Total
3618 CVE
| CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
|---|---|---|---|---|---|
| CVE-2026-100308 | 2026-09-30 | N/A | 7.8 HIGH | ||
| Deserialization of untrusted data in the model loading component in Amazon GluonTS before 0.17.0 might allow context-dependent attackers to execute arbitrary operating system commands with the privileges of the loading process via a crafted serialized model directory. To remediate this issue, users should upgrade to version 0.17.0 or later. | |||||
| CVE-2026-100845 | 1 Project-monai | 1 Monai | 2026-09-30 | N/A | 7.8 HIGH |
| MONAI before 1.6.0 contains an unsafe deserialization vulnerability in the NumpyReader class that unconditionally uses numpy.load with allow_pickle=True when loading .npy and .npz files. Attackers can craft malicious .npy files with pickle payloads that execute arbitrary code when loaded through MONAI's standard data pipeline. | |||||
| CVE-2026-103040 | 2026-09-30 | N/A | 9.8 CRITICAL | ||
| LightLLM through 1.2.0 contains a remote code execution vulnerability in the router profiler service when started with --enable_profiling flag. The service exposes an unauthenticated RPyC server with pickle deserialization enabled, allowing attackers to execute arbitrary code by sending crafted serialized objects to the profiler command queue. | |||||
| CVE-2026-97248 | 2026-09-30 | N/A | 9.8 CRITICAL | ||
| Unauthenticated PHP Object Injection in Booking Activities <= 1.18.7.1 versions. | |||||
| CVE-2026-96833 | 2026-09-30 | N/A | 7.2 HIGH | ||
| Editor PHP Object Injection in Ultimate Addons for Contact Form 7 <= 3.5.51 versions. | |||||
| CVE-2026-96832 | 2026-09-30 | N/A | 7.2 HIGH | ||
| Shop manager PHP Object Injection in Content Egg <= 6.3.1 versions. | |||||
| CVE-2026-96831 | 2026-09-30 | N/A | 8.8 HIGH | ||
| Contributor PHP Object Injection in Themify Builder <= 7.8.1 versions. | |||||
| CVE-2026-96344 | 2026-09-30 | N/A | 7.2 HIGH | ||
| Custom role PHP Object Injection in eCommerce Product Catalog <= 3.6.0 versions. | |||||
| CVE-2026-96343 | 2026-09-30 | N/A | 7.2 HIGH | ||
| Custom role PHP Object Injection in WP ERP <= 1.17.9 versions. | |||||
| CVE-2026-95531 | 2026-09-30 | N/A | 8.8 HIGH | ||
| Subscriber PHP Object Injection in Conversational Forms for ChatBot <= 1.5.0 versions. | |||||
| CVE-2026-94683 | 2026-09-30 | N/A | 8.8 HIGH | ||
| Contributor PHP Object Injection in DesignSetGo <= 2.8.0 versions. | |||||
| CVE-2026-94678 | 2026-09-30 | N/A | 8.8 HIGH | ||
| Contributor PHP Object Injection in Go Live Update Urls <= 7.0.8 versions. | |||||
| CVE-2026-94677 | 2026-09-30 | N/A | 7.2 HIGH | ||
| Shop manager PHP Object Injection in Kadence WooCommerce Email Designer <= 1.5.19.1 versions. | |||||
| CVE-2026-94122 | 2026-09-30 | N/A | 7.2 HIGH | ||
| Editor PHP Object Injection in Responsive Slider Gallery <= 1.5.5 versions. | |||||
| CVE-2026-94121 | 2026-09-30 | N/A | 8.8 HIGH | ||
| Contributor PHP Object Injection in 10Web Booster – Website speed optimization, Cache & Page Speed optimizer <= 2.33.6 versions. | |||||
| CVE-2026-94076 | 2026-09-30 | N/A | 8.8 HIGH | ||
| Contributor PHP Object Injection in SEO Plugin by Squirrly SEO <= 14.2.5 versions. | |||||
| CVE-2026-93771 | 2026-09-30 | N/A | 7.2 HIGH | ||
| Shop manager PHP Object Injection in Cost of Goods for WooCommerce <= 3.5.2 versions. | |||||
| CVE-2026-93651 | 2026-09-30 | N/A | 7.2 HIGH | ||
| Author PHP Object Injection in Minimum and Maximum Quantity for WooCommerce <= 2.1.2 versions. | |||||
| CVE-2026-93624 | 2026-09-30 | N/A | 7.2 HIGH | ||
| Shop manager PHP Object Injection in Music Player for WooCommerce <= 1.9.1 versions. | |||||
| CVE-2026-81867 | 2026-09-30 | N/A | N/A | ||
| A Deserialization of Untrusted Data vulnerability in the JavaScript Task in Google Cloud Application Integration versions prior to 2026-06-28 on Google Cloud Platform allows an authenticated user with standard permissions to run arbitrary code on the shared production servers using a specially crafted script bypassing param guards. This vulnerability was patched on 28 June 2026, and no customer action is needed. | |||||