CLIENT_IP and HTTP_X_FORWARDED_FOR headers without verifying the request comes from a trusted…

cve-program ·

Vendor product: n/a

Source modified 5 Oct 2026Recorded 23 Oct 2026

CVE-2026-105158Published

RainyGao DocSys Database Management BaseController.java BaseController.createDBForMysql sql injection

cve-program ·

Vendor product: DocSys

CVSS 4.0 6.9 · CVSS 3.1 7.3 · CVSS 3.0 7.3 · CVSS 2.0 7.5Source modified 5 Oct 2026Recorded 23 Oct 2026

CVE-2026-105315Published

django-haystack more_like_this Template Tag elasticsearch_backend.py _to_python eval injection

cve-program ·

Vendor product: django-haystack

CVSS 4.0 5.1 · CVSS 3.1 4.7 · CVSS 3.0 4.7 · CVSS 2.0 5.8Source modified 5 Oct 2026Recorded 23 Oct 2026

CVE-2026-105185Published

itsourcecode Online Admission System examinee.php sql injection

cve-program ·

Vendor product: Online Admission System

CVSS 4.0 6.9 · CVSS 3.1 7.3 · CVSS 3.0 7.3 · CVSS 2.0 7.5Source modified 5 Oct 2026Recorded 23 Oct 2026

CVE-2026-105225Published

osCommerce osCommerce2 Payment payment.php include code injection

cve-program ·

Vendor product: osCommerce2

CVSS 4.0 4.8 · CVSS 3.1 4.3 · CVSS 3.0 4.3 · CVSS 2.0 5.8Source modified 5 Oct 2026Recorded 23 Oct 2026

CVE-2026-105231Published

kishor-23 food-waste-management-system Admin Registration signup.php sql injection

cve-program ·

Vendor product: food-waste-management-system

CVSS 4.0 6.9 · CVSS 3.1 7.3 · CVSS 3.0 7.3 · CVSS 2.0 7.5Source modified 5 Oct 2026Recorded 23 Oct 2026

A catalog match establishes published evidence, not applicability to your environment. Check resolved package dependencies, or open a Microsoft CVE for fixing KBs, releases and planning.