CVE ID :CVE-2026-124060 Published : Nov. 7, 2026, 9:17 p.m. | 1 hour, 57 minutes ago Description :A vulnerability was detected in TOTOLINK CA300-PoE 6.2c.884. Affected by this issue is the function UploadCustomModule of…
CVE-2026-124059 – TOTOLINK CA300-PoE cstecgi.cgi setWiFiWdsAddConfig buffer overflow
CVE ID :CVE-2026-124059 Published : Nov. 7, 2026, 7:17 p.m. | 3 hours, 56 minutes ago Description :A security vulnerability has been detected in TOTOLINK CA300-PoE 6.2c.884. Affected by this vulnerability is the function…
CVE-2026-124058 – TOTOLINK CA300-PoE cstecgi.cgi setWiFiRepeaterConfig buffer overflow
CVE ID :CVE-2026-124058 Published : Nov. 7, 2026, 7:17 p.m. | 3 hours, 56 minutes ago Description :A weakness has been identified in TOTOLINK CA300-PoE 6.2c.884. Affected is the function setWiFiRepeaterConfig of the file…
CVE-2026-124057 – TOTOLINK CA300-PoE cstecgi.cgi setWiFiMultipleConfig buffer overflow
CVE ID :CVE-2026-124057 Published : Nov. 7, 2026, 6:17 p.m. | 4 hours, 56 minutes ago Description :A security flaw has been discovered in TOTOLINK CA300-PoE 6.2c.884. This impacts the function setWiFiMultipleConfig of the…
CVE-2026-124318 – Treeio through 2.0 Insecure Deserialization RCE via Admin-Editable Pickle Fields
CVE ID :CVE-2026-124318 Published : Nov. 7, 2026, 3:17 p.m. | 7 hours, 56 minutes ago Description :Treeio through 2.0 contains an insecure deserialization vulnerability in UpdateRecord.get_format_strings and ModuleSetting.loads that allows staff users to…
CVE-2026-109469 – Entra Device Registration Elevation of Privilege Vulnerability
CVE ID :CVE-2026-109469 Published : Nov. 6, 2026, 11:17 p.m. | 1 hour, 55 minutes ago Description :Authorization bypass through user-controlled key in Entra Device Registration allows an unauthorized attacker to elevate privileges over…
CVE-2026-68935 – Chartbrew: SSRF to Internal Network via User-Controlled allowPrivateHost Flag on API Connections
CVE ID :CVE-2026-68935 Published : Nov. 6, 2026, 10:17 p.m. | 54 minutes ago Description :Chartbrew is an open-source web application for creating charts from databases and APIs. In versions 4.8.5 through 5.2.2,…
CVE-2026-59104 – UgCS server HCI authentication bypass with empty credentials
CVE ID :CVE-2026-59104 Published : Nov. 6, 2026, 10:17 p.m. | 54 minutes ago Description :UgCS server before 6.2 contains an authentication bypass in the HCI protocol login handler (LoginHandler) exposed on TCP…
CVE-2026-50240 – Pipelines-as-code: openshift-pipelines-operator-rh: pipelines-as-code: repository users can trigger namespace edit-equivalent execution via auto-provisioned pipeline serviceaccount
CVE ID :CVE-2026-50240 Published : Nov. 6, 2026, 10:17 p.m. | 54 minutes ago Description :A flaw was found in OpenShift Pipelines-as-Code (PAC). PAC does not verify whether the creator of a Repository…
CVE-2026-86044 – JupyterLab Desktop: One-Click Jupyter Server Token Leak leading to Remote Code Execution
CVE ID :CVE-2026-86044 Published : Nov. 6, 2026, 9:17 p.m. | 1 hour, 55 minutes ago Description :JupyterLab Desktop is the cross-platform desktop application for JupyterLab. Prior to 4.6.2-1, JupyterLab Desktop exposed getServerInfo to…