CVE ID :CVE-2026-111927 Published : Oct. 17, 2026, 7:16 p.m. | 4 hours, 18 minutes ago Description :Coder before 2.29.20, 2.33.0 before 2.33.12, 2.34.0 before 2.34.8, and 2.35.0 before 2.35.4 contains an improper hostname…
CVE-2026-111924 – Fleet before 4.83.0 Denial of Service via Unbounded Gzip Decompression
CVE ID :CVE-2026-111924 Published : Oct. 17, 2026, 7:16 p.m. | 4 hours, 18 minutes ago Description :Fleet before 4.83.0 contains a denial of service vulnerability that allows unauthenticated attackers to exhaust server memory…
CVE-2026-111923 – Fleet before 4.89.0 Unauthenticated DoS via Apple MDM Enrollment Plist Parsing
CVE ID :CVE-2026-111923 Published : Oct. 17, 2026, 7:16 p.m. | 4 hours, 18 minutes ago Description :Fleet before 4.89.0 contains an unbounded recursion vulnerability in Apple MDM enrollment property list parsing that allows…
CVE-2026-111911 – phpMyFAQ 4.0.0 before 4.1.9 Authentication Bypass via WebAuthn Credential Injection
CVE ID :CVE-2026-111911 Published : Oct. 17, 2026, 7:16 p.m. | 4 hours, 18 minutes ago Description :phpMyFAQ 4.0.0 before 4.1.9 contains an authentication bypass vulnerability where WebAuthn registration endpoints attach credentials to any…
CVE-2026-111909 – phpMyFAQ before 4.1.9 Missing Authorization Allows Superadmin Deletion via deleteUser API
CVE ID :CVE-2026-111909 Published : Oct. 17, 2026, 7:16 p.m. | 4 hours, 18 minutes ago Description :phpMyFAQ before 4.1.9 contains a missing authorization vulnerability in the deleteUser() API that allows authenticated non-superadmin users…
CVE-2026-111823 – Mage OSS OAuth Authentication Bypass Vulnerability
CVE ID :CVE-2026-111823 Published : Oct. 16, 2026, 11:16 p.m. | 17 minutes ago Description :Mage OSS through 0.9.80 before 76c4f46 can proceed with session creation upon encountering an unknown OAuth provider. Severity:…
CVE-2026-96627 – Arcane: Delegated users:update permission allows admin account takeover via password reset (no privilege-hierarchy check)
CVE ID :CVE-2026-96627 Published : Oct. 16, 2026, 10:18 p.m. | 1 hour, 15 minutes ago Description :Arcane is an interface for managing Docker containers, images, networks, and volumes. Prior to 2.6.0, UpdateUser in…
CVE-2026-96626 – Arcane: Container-registry credential exfiltration via URL repoint + test to attacker host
CVE ID :CVE-2026-96626 Published : Oct. 16, 2026, 10:18 p.m. | 1 hour, 15 minutes ago Description :Arcane is an interface for managing Docker containers, images, networks, and volumes. Prior to 2.5.0, UpdateRegistry and…
CVE-2026-49410 – OpenHuman /auth/telegram CSRF allows attacker-controlled session implantation
CVE ID :CVE-2026-49410 Published : Oct. 16, 2026, 10:17 p.m. | 1 hour, 17 minutes ago Description :OpenHuman is an open-source agent harness available as a desktop application and Rust library. Versions before 0.56.0…
CVE-2026-96620 – Claude Agent SDK: Argument Injection via resume Option Allows Arbitrary Command Execution
CVE ID :CVE-2026-96620 Published : Oct. 16, 2026, 8:18 p.m. | 3 hours, 15 minutes ago Description :Claude Agent SDK is a Python SDK for Claude Code. Prior to 0.2.121, the resume option is…