CVE ID :CVE-2026-108983 Published : Oct. 19, 2026, 12:51 a.m. | 1 hour, 11 minutes ago Description :A vulnerability is in Web Server default connection ports under the process name GeoWebServer.exe . Severity: 9.8…
CVE-2026-112051 – Xinference through 4.0.1 Path Traversal via model_name in Custom Model Registration
CVE ID :CVE-2026-112051 Published : Oct. 18, 2026, 1:16 p.m. | 10 hours, 46 minutes ago Description :Xinference through 4.0.1 contains a path traversal vulnerability on Windows that allows unauthenticated attackers to write and…
CVE-2026-112021 – snac2 before 2.93 Heap-Based Buffer Overflow via JSON Parser _xs_json_load_lexer()
CVE ID :CVE-2026-112021 Published : Oct. 18, 2026, 12:17 p.m. | 11 hours, 45 minutes ago Description :snac2 before 2.93 contains a heap-based buffer overflow vulnerability in _xs_json_load_lexer() that allows unauthenticated remote attackers to…
CVE-2026-112006 – OpenTelemetry opentelemetry-exporter-otlp-proto-http 1.5.0 before 1.45.0 Improper Certificate Validation
CVE ID :CVE-2026-112006 Published : Oct. 18, 2026, 12:17 p.m. | 11 hours, 45 minutes ago Description :OpenTelemetry opentelemetry-exporter-otlp-proto-http 1.5.0 before 1.45.0 contains an improper certificate validation vulnerability that disables TLS verification when OTEL_EXPORTER_OTLP_CERTIFICATE…
CVE-2026-112005 – WhoDB 0.104.0 before 0.135.0 Arbitrary File Read/Write via DuckDB Query Editor
CVE ID :CVE-2026-112005 Published : Oct. 18, 2026, 12:17 p.m. | 11 hours, 45 minutes ago Description :WhoDB 0.104.0 before 0.135.0 contains a path traversal vulnerability that allows remote attackers to read and write…
CVE-2026-112001 – ProjectSend 2.0.0 before 2.7.0 Incorrect Authorization via Users API Token Abilities
CVE ID :CVE-2026-112001 Published : Oct. 18, 2026, 12:17 p.m. | 11 hours, 45 minutes ago Description :ProjectSend 2.0.0 before 2.7.0 contains an incorrect authorization vulnerability that allows restricted API token holders to change…
CVE-2026-111927 – Coder before 2.35.4 Credential Theft via Workspace Proxy Hostname Prefix Match
CVE ID :CVE-2026-111927 Published : Oct. 17, 2026, 7:16 p.m. | 4 hours, 18 minutes ago Description :Coder before 2.29.20, 2.33.0 before 2.33.12, 2.34.0 before 2.34.8, and 2.35.0 before 2.35.4 contains an improper hostname…
CVE-2026-111924 – Fleet before 4.83.0 Denial of Service via Unbounded Gzip Decompression
CVE ID :CVE-2026-111924 Published : Oct. 17, 2026, 7:16 p.m. | 4 hours, 18 minutes ago Description :Fleet before 4.83.0 contains a denial of service vulnerability that allows unauthenticated attackers to exhaust server memory…
CVE-2026-111923 – Fleet before 4.89.0 Unauthenticated DoS via Apple MDM Enrollment Plist Parsing
CVE ID :CVE-2026-111923 Published : Oct. 17, 2026, 7:16 p.m. | 4 hours, 18 minutes ago Description :Fleet before 4.89.0 contains an unbounded recursion vulnerability in Apple MDM enrollment property list parsing that allows…
CVE-2026-111911 – phpMyFAQ 4.0.0 before 4.1.9 Authentication Bypass via WebAuthn Credential Injection
CVE ID :CVE-2026-111911 Published : Oct. 17, 2026, 7:16 p.m. | 4 hours, 18 minutes ago Description :phpMyFAQ 4.0.0 before 4.1.9 contains an authentication bypass vulnerability where WebAuthn registration endpoints attach credentials to any…