Security

Microsoft security updates and public advisory evidence: affected products, fixing updates, exploitation and source coverage.

Security Update Guide CISA KEV

Advisory catalog

Public source statements across vendors. Explicit aliases connect records; each publisher keeps its own state, severity and affected-version evidence.

Collected statements

698751 source statements · aliases may refer to the same vulnerability

CVE-2026-76719Published

HPE OneView - Cross-site scripting vulnerability

cve-program ·

Vendor product: HPE OneView

CVSS 3.1 8.2Source modified 29 Sep 2026Recorded 23 Oct 2026

GO-2026-4981Published

Crash when handling long CNAME response in net

osv · BIT-golang-2026-33811 · CVE-2026-33811

Go: stdlib

Source modified 29 Sep 2026Recorded 24 Oct 2026

GO-2026-4337Published

Unexpected session resumption in crypto/tls

osv · BIT-golang-2025-68121 · CVE-2025-68121

Go: stdlib

Source modified 29 Sep 2026Recorded 24 Oct 2026

GO-2025-3447Published

Timing sidechannel for P-256 on ppc64le in crypto/internal/nistec

osv · BIT-golang-2025-22866 · CVE-2025-22866

Go: stdlib

Source modified 29 Sep 2026Recorded 24 Oct 2026

GO-2026-4864Published

TOCTOU permits root escape on Linux via Root.Chmod in os in internal/syscall/unix

osv · BIT-golang-2026-32282 · CVE-2026-32282

Go: stdlib

Source modified 29 Sep 2026Recorded 24 Oct 2026

CVE-2026-15390Published

Out-of-bounds write in Das U-Boot

cve-program ·

Vendor product: Das U-Boot

CVSS 4.0 9.0Source modified 29 Sep 2026Recorded 23 Oct 2026

CVE-2026-76720Published

HPE OneView - URL Redirect vulnerability

cve-program ·

Vendor product: HPE OneView

CVSS 3.1 4.3Source modified 29 Sep 2026Recorded 23 Oct 2026

CVE-2026-19547Published

Local Privilege Escalation in Ghostscript for Windows

cve-program ·

Vendor product: Ghostscript

CVSS 4.0 7.0Source modified 29 Sep 2026Recorded 23 Oct 2026

CVE-2026-102366Published

mall4j through 4.0 Unrestricted File Upload in Admin File Endpoints

cve-program ·

https://github.com/gz-yami/mall4j: mall4j

CVSS 4.0 2.1 · CVSS 3.1 4.4Source modified 29 Sep 2026Recorded 23 Oct 2026

CVE-2026-101279Published

Trusted Domain Project OpenDMARC opendmarc_policy.c integer overflow

cve-program ·

Vendor product: OpenDMARC

CVSS 4.0 6.9 · CVSS 3.1 6.5 · CVSS 3.0 6.5 · CVSS 2.0 6.4Source modified 29 Sep 2026Recorded 23 Oct 2026

CVE-2026-101354Published

FAST FAC1203R MmtAtePrase _tWlanTask stack-based overflow

cve-program ·

Vendor product: FAC1203R

CVSS 4.0 9.4 · CVSS 3.1 9.6 · CVSS 3.0 9.6 · CVSS 2.0 8.3Source modified 29 Sep 2026Recorded 23 Oct 2026

CVE-2026-101860Published

RaspAP raspap-webgui sudo Configuration PluginInstaller.php addSudoers privileges management

cve-program ·

Vendor product: raspap-webgui

CVSS 4.0 8.7 · CVSS 3.1 8.8 · CVSS 3.0 8.8 · CVSS 2.0 9.0Source modified 29 Sep 2026Recorded 23 Oct 2026

CVE-2026-102243Published

MODSetter SurfSense MCP Connector Integration test command injection

cve-program ·

Vendor product: SurfSense

CVSS 4.0 5.3 · CVSS 3.1 7.4 · CVSS 3.0 7.4 · CVSS 2.0 6.5Source modified 29 Sep 2026Recorded 23 Oct 2026

CVE-2026-102247Published

FastAdmin Database Management database.php unnecessary privileges

cve-program ·

Vendor product: FastAdmin

CVSS 4.0 8.5 · CVSS 3.1 6.8 · CVSS 3.0 6.8 · CVSS 2.0 8.3Source modified 29 Sep 2026Recorded 23 Oct 2026

CVE-2026-77797Published

Velociraptor Prefetch parser out of bounds

cve-program ·

Vendor product: Velociraptor

CVSS 3.1 3.6Source modified 29 Sep 2026Recorded 23 Oct 2026

CVE-2026-102261Published

owen2345 Camaleon CMS Media Crop media_controller.rb crop authorization

cve-program ·

Vendor product: Camaleon CMS

CVSS 4.0 5.3 · CVSS 3.1 5.4 · CVSS 3.0 5.4 · CVSS 2.0 5.5Source modified 29 Sep 2026Recorded 23 Oct 2026

CVE-2026-102290Published

CodeCanyon Rocket LMS Student Profile Image Upload cross site scripting

cve-program ·

Vendor product: Rocket LMS

CVSS 4.0 5.1 · CVSS 3.1 3.5 · CVSS 3.0 3.5 · CVSS 2.0 4.0Source modified 29 Sep 2026Recorded 23 Oct 2026

CVE-2026-91043Published

HPACK-indexed cookie fields in Mint HTTP/2 responses bypass max_header_list_size and exhaust client memory

cve-program ·

https://repo.hex.pm: mint · https://github.com: elixir-mint/mint

CVSS 4.0 8.2Source modified 29 Sep 2026Recorded 23 Oct 2026

CVE-2023-6393Published

Quarkus: potential invalid reuse of context when @cacheresult on a uni is used

cve-program ·

https://access.redhat.com/downloads/content/package-browser/: quarkus-cache

CVSS 3.1 5.3Source modified 29 Sep 2026Recorded 23 Oct 2026

CVE-2026-94131Published

Joomla Extension - acymailing.com - Unauthenticated arbitrary file deletion in AcyMailing Enterprise extension < 11.1.0

cve-program ·

Vendor product: AcyMailing extension for Joomla

CVSS 4.0 8.3Source modified 29 Sep 2026Recorded 23 Oct 2026

CVE-2026-94132Published

Joomla Extension - acymailing.com - Remote Code Execution vulnerability in mailbox action feature in AcyMailing Enterprise extension < 11.1.0

cve-program ·

Vendor product: AcyMailing Enterprise extension for Joomla

CVSS 4.0 9.5Source modified 29 Sep 2026Recorded 23 Oct 2026

CVE-2026-12060Published

Hepta Platforms｜Heptabase - Exposed Dangerous

cve-program ·

Vendor product: Heptabase

CVSS 4.0 6.9 · CVSS 3.1 6.5Source modified 29 Sep 2026Recorded 23 Oct 2026

CVE-2025-62023Published

WordPress s2Member plugin <= 250905 - Remote Code Execution (RCE) vulnerability

cve-program ·

https://wordpress.org/plugins: s2member

CVSS 3.1 9.0Source modified 29 Sep 2026Recorded 23 Oct 2026

CVE-2026-12342Published

SailPoint IdentityIQ Improper Form Validation Vulnerability

cve-program ·

Vendor product: IdentityIQ

CVSS 3.1 9.6Source modified 29 Sep 2026Recorded 23 Oct 2026

CVE-2026-88805Published

Session Not Revoked Server-Side on Logout in Rancher

cve-program ·

Vendor product: Rancher

CVSS 3.1 8.1Source modified 29 Sep 2026Recorded 23 Oct 2026

CVE-2026-88808Published

Fleet agent copies downstream resources with cluster-admin privileges, allowing cross-namespace writes on downstream clusters

cve-program ·

Vendor product: Fleet

CVSS 3.1 8.8Source modified 29 Sep 2026Recorded 23 Oct 2026

CVE-2026-72668Published

Unintended Proxy or Intermediary ('Confused Deputy') in Kibana Leading to Privilege Escalation

cve-program ·

Vendor product: Kibana

CVSS 3.1 7.3Source modified 29 Sep 2026Recorded 23 Oct 2026

CVE-2026-82384Published

Apache Roller: Unauthenticated deserialization in the XML-RPC endpoint

cve-program ·

Vendor product: Apache Roller

CVSS 3.1 9.8Source modified 29 Sep 2026Recorded 23 Oct 2026

CVE-2026-87799Published

Arbitrary file write on LXD host via symlink in migration stream

cve-program ·

Vendor product: LXD

CVSS 3.1 9.9Source modified 29 Sep 2026Recorded 23 Oct 2026

CVE-2026-85526Published

Path traversal via Btrfs optimized-backup subvolumes[].path enables root file/dir manipulation in LXD

cve-program ·

Vendor product: LXD

CVSS 3.1 9.9Source modified 29 Sep 2026Recorded 23 Oct 2026

CVE-2026-78424Published

OS Command Injection in Packet-Capture (Sniffer) Filter leading to Remote Code Execution on Kubernetes Nodes

cve-program ·

Vendor product: neuvector

CVSS 3.1 8.8Source modified 29 Sep 2026Recorded 23 Oct 2026

CVE-2026-56792Published

Dell Rugged Control Center (RCC), versions prior to 5.2.206, contain an Improper Authorization vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges.

cve-program ·

Vendor product: Rugged Control Center (RCC)

CVSS 3.1 4.4Source modified 29 Sep 2026Recorded 23 Oct 2026

CVE-2026-81473Published

Dell Rugged Control Center (RCC), versions prior to 5.2.206, contain an Improper Authorization vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges.

cve-program ·

Vendor product: Rugged Control Center (RCC)

CVSS 3.1 8.1Source modified 29 Sep 2026Recorded 23 Oct 2026

CVE-2026-88771Published

A remote code execution vulnerability exists due to improper input validation, which can allow an unauthenticated attacker to execute arbitrary commands

cve-program ·

Vendor product: ADC · Vendor product: Gateway

CVSS 4.0 9.5Source modified 29 Sep 2026Recorded 23 Oct 2026

CVE-2026-97647Published

ningzichun student-management-system editLog.php authorization

cve-program ·

Vendor product: student-management-system

CVSS 4.0 6.9 · CVSS 3.1 5.3 · CVSS 3.0 5.3 · CVSS 2.0 5.0Source modified 29 Sep 2026Recorded 23 Oct 2026

CVE-2026-88389Published

Espruino 2v29 (commit bffc6d0) contains a NULL pointer dereference vulnerability in jslGetRawString() in src/jslex.c. Crafted raw/binary string input can cause the lexer to pass a NULL iterator target to jsvLockAgain(). In RELEASE/NO_ASSERT…

cve-program ·

Vendor product: n/a

Source modified 29 Sep 2026Recorded 23 Oct 2026

CVE-2026-86065Published

Klever-Go is the Go implementation of the Klever blockchain protocol. Prior to 1.7.20, the default-open GET /subscribe endpoint in network/api/websocket/routes.go accepts unauthenticated WebSocket clients with permissive origin handling, do…

nvd ·

CVSS 3.1 · [email protected] · Secondary 7.5Source modified 29 Sep 2026Recorded 25 Oct 2026

CVE-2026-97365Published

chonkie-inc littrs lib.rs mount path traversal

cve-program ·

Vendor product: littrs

CVSS 4.0 5.3 · CVSS 3.1 6.3 · CVSS 3.0 6.3 · CVSS 2.0 6.5Source modified 29 Sep 2026Recorded 23 Oct 2026

CVE-2026-48542Published

Krayin CRM 2.2.6 Stored Template Injection XSS via Product Name Field

cve-program ·

Vendor product: laravel-crm

CVSS 4.0 5.1 · CVSS 3.1 5.4Source modified 29 Sep 2026Recorded 23 Oct 2026

CVE-2026-97322Published

YunaiV/zhijiantianya ruoyi-vue-pro File Upload FileController.java cross site scripting

cve-program ·

Vendor product: ruoyi-vue-pro · Vendor product: ruoyi-vue-pro

CVSS 4.0 5.3 · CVSS 3.1 4.3 · CVSS 3.0 4.3 · CVSS 2.0 5.0Source modified 29 Sep 2026Recorded 23 Oct 2026

CVE-2026-57440Published

Mediawiki EmbedVideo Extension has stored XSS via malformed src url with $wgEmbedVideoRequireConsent disabled

cve-program ·

Vendor product: mediawiki-extensions-EmbedVideo

CVSS 3.1 7.5Source modified 29 Sep 2026Recorded 23 Oct 2026

CVE-2026-52850Published

Docmost: Broken access control in transclusion lookup API leaks sync-block content across private spaces

cve-program ·

Vendor product: docmost

CVSS 3.1 4.3Source modified 29 Sep 2026Recorded 23 Oct 2026

CVE-2026-77320Published

TREK: Public trip share link ignores the `share_map` permission server-side (client-enforced authorization → itinerary/location disclosure)

cve-program ·

Vendor product: TREK

CVSS 3.1 5.3Source modified 29 Sep 2026Recorded 23 Oct 2026

CVE-2026-93405Published

Mailspring: Stored XSS in attachment quick preview (unsanitized Markdown/DOCX/XLSX conversion)

cve-program ·

Vendor product: Mailspring

CVSS 3.1 6.1Source modified 29 Sep 2026Recorded 23 Oct 2026

CVE-2026-61741Published

http4s-scala-xml has an XML External Entity (XXE) processing issue

cve-program ·

Vendor product: http4s-scala-xml

CVSS 3.1 9.3Source modified 29 Sep 2026Recorded 23 Oct 2026

CVE-2026-61788Published

@bytebase/dbhub's read-only mode does not prevent database writes

cve-program ·

Vendor product: dbhub

CVSS 3.1 7.4Source modified 29 Sep 2026Recorded 23 Oct 2026

CVE-2026-61782Published

@rsdoctor/rspack-plugin has Unauthenticated HTTP API that Exposes Project Source Code and Build Metadata

cve-program ·

Vendor product: rsdoctor

CVSS 3.1 7.5Source modified 29 Sep 2026Recorded 23 Oct 2026

CVE-2026-57176Published

social-auth-core Vulnerable to Account Takeover via Identity Binding Flaw in Vend Backend

cve-program ·

Vendor product: social-core

CVSS 3.1 6.8Source modified 29 Sep 2026Recorded 23 Oct 2026

CVE-2026-91132Published

Discourse: Wildcard iframe origin allowlist bypass via authority separators

cve-program ·

Vendor product: discourse

CVSS 3.1 4.3Source modified 29 Sep 2026Recorded 23 Oct 2026

CVE-2026-91134Published

Discourse: Block post iframes whose encoded userinfo bypasses the allowed_iframes allowlist

cve-program ·

Vendor product: discourse

CVSS 3.1 5.4Source modified 29 Sep 2026Recorded 23 Oct 2026

A catalog match establishes published evidence, not applicability to your environment. Check resolved package dependencies, or open a Microsoft CVE for fixing KBs, releases and planning.