CVE ID :CVE-2026-114663 Published : Oct. 22, 2026, 1:43 a.m. | 23 minutes ago Description :Vyper 0.4.0b1 through 0.5.0b1 miscompiles unfoldable constants and omitted default arguments from imported modules, because parse_Name resolves their…
CVE-2026-114662 – Obot before 0.26.0 API Key Theft via CLI Login Token Request
CVE ID :CVE-2026-114662 Published : Oct. 22, 2026, 1:43 a.m. | 23 minutes ago Description :Obot before 0.26.0 contains an authentication bypass vulnerability in the CLI login flow that allows unauthenticated attackers to…
CVE-2026-114661 – OpenRemote 1.2.0 before 1.31.0 Missing Authorization in Gateway Tunnel Endpoints
CVE ID :CVE-2026-114661 Published : Oct. 22, 2026, 1:43 a.m. | 23 minutes ago Description :OpenRemote 1.2.0 before 1.31.0 contains a missing authorization vulnerability in GatewayServiceResource that allows any authenticated user to start,…
CVE-2026-114658 – Grav Login plugin 3.6.0 before 3.9.13 Privilege Escalation via login.invite
CVE ID :CVE-2026-114658 Published : Oct. 22, 2026, 1:43 a.m. | 23 minutes ago Description :Grav Login plugin from 3.6.0 before 3.9.13 contains a missing authorization vulnerability in the login.invite task that allows…
CVE-2026-114642 – Traefik before 2.11.58 and 3.7.14 TLS Config Bypass via NTLM/Kerberos Round Tripper
CVE ID :CVE-2026-114642 Published : Oct. 22, 2026, 1:43 a.m. | 23 minutes ago Description :Traefik 2.11.0 before 2.11.58 and 3.0.0 before 3.7.14 stores its NTLM/Kerberos backend round tripper in a client-connection slot…
CVE-2026-15723 – Improper Neutralization of Special Elements used in an LDAP Query (‘LDAP Injection’) in GitLab
CVE ID :CVE-2026-15723 Published : Oct. 21, 2026, 11:35 p.m. | 31 minutes ago Description :GitLab has remediated an issue in GitLab CE/EE affecting all versions from 10.1 before 19.3.6, 19.4 before 19.4.3,…
CVE-2026-76298 – Use of Hard-coded Cryptographic Key in the PostgreSQL Sidecar Service in Splunk Enterprise
CVE ID :CVE-2026-76298 Published : Oct. 21, 2026, 11:17 p.m. | 49 minutes ago Description :In Splunk Enterprise versions below 10.4.4 and 10.2.8, a user who does not hold the “admin” or “power”…
CVE-2026-76291 – Improper Access Control through Scheduled Search Safeguards in Splunk Enterprise
CVE ID :CVE-2026-76291 Published : Oct. 21, 2026, 11:17 p.m. | 49 minutes ago Description :In Splunk Enterprise versions below 10.4.4, 10.2.8, 10.0.11, and 9.4.16, a user that holds a role with the…
CVE-2026-103090 – Unauthenticated Biscuit Credential Disclosure via GET /enroll/status in Google OSS Agent Mesh (SAM)
CVE ID :CVE-2026-103090 Published : Oct. 21, 2026, 11:17 p.m. | 49 minutes ago Description :Missing Authentication for Critical Function (CWE-306) and Insufficiently Protected Credentials (CWE-522) in the control plane enrollment status handler…
CVE-2026-91403 – Vulnerability in the Oracle Java SE, Oracle GraalV
CVE ID :CVE-2026-91403 Published : Oct. 21, 2026, 10:16 p.m. | 1 hour, 50 minutes ago Description :Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle…