CVE ID :CVE-2026-58256 Published : Oct. 27, 2026, 11:17 p.m. | 1 hour, 7 minutes ago Description :GRR is a resource management and reservation application. Prior to the advisory-reported fixed version 4.5.0, an administrator…
CVE-2026-58255 – Cronicle: Non-admin uid/gid injection in create_event/update_event → run-as-arbitrary-user (incl. root) — sibling of CVE-2026-39401
CVE ID :CVE-2026-58255 Published : Oct. 27, 2026, 11:17 p.m. | 1 hour, 7 minutes ago Description :Cronicle is a multi-server task scheduler and runner, with a web based front-end UI. Prior to 0.9.121,…
CVE-2026-58205 – GRR has a Reflected XSS issue
CVE ID :CVE-2026-58205 Published : Oct. 27, 2026, 11:17 p.m. | 1 hour, 7 minutes ago Description :GRR is a resource management and reservation application. Prior to version 4.5.0, `maj.php` reflects the `forcemaj` parameter…
CVE-2026-57191 – Asterisk: Stack buffer overflow in MWI NOTIFY Message-Account parsing
CVE ID :CVE-2026-57191 Published : Oct. 27, 2026, 10:17 p.m. | 2 hours, 6 minutes ago Description :Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1,…
CVE-2026-85898 – Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
CVE ID :CVE-2026-85898 Published : Oct. 27, 2026, 9:19 p.m. | 3 hours, 4 minutes ago Description :Access of resource using incompatible type (‘type confusion’) in Microsoft Edge (Chromium-based) allows an unauthorized attacker to…
CVE-2026-116819 – OpenPanel before 3.0.0 Credential Disclosure via notification.rules Query
CVE ID :CVE-2026-116819 Published : Oct. 26, 2026, 11:05 p.m. | 1 hour, 17 minutes ago Description :OpenPanel before 3.0.0 contains an information disclosure vulnerability that allows read-level project members to obtain plaintext integration…
CVE-2026-116818 – OpenPanel before 3.0.0 Unauthenticated ClickHouse SQL Injection via /live/visitors WebSocket
CVE ID :CVE-2026-116818 Published : Oct. 26, 2026, 11:05 p.m. | 1 hour, 17 minutes ago Description :OpenPanel before 3.0.0 contains an unauthenticated ClickHouse sql injection vulnerability that allows remote attackers to inject SQL…
CVE-2026-116811 – OpenPanel before 3.0.0 Sandbox Escape RCE via Webhook JavaScript Template
CVE ID :CVE-2026-116811 Published : Oct. 26, 2026, 11:05 p.m. | 1 hour, 17 minutes ago Description :OpenPanel before 3.0.0 contains a sandbox escape vulnerability in the js-runtime validator that allows a project member…
CVE-2026-116748 – Transmission 4.0.0 before 4.1.3 Permissive CORS Leaks RPC Anti-CSRF Token
CVE ID :CVE-2026-116748 Published : Oct. 26, 2026, 10:16 p.m. | 2 hours, 6 minutes ago Description :Transmission 4.0.0 before 4.1.3 contains a permissive CORS vulnerability in handle_request() in rpc-server.cc that exposes the X-Transmission-Session-Id…
CVE-2026-116747 – Kener 3.0.0 before 4.1.10 Authentication Bypass via Hardcoded Fallback JWT Secret
CVE ID :CVE-2026-116747 Published : Oct. 26, 2026, 10:16 p.m. | 2 hours, 6 minutes ago Description :Kener 3.0.0 before 4.1.10 contains an authentication bypass vulnerability that allows unauthenticated attackers to forge session tokens…