CVE ID :CVE-2026-75941 Published : Oct. 15, 2026, 11:17 p.m. | 16 minutes ago Description :A potential vulnerability was reported in the Lenovo Legion Zone application, distributed exclusively in the Chinese market, that…
CVE-2026-111366 – cool-admin-midway through 8.0.0 Authorization Bypass via /admin/sys/user Endpoints
CVE ID :CVE-2026-111366 Published : Oct. 15, 2026, 10:19 p.m. | 1 hour, 14 minutes ago Description :cool-admin-midway through 8.0.0 contains an authorization bypass vulnerability that allows department-limited admins to manage users outside their…
CVE-2026-111356 – MacCMS v10 through 2026.1000.4056 Account Takeover via Password Recovery Brute-Force
CVE ID :CVE-2026-111356 Published : Oct. 15, 2026, 10:19 p.m. | 1 hour, 14 minutes ago Description :MacCMS v10 through 2026.1000.4056 does not limit attempts on the six-digit password recovery code, allowing unauthenticated attackers…
CVE-2026-111352 – ThinkCMF through 8.0.1 Incorrect Authorization in Admin REST API
CVE ID :CVE-2026-111352 Published : Oct. 15, 2026, 10:19 p.m. | 1 hour, 14 minutes ago Description :ThinkCMF through 8.0.1 contains an incorrect authorization vulnerability in RestAdminBaseController that allows restricted backend administrators to call…
CVE-2026-111347 – go-ldap-admin through 0.6.2 Hard-Coded RSA Private Key via /base/decryptpwd
CVE ID :CVE-2026-111347 Published : Oct. 15, 2026, 10:19 p.m. | 1 hour, 14 minutes ago Description :go-ldap-admin through 0.6.2 embeds a hard-coded RSA private key, published in the public repository, that protects encrypted…
CVE-2026-77931 – MoviePilot 3.1.5 Command Injection via ExecuteCommandTool
CVE ID :CVE-2026-77931 Published : Oct. 15, 2026, 1:24 a.m. | 8 minutes ago Description :MoviePilot through 3.1.5 contains a command injection vulnerability that allows attackers to execute arbitrary OS commands by embedding…
CVE-2026-0993 – SODOLA SL902-SWTGW124AS Buffer Overflow DoS via Multipart Boundary Parser
CVE ID :CVE-2026-0993 Published : Oct. 15, 2026, 1:19 a.m. | 13 minutes ago Description :SODOLA SL902-SWTGW124AS firmware before 200.2.12 contains a buffer overflow vulnerability that allows unauthenticated remote attackers to cause a…
CVE-2026-110872 – Nodemailer 3.0.0 before 10.0.10 Denial of Service via SMTP Reply Parsing
CVE ID :CVE-2026-110872 Published : Oct. 14, 2026, 11:17 p.m. | 15 minutes ago Description :Nodemailer from 3.0.0 before 10.0.10 contains a quadratic complexity denial of service vulnerability in the SMTP client reply…
CVE-2026-110869 – Nodemailer 3.0.0 before 10.0.13 ReDoS via SMTP AUTH Mechanism Detection Regexes
CVE ID :CVE-2026-110869 Published : Oct. 14, 2026, 11:17 p.m. | 15 minutes ago Description :Nodemailer 3.0.0 before 10.0.13 has a regular expression denial of service in SMTPConnection._actionEHLO, whose four AUTH mechanism detection…
CVE-2026-110868 – Renovate before 44.79.0 SSRF via HTTP Preset URLs and customDatasources
CVE ID :CVE-2026-110868 Published : Oct. 14, 2026, 11:17 p.m. | 15 minutes ago Description :Renovate before 44.79.0 contains a server-side request forgery vulnerability that allows users to make the shared HTTP client…