CVE ID :CVE-2026-110385 Published : Oct. 14, 2026, 1:17 a.m. | 15 minutes ago Description :A remote code execution vulnerability in ONLYOFFICE Document Server versions before10.0.0 allows an authenticated attacker with a valid…
CVE-2026-108473 – Improper Authentication and Credential Exposure in Multiple TP-Link Kasa Devices
CVE ID :CVE-2026-108473 Published : Oct. 14, 2026, 1:17 a.m. | 15 minutes ago Description :Multiple Kasa devices contain an improper authentication vulnerability in the local device-management protocol. An unauthenticated adjacent attacker may…
CVE-2026-92817 – Inductive Automation Ignition Software Incorrect Authorization
CVE ID :CVE-2026-92817 Published : Oct. 13, 2026, 11:22 p.m. | 10 minutes ago Description :The Ignition Perspective module does not properly validate session privileges when determining Designer-level access. An authenticated user with…
CVE-2026-97381 – Legacy Update ActiveX control accepts unauthorized hosting origins
CVE ID :CVE-2026-97381 Published : Oct. 13, 2026, 10:19 p.m. | 1 hour, 13 minutes ago Description :Legacy Update is a tool for activating and installing updates on legacy Windows PCs. Legacy Update 1.12.0…
CVE-2026-95634 – CAI Content Credentials | Server-Side Request Forgery (SSRF) (CWE-918)
CVE ID :CVE-2026-95634 Published : Oct. 13, 2026, 10:19 p.m. | 1 hour, 13 minutes ago Description :CAI Content Credentials is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege…
CVE-2026-96956 – SQL Server Elevation of Privilege Vulnerability
CVE ID :CVE-2026-96956 Published : Oct. 13, 2026, 9:20 p.m. | 2 hours, 12 minutes ago Description :Stack-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network. Severity:…
CVE-2026-95639 – Photoshop Desktop | Incorrect Authorization (CWE-863)
CVE ID :CVE-2026-95639 Published : Oct. 13, 2026, 9:19 p.m. | 2 hours, 12 minutes ago Description :Photoshop Desktop is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in…
CVE-2026-89113 – SQL Injection vulnerability in SAP Commerce Cloud (OOTB Code)
CVE ID :CVE-2026-89113 Published : Oct. 13, 2026, 1:16 a.m. | 15 minutes ago Description :SAP Commerce Cloud does not sufficiently validate certain user-supplied input before it is incorporated into a database query….
CVE-2026-89111 – OAuth2 SSRF vulnerability in SAP Cloud SDK for Python
CVE ID :CVE-2026-89111 Published : Oct. 13, 2026, 1:16 a.m. | 15 minutes ago Description :The SAP Cloud SDK for Python contains an OAuth2 SSRF vulnerability affecting multi-tenant BTP applications. An attacker who…
CVE-2026-89110 – Broken Access Control in SAP NetWeaver Visual Composer
CVE ID :CVE-2026-89110 Published : Oct. 13, 2026, 1:16 a.m. | 15 minutes ago Description :SAP NetWeaver Visual Composer does not perform sufficient authorization checks in certain portal functionality. An attacker with low…