CVE ID :CVE-2026-92450 Published : Oct. 22, 2026, 11:20 p.m. | 47 minutes ago Description :The authentication framework used by affected Kiloview E3 NDI encoder firmware signs session JSON Web Tokens using an…
CVE-2026-110825 – Kiloview E3 NDI Encoder Missing Authentication for Critical Function
CVE ID :CVE-2026-110825 Published : Oct. 22, 2026, 11:18 p.m. | 49 minutes ago Description :The ONVIF device service on affected Kiloview E3 NDI encoder firmware accepts hostname, DNS, and NTP configuration write…
CVE-2026-110243 – Kiloview E3 NDI Encoder OS Command Injection
CVE ID :CVE-2026-110243 Published : Oct. 22, 2026, 11:18 p.m. | 49 minutes ago Description :The network management service on affected Kiloview E3 NDI encoder firmware fails to validate the network interface name…
CVE-2026-107861 – Kiloview E3 NDI Encoder OS Command Injection
CVE ID :CVE-2026-107861 Published : Oct. 22, 2026, 11:18 p.m. | 49 minutes ago Description :The system control service on affected Kiloview E3 NDI encoder firmware fails to sanitize the hostname parameter accepted…
CVE-2026-97785 – AAD App Proxy Elevation of Privilege Vulnerability
CVE ID :CVE-2026-97785 Published : Oct. 22, 2026, 10:20 p.m. | 1 hour, 47 minutes ago Description :Improper authentication in AAD App Proxy allows an unauthorized attacker to elevate privileges over a network. Severity:…
CVE-2026-114663 – Vyper 0.4.0b1 through 0.5.0b1 Name Shadowing of Imported Constants and Default Arguments
CVE ID :CVE-2026-114663 Published : Oct. 22, 2026, 1:43 a.m. | 23 minutes ago Description :Vyper 0.4.0b1 through 0.5.0b1 miscompiles unfoldable constants and omitted default arguments from imported modules, because parse_Name resolves their…
CVE-2026-114662 – Obot before 0.26.0 API Key Theft via CLI Login Token Request
CVE ID :CVE-2026-114662 Published : Oct. 22, 2026, 1:43 a.m. | 23 minutes ago Description :Obot before 0.26.0 contains an authentication bypass vulnerability in the CLI login flow that allows unauthenticated attackers to…
CVE-2026-114661 – OpenRemote 1.2.0 before 1.31.0 Missing Authorization in Gateway Tunnel Endpoints
CVE ID :CVE-2026-114661 Published : Oct. 22, 2026, 1:43 a.m. | 23 minutes ago Description :OpenRemote 1.2.0 before 1.31.0 contains a missing authorization vulnerability in GatewayServiceResource that allows any authenticated user to start,…
CVE-2026-114658 – Grav Login plugin 3.6.0 before 3.9.13 Privilege Escalation via login.invite
CVE ID :CVE-2026-114658 Published : Oct. 22, 2026, 1:43 a.m. | 23 minutes ago Description :Grav Login plugin from 3.6.0 before 3.9.13 contains a missing authorization vulnerability in the login.invite task that allows…
CVE-2026-114642 – Traefik before 2.11.58 and 3.7.14 TLS Config Bypass via NTLM/Kerberos Round Tripper
CVE ID :CVE-2026-114642 Published : Oct. 22, 2026, 1:43 a.m. | 23 minutes ago Description :Traefik 2.11.0 before 2.11.58 and 3.0.0 before 3.7.14 stores its NTLM/Kerberos backend round tripper in a client-connection slot…