CVE ID :CVE-2026-110176 Published : Oct. 31, 2026, 1:17 a.m. | 44 minutes ago Description :The File Force Download module for Drupal 7 implements hook_file_download() to add a Content-Disposition header when a file…
CVE-2026-117656 – Unverified Sign in with Apple callback parameter can override verified ID token claims
CVE ID :CVE-2026-117656 Published : Oct. 31, 2026, 12:16 a.m. | 1 hour, 44 minutes ago Description :Acceptance of Extraneous Untrusted Data With Trusted Data vulnerability in the Sign in with Apple strategy in…
CVE-2026-63396 – Coop has a data leak via unauthenticated GraphQL Query.allOrgs
CVE ID :CVE-2026-63396 Published : Oct. 30, 2026, 11:17 p.m. | 44 minutes ago Description :Coop is an open source review and moderation tool from ROOST. Prior to 1.0.0, an unauthenticated actor can…
CVE-2026-63393 – OpenSearch SQL plugin: Unsafe cursor deserialization permits server code execution
CVE ID :CVE-2026-63393 Published : Oct. 30, 2026, 11:17 p.m. | 44 minutes ago Description :OpenSearch SQL supports querying OpenSearch data using SQL and Piped Processing Language. In the 2.x line from 2.8.0.0…
CVE-2026-63378 – TAKO AI Agent for Okta: Authenticated Python execution through validator bypass
CVE ID :CVE-2026-63378 Published : Oct. 30, 2026, 11:17 p.m. | 44 minutes ago Description :TAKO AI Agent for Okta is a local-first AI agent that helps Okta administrators query tenant data using…
CVE-2026-63377 – TAKO AI Agent for Okta: Unauthenticated first-run administrator takeover
CVE ID :CVE-2026-63377 Published : Oct. 30, 2026, 11:17 p.m. | 44 minutes ago Description :TAKO AI Agent for Okta is a local-first AI agent that helps Okta administrators query tenant data using…
CVE-2026-63346 – Refitter: C# source injection through OpenAPI header parameter names
CVE ID :CVE-2026-63346 Published : Oct. 30, 2026, 11:17 p.m. | 44 minutes ago Description :Refitter is a tool for generating a C# REST API client using the Refit library. Prior to 2.1.2,…
CVE-2026-92744 – Delinea Privilege Manager agent unauthenticated remote code execution vulnerability
CVE ID :CVE-2026-92744 Published : Oct. 29, 2026, 11:17 p.m. | 43 minutes ago Description :Under certain conditions, privilege manager agent allows a remote unauthenticated attacker to execute arbitrary code as LocalSystem. Severity:…
CVE-2026-107239 – Veeam Management Pack for Microsoft System Center Remote Code Execution Vulnerability
CVE ID :CVE-2026-107239 Published : Oct. 29, 2026, 11:16 p.m. | 43 minutes ago Description :A vulnerability allowing a member of the Veeam Virtualization Extensions Users group to perform remote code execution (RCE)…
CVE-2026-107238 – Veeam Management Pack for Microsoft System Center Collector Remote Code Execution
CVE ID :CVE-2026-107238 Published : Oct. 29, 2026, 11:16 p.m. | 43 minutes ago Description :A vulnerability allowing an authenticated domain user to perform remote code execution (RCE) as the LocalSystem account on…