Advisory catalog

Public source statements across vendors. Explicit aliases connect records; each publisher keeps its own state, severity and affected-version evidence.

Collected statements

684569 source statements · aliases may refer to the same vulnerability

CVE-2026-15556Published

Picketlink-federation: picketlink saml 2.0 auth bypass via missing assertions

cve-program ·

https://access.redhat.com/downloads/content/package-browser/: Red Hat JBoss Enterprise Application Platform 7.4.25 · https://access.redhat.com/downloads/content/package-browser/: eap7-activemq-artemis · https://access.redhat.com/downloads/content/package-browser/: eap7-glassfish-jsf

CVSS 3.1 8.1Source modified 26 Oct 2026Recorded 26 Oct 2026

CVE-2026-10579Published

Picketlink-federation: auth bypass in picketlink saml unsolicited-response

cve-program ·

CVSS 3.1 9.8Source modified 26 Oct 2026Recorded 26 Oct 2026

CVE-2026-110860Published

GitPython 3.1.62 before 3.2.0 Symlink Path Traversal via Submodule.move()

cve-program ·

Vendor product: GitPython

CVSS 4.0 6.9 · CVSS 3.1 6.1Source modified 26 Oct 2026Recorded 26 Oct 2026

CVE-2025-69035Published

WordPress Dental Care CPT plugin < 21.6 - PHP Object Injection vulnerability

cve-program ·

https://wordpress.org/plugins: dentalcare-cpt

CVSS 3.1 8.8Source modified 26 Oct 2026Recorded 26 Oct 2026

CVE-2026-77931Published

MoviePilot 3.1.5 Command Injection via ExecuteCommandTool

cve-program ·

Vendor product: MoviePilot

CVSS 4.0 8.7 · CVSS 3.1 8.8Source modified 26 Oct 2026Recorded 26 Oct 2026

CVE-2026-110865Published

Renovate before 44.60.1 HTTP Header Allowlist Bypass via Shared Presets

cve-program ·

Vendor product: renovate · Vendor product: renovate-ce · Vendor product: renovate-ee-server

CVSS 4.0 7.1 · CVSS 3.1 7.1Source modified 26 Oct 2026Recorded 26 Oct 2026

CVE-2026-110870Published

Nodemailer before 10.0.13 Improper Input Validation via Angle-Bracket Address Comments

cve-program ·

Vendor product: nodemailer

CVSS 4.0 6.9 · CVSS 3.1 5.3Source modified 26 Oct 2026Recorded 26 Oct 2026

CVE-2026-65226Rejected

This CVE ID has been rejected by runZero as unused.

cve-program ·

Source modified 26 Oct 2026Recorded 26 Oct 2026

CVE-2026-99077Published

ipv4: udp: Create exceptions before socket matching

cve-program ·

Vendor product: Linux · Vendor product: Linux

CVSS 3.1 7.4Source modified 26 Oct 2026Recorded 26 Oct 2026

CVE-2026-98166Published

drm/ttm: fix swapped-out resources never leaving their bulk_move range

cve-program ·

Vendor product: Linux · Vendor product: Linux

CVSS 3.1 7.8Source modified 26 Oct 2026Recorded 26 Oct 2026

CVE-2026-72453Published

regcache: Do not overwrite error code when finalizing cache after error

cve-program ·

Vendor product: Linux · Vendor product: Linux

Source modified 26 Oct 2026Recorded 26 Oct 2026

CVE-2026-31775Published

ALSA: ctxfi: Don't enumerate SPDIF1 at DAIO initialization

cve-program ·

Vendor product: Linux · Vendor product: Linux

Source modified 26 Oct 2026Recorded 26 Oct 2026

CVE-2026-23353Published

ice: fix crash in ethtool offline loopback test

cve-program ·

Vendor product: Linux · Vendor product: Linux

Source modified 26 Oct 2026Recorded 26 Oct 2026

CVE-2025-71312Published

fs/ntfs3: fix ntfs_mount_options leak in ntfs_fill_super()

cve-program ·

Vendor product: Linux · Vendor product: Linux

Source modified 26 Oct 2026Recorded 26 Oct 2026

CVE-2026-111216Published

Netgate pfSense CE through 2.9.0 OS Command Injection via Gateway Monitor IP

cve-program ·

https://github.com: pfSense CE

CVSS 4.0 8.6 · CVSS 3.1 7.2Source modified 26 Oct 2026Recorded 26 Oct 2026

CVE-2026-111221Published

Netgate pfSense CE through 2.9.0 Command Injection via RADIUS Secret mpd.conf Injection

cve-program ·

https://github.com: pfSense CE

CVSS 4.0 7.5 · CVSS 3.1 6.6Source modified 26 Oct 2026Recorded 26 Oct 2026

CVE-2026-111226Published

Netgate pfSense CE 2.4.5 through 2.9.0 OS Command Injection via system_advanced_admin.php

cve-program ·

https://github.com: pfSense CE

CVSS 4.0 8.6 · CVSS 3.1 7.2Source modified 26 Oct 2026Recorded 26 Oct 2026

CVE-2026-111231Published

Netgate pfSense CE through 2.9.0 Authorization Bypass via config_restore() and config_install()

cve-program ·

https://github.com: pfSense CE

CVSS 4.0 8.6 · CVSS 3.1 7.2Source modified 26 Oct 2026Recorded 26 Oct 2026

CVE-2026-110875Published

AdPlug through 2.4 Heap Buffer Overflow via CksmPlayer::update in ksm.cpp

cve-program ·

https://github.com: adplug

CVSS 4.0 6.9 · CVSS 3.1 6.1Source modified 26 Oct 2026Recorded 26 Oct 2026

CVE-2026-107090Published

An issue in Maltego Technologies GmbH Maltego Windows Installer 4.13.0 allows a local attacker to execute arbitrary code via the Maltego Windows installer executable-resolution logic

cve-program ·

Vendor product: n/a

Source modified 26 Oct 2026Recorded 26 Oct 2026

CVE-2026-111124Published

CFITSIO through 4.7.0 Heap Out-of-Bounds Read via Negative ZDITHER0 Seed

cve-program ·

https://github.com: cfitsio

CVSS 4.0 6.9 · CVSS 3.1 6.1Source modified 26 Oct 2026Recorded 26 Oct 2026

CVE-2026-115721Published

Apache Vysper: Unbounded allocation

cve-program ·

https://repo.maven.apache.org/maven2: org.apache.vysper:vysper

CVSS 3.1 7.5Source modified 26 Oct 2026Recorded 26 Oct 2026

CVE-2026-116543Published

Open5GS 1.3.0 through 2.8.0 Heap Out-of-Bounds Write via SBI Multipart Parser

cve-program ·

Vendor product: open5gs

CVSS 4.0 8.7 · CVSS 3.1 7.5Source modified 26 Oct 2026Recorded 26 Oct 2026

CVE-2026-116542Published

Netty netty-tcnative before 2.0.84.Final SNI Hostname Spoofing via Modified UTF-8 Decoding

cve-program ·

https://repo1.maven.org/maven2/io/netty/netty-tcnative/: io.netty:netty-tcnative · https://repo1.maven.org/maven2/io/netty/netty-tcnative-boringssl-static/: io.netty:netty-tcnative-boringssl-static

CVSS 4.0 6.9 · CVSS 3.1 5.3Source modified 26 Oct 2026Recorded 26 Oct 2026

CVE-2026-116539Published

Netty netty-tcnative before 2.0.84.Final Heap Buffer Overflow via OpenSSL BIO

cve-program ·

https://repo1.maven.org/maven2/io/netty/netty-tcnative/: io.netty:netty-tcnative · https://repo1.maven.org/maven2/io/netty/netty-tcnative-boringssl-static/: io.netty:netty-tcnative-boringssl-static

CVSS 4.0 8.2 · CVSS 3.1 5.9Source modified 26 Oct 2026Recorded 26 Oct 2026

CVE-2026-116538Published

HtmlSanitizer before 9.2.1039 XSS via SanitizeDom Body and HTML Attributes

cve-program ·

NuGet: HtmlSanitizer

CVSS 4.0 2.3 · CVSS 3.1 4.7Source modified 26 Oct 2026Recorded 26 Oct 2026

CVE-2026-116489Published

Timescale pgvectorscale before 0.9.1 Type Confusion via Unqualified DiskANN Operator Classes

cve-program ·

Vendor product: pgvectorscale

CVSS 4.0 7.7 · CVSS 3.1 7.5Source modified 26 Oct 2026Recorded 26 Oct 2026

CVE-2026-85297Published

Bucket Squatting in Cloud Run MCP leads to Service Account Takeover

cve-program ·

Vendor product: Cloud Run MCP

CVSS 4.0 7.7Source modified 26 Oct 2026Recorded 26 Oct 2026

CVE-2026-98943Rejected

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

cve-program ·

Source modified 26 Oct 2026Recorded 26 Oct 2026

CVE-2026-99099Published

x86/CPU/AMD: Fix AMD TLBI Erratum #1718

cve-program ·

Vendor product: Linux · Vendor product: Linux

Source modified 26 Oct 2026Recorded 26 Oct 2026

CVE-2026-99098Published

dm-integrity: fix buffer overflow in inline mode with large tag size

cve-program ·

Vendor product: Linux · Vendor product: Linux

Source modified 26 Oct 2026Recorded 26 Oct 2026

CVE-2026-99097Published

tee: shm: reject zero-sized allocations in tee_dyn_shm_alloc_helper()

cve-program ·

Vendor product: Linux · Vendor product: Linux

Source modified 26 Oct 2026Recorded 26 Oct 2026

CVE-2026-99096Published

io_uring/register: don't exempt disabled rings from task restrictions

cve-program ·

Vendor product: Linux · Vendor product: Linux

Source modified 26 Oct 2026Recorded 26 Oct 2026

CVE-2026-99095Published

drm/vc4: drain the hangcheck timer and works on V3D unbind

cve-program ·

Vendor product: Linux · Vendor product: Linux

Source modified 26 Oct 2026Recorded 26 Oct 2026

CVE-2026-99094Published

Bluetooth: btintel_pcie: fix TX descriptor bounds check

cve-program ·

Vendor product: Linux · Vendor product: Linux

Source modified 26 Oct 2026Recorded 26 Oct 2026

CVE-2026-99093Published

mm: don't schedule deferred kernel page table freeing while booting

cve-program ·

Vendor product: Linux · Vendor product: Linux

Source modified 26 Oct 2026Recorded 26 Oct 2026

CVE-2026-99092Published

riscv: patch: fix handling of bpf-jit execmem addresses

cve-program ·

Vendor product: Linux · Vendor product: Linux

Source modified 26 Oct 2026Recorded 26 Oct 2026

CVE-2026-99091Published

Bluetooth: MGMT: Fix status of pending commands flushed on power off

cve-program ·

Vendor product: Linux · Vendor product: Linux

Source modified 26 Oct 2026Recorded 26 Oct 2026

CVE-2026-99089Published

ASoC: samsung: i2s: enable op_clk in probe to balance runtime PM

cve-program ·

Vendor product: Linux · Vendor product: Linux

Source modified 26 Oct 2026Recorded 26 Oct 2026

CVE-2026-99088Published

net: openvswitch: validate transport header presence in set_ipv6_addr

cve-program ·

Vendor product: Linux · Vendor product: Linux

Source modified 26 Oct 2026Recorded 26 Oct 2026

CVE-2026-65547Rejected

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. Duplicate to CVE-2026-3985.

cve-program ·

Source modified 26 Oct 2026Recorded 26 Oct 2026

CVE-2026-77057Published

Improper Restriction of Excessive Authentication Attempts in boneIO

cve-program ·

https://pypi.python.org: boneio

CVSS 4.0 2.3Source modified 26 Oct 2026Recorded 26 Oct 2026

CVE-2026-77055Published

Improper Privilege Assignment in boneIO

cve-program ·

Vendor product: black_debian_images

CVSS 4.0 9.3Source modified 26 Oct 2026Recorded 26 Oct 2026

CVE-2026-77053Published

Missing Authentication in Default Configuration in boneIO

cve-program ·

https://pypi.python.org: boneio

CVSS 4.0 8.7Source modified 26 Oct 2026Recorded 26 Oct 2026

CVE-2026-77052Published

Missing Authentication for Node-RED in boneIO

cve-program ·

https://pypi.python.org: boneio

CVSS 4.0 8.7Source modified 26 Oct 2026Recorded 26 Oct 2026

CVE-2026-116340Published

iFlytek astron-agent Console Knowledge-List Endpoint FileInfoV2Service.java FileInfoV2Service.listKnowledgeByPage authorization

cve-program ·

Vendor product: astron-agent

CVSS 4.0 5.3 · CVSS 3.1 4.3 · CVSS 3.0 4.3 · CVSS 2.0 4.0Source modified 26 Oct 2026Recorded 26 Oct 2026

GHSA-7cxh-94cf-mfp6Published

Talos Linux: Support bundle does not redact registry credentials

osv · CVE-2026-77564

Go: github.com/siderolabs/talos

LOWSource modified 26 Oct 2026Recorded 26 Oct 2026

GHSA-h895-cgqg-jf52Published

toml-node: Prototype pollution: parsing a TOML document can write to Object.prototype

osv · CVE-2026-114142

npm: toml

HIGHSource modified 26 Oct 2026Recorded 26 Oct 2026

CVE-2026-110748Published

Apache SIS: CWE-22: improper limitation of paths to GML, GeoTIFF, NADCON or NTv2 files

cve-program ·

https://repo.maven.apache.org/maven2: org.apache.sis:sis-metadata

Source modified 26 Oct 2026Recorded 26 Oct 2026

CVE-2026-84823Published

Org.wildfly.core: wildfly: path traversal in take-snapshot discloses the server configuration to the monitor role

cve-program ·

https://access.redhat.com/downloads/content/package-browser/: pki-core:10.6/resteasy · https://access.redhat.com/downloads/content/package-browser/: pki-deps:10.6/resteasy · https://access.redhat.com/downloads/content/package-browser/: resteasy

CVSS 3.1 7.1Source modified 26 Oct 2026Recorded 26 Oct 2026

A catalog match establishes published evidence, not applicability to your environment. Check resolved package dependencies, or open a Microsoft CVE for fixing KBs, releases and planning.