CVE ID :CVE-2026-85749 Published : Oct. 28, 2026, 11:17 p.m. | 1 hour, 7 minutes ago Description :MailWatch for MailScanner is a web-based front-end to MailScanner. Prior to 1.2.27, any authenticated MailWatch user, including…
CVE-2026-118579 – D-Link DIR-505 Web Management CGI secmark1524.cgi main backdoor
CVE ID :CVE-2026-118579 Published : Oct. 28, 2026, 11:17 p.m. | 1 hour, 7 minutes ago Description :A weakness has been identified in D-Link DIR-505 1.10B02. The impacted element is the function main of…
CVE-2026-93851 – Path traversal in Mattermost Agents plugin mention reminder allows plugin replacement via crafted post
CVE ID :CVE-2026-93851 Published : Oct. 28, 2026, 10:17 p.m. | 2 hours, 7 minutes ago Description :Mattermost versions 11.9.x Severity: 8.0 | HIGH Visit the link for more details, such as CVSS details,…
CVE-2026-61572 – AVideo-Encoder: unauthenticated full-response server-side request forgery
CVE ID :CVE-2026-61572 Published : Oct. 28, 2026, 10:17 p.m. | 2 hours, 7 minutes ago Description :AVideo is a video-sharing Platform. Before the initial remediation attempt in 8.1.0, `url_get_contents` in `objects/functions.php` accepts caller-controlled…
CVE-2026-61567 – AVideo-Encoder: unauthenticated command execution through streamer login trust
CVE ID :CVE-2026-61567 Published : Oct. 28, 2026, 10:17 p.m. | 2 hours, 7 minutes ago Description :AVideo is a video-sharing Platform. Prior to 8.1.0, the live-streaming endpoint `view/videosListToLive.php` accepts an attacker-named streamer in…
CVE-2026-58256 – GRR vulnerable to Remote Code Execution Via PHP Code Injection
CVE ID :CVE-2026-58256 Published : Oct. 27, 2026, 11:17 p.m. | 1 hour, 7 minutes ago Description :GRR is a resource management and reservation application. Prior to the advisory-reported fixed version 4.5.0, an administrator…
CVE-2026-58255 – Cronicle: Non-admin uid/gid injection in create_event/update_event → run-as-arbitrary-user (incl. root) — sibling of CVE-2026-39401
CVE ID :CVE-2026-58255 Published : Oct. 27, 2026, 11:17 p.m. | 1 hour, 7 minutes ago Description :Cronicle is a multi-server task scheduler and runner, with a web based front-end UI. Prior to 0.9.121,…
CVE-2026-58205 – GRR has a Reflected XSS issue
CVE ID :CVE-2026-58205 Published : Oct. 27, 2026, 11:17 p.m. | 1 hour, 7 minutes ago Description :GRR is a resource management and reservation application. Prior to version 4.5.0, `maj.php` reflects the `forcemaj` parameter…
CVE-2026-57191 – Asterisk: Stack buffer overflow in MWI NOTIFY Message-Account parsing
CVE ID :CVE-2026-57191 Published : Oct. 27, 2026, 10:17 p.m. | 2 hours, 6 minutes ago Description :Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1,…
CVE-2026-85898 – Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
CVE ID :CVE-2026-85898 Published : Oct. 27, 2026, 9:19 p.m. | 3 hours, 4 minutes ago Description :Access of resource using incompatible type (‘type confusion’) in Microsoft Edge (Chromium-based) allows an unauthorized attacker to…