Total
8762 CVE
| CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
|---|---|---|---|---|---|
| CVE-2026-25712 | 2026-10-25 | N/A | 7.5 HIGH | ||
| Gitea versions before 1.25.5 have insufficient visibility checks in organization permission APIs for hidden members and private organizations. | |||||
| CVE-2026-22555 | 2026-10-25 | N/A | 8.1 HIGH | ||
| Gitea versions before 1.26.0 allow API users to fork a repository into an organization without first passing the CanCreateOrgRepo check, which can expose organization secrets. | |||||
| CVE-2026-26292 | 2026-10-25 | N/A | 9.8 CRITICAL | ||
| Gitea versions before 1.25.5 do not use the migration HTTP transport for LFS push and sync mirror operations, bypassing the configured migration transport protections for those LFS requests. | |||||
| CVE-2026-20744 | 2026-10-25 | N/A | 9.8 CRITICAL | ||
| The charging station websocket endpoint accepts connections without proper authentication, which could lead to privilege escalation. | |||||
| CVE-2026-15475 | 2026-10-25 | 4.3 MEDIUM | 5.3 MEDIUM | ||
| A weakness has been identified in MiniTool Partition Wizard up to 13.6. The affected element is an unknown function in the library pwdrvio.sys of the component Signed Kernel Driver. This manipulation causes improper access controls. The attack can only be executed locally. The exploit has been made available to the public and could be used for attacks. Upgrading to version 13.9 is sufficient to fix this issue. The affected component should be upgraded. The vendor was contacted early about this disclosure. | |||||
| CVE-2026-24451 | 2026-10-25 | N/A | 7.5 HIGH | ||
| Gitea 1.26.2 allows fork synchronization to continue after a parent repository changes from public to private, exposing data to a fork that should no longer be authorized. | |||||
| CVE-2026-56335 | 2026-10-25 | N/A | 6.5 MEDIUM | ||
| Capgo before 12.128.2 contains an authorization bypass vulnerability where write-scoped API keys can directly mutate protected channel configuration fields through PostgREST by exploiting a null authentication check in the immutability trigger. Attackers with write API keys can modify sensitive channel attributes such as public, allow_emulator, and security-related flags outside intended application routes. | |||||
| CVE-2026-58282 | 1 Microsoft | 1 Edge Chromium | 2026-10-25 | N/A | 8.1 HIGH |
| Improper access control in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network. | |||||
| CVE-2026-20896 | 2026-10-25 | N/A | 9.8 CRITICAL | ||
| Gitea Docker image versions up to and including 1.26.2 use REVERSE_PROXY_TRUSTED_PROXIES=* by default, allowing any source IP to impersonate a user when reverse-proxy authentication headers such as X-WEBAUTH-USER are enabled. | |||||
| CVE-2026-20706 | 2026-10-25 | N/A | 9.1 CRITICAL | ||
| Gitea versions up to and including 1.26.1 allow repository archive downloads to bypass token scope checks on the web archive download endpoint. | |||||
| CVE-2026-27660 | 2026-10-25 | N/A | 7.5 HIGH | ||
| Gitea versions before 1.25.5 allow draft release data or attachments to be accessed without the required write permission. | |||||
| CVE-2026-57855 | 2026-10-24 | N/A | 8.8 HIGH | ||
| Cockpit CMS contains a missing authorization vulnerability in the Bucket file storage API (/system/buckets/api). The api() method in modules/System/Controller/Buckets.php executes bucket commands (ls, upload, removefiles, rename, createfolder) without performing any ACL or role check. Any authenticated user, regardless of role, can perform all bucket operations on any named bucket, including buckets intended for admin use only. | |||||
| CVE-2026-15518 | 2026-10-24 | 5.8 MEDIUM | 4.7 MEDIUM | ||
| A vulnerability has been found in AREA 17 Twill CMS up to 3.6.0. The impacted element is the function FileLibraryController::storeFile of the file src/Http/Controllers/Admin/FileLibraryController.php of the component Media Library Insert Page. Such manipulation of the argument qqfilename leads to unrestricted upload. The attack can be executed remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. | |||||
| CVE-2026-15627 | 2026-10-24 | 4.0 MEDIUM | 4.3 MEDIUM | ||
| A vulnerability was identified in nextlevelbuilder GoClaw up to 3.13.3-beta.3. This vulnerability affects the function handleNavigate of the file pkg/browser/tool.go. Such manipulation of the argument args.targetUrl leads to information disclosure. The attack may be performed from remote. The exploit is publicly available and might be used. | |||||
| CVE-2026-15539 | 2026-10-24 | 5.8 MEDIUM | 4.7 MEDIUM | ||
| A security vulnerability has been detected in SourceCodester Online Book Store System 1.0. Impacted is an unknown function of the file /admin/index.php?page=books of the component Book Image Upload Feature. Such manipulation leads to unrestricted upload. The attack may be performed from remote. The exploit has been disclosed publicly and may be used. | |||||
| CVE-2026-15677 | 2026-10-24 | 7.5 HIGH | 7.3 HIGH | ||
| A weakness has been identified in code-projects Online Job Portal 1.0. This affects an unknown function of the file /JobSeekerInsert.php. Executing a manipulation of the argument txtFile can lead to unrestricted upload. The attack can be executed remotely. The exploit has been made available to the public and could be used for attacks. | |||||
| CVE-2026-20150 | 1 Cisco | 2 Roomos, Roomos Cloud | 2026-10-24 | N/A | 8.8 HIGH |
| As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco RoomOS engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-20150 are related to improper access control that are grouped under the Common Weakness Enumeration (CWE) Pillar CWE-284. | |||||
| CVE-2026-47164 | 2026-10-24 | N/A | 7.7 HIGH | ||
| Vaultwarden is a Bitwarden-compatible server written in Rust. Prior to 1.36.0, Vaultwarden's SSO login flow checked the IdP email_verified claim only for new-user creation and not when SSO_SIGNUPS_MATCH_EMAIL=true linked an IdP identity to an existing local account, allowing an attacker-controlled IdP identity asserting a victim email address to bind to and authenticate as that account. This issue is fixed in version 1.36.0. | |||||
| CVE-2026-55014 | 1 Microsoft | 1 Remote Help | 2026-10-24 | N/A | 7.8 HIGH |
| Improper access control in Windows Remote Help Defense allows an authorized attacker to elevate privileges locally. | |||||
| CVE-2026-58617 | 1 Microsoft | 1 365 Copilot | 2026-10-24 | N/A | 8.1 HIGH |
| Improper access control in Microsoft 365 Copilot for iOS allows an unauthorized attacker to elevate privileges over a network. | |||||