CVE ID :CVE-2026-105115 Published : Oct. 3, 2026, 2:16 p.m. | 9 hours, 9 minutes ago Description :OpenAM before 16.1.3 contains an unauthenticated arbitrary class instantiation vulnerability in the legacy JAX-RPC SOAP interface that…
CVE-2026-105105 – Unauthenticated ZeroMQ command/telemetry bus in AIT-Core allows remote spacecraft command injection and telemetry exfiltration
CVE ID :CVE-2026-105105 Published : Oct. 3, 2026, 12:16 p.m. | 11 hours, 8 minutes ago Description :CWE-306: Missing Authentication for Critical Function in the ait.core.server telemetry and command broker (ait-server) in NASA-AMMOS AIT-Core…
CVE-2026-85515 – OpenPGP message truncation not reported, bypassing the SEIPDv1 integrity check
CVE ID :CVE-2026-85515 Published : Oct. 3, 2026, 9:17 a.m. | 14 hours, 8 minutes ago Description :In Bouncy Castle for Java before 1.86, a truncated OpenPGP encrypted message was accepted with no error…
CVE-2026-105080 – ConvertX Arbitrary Code Execution
CVE ID :CVE-2026-105080 Published : Oct. 3, 2026, 12:39 a.m. | 43 minutes ago Description :In ConvertX before 0.19.0, converters/calibre.ts does not block recipe files, and instead passes them to the ebook-convert program…
CVE-2026-104476 – Backdrop CMS before 1.35.1 Information Disclosure via Configuration Export Archive
CVE ID :CVE-2026-104476 Published : Oct. 3, 2026, 12:16 a.m. | 1 hour, 6 minutes ago Description :Backdrop CMS before 1.35.1 contains an information disclosure vulnerability that allows unauthenticated attackers to retrieve configuration export…
CVE-2026-104433 – Mooncake before 0.3.12 Out-of-Bounds Read via P2P Handshake readString
CVE ID :CVE-2026-104433 Published : Oct. 3, 2026, 12:16 a.m. | 1 hour, 6 minutes ago Description :Mooncake transfer engine before 0.3.12 contains an out-of-bounds read vulnerability in the readString function of include/common.h that…
CVE-2026-73802 – Gitea act_runner Container Sandbox Escape Vulnerability
CVE ID :CVE-2026-73802 Published : Oct. 2, 2026, 11:18 p.m. | 2 hours, 4 minutes ago Description :### Summary act_runner appends workflow-controlled `jobs..container.options` directly to the Docker HostConfig for the job container. When runner…
CVE-2026-84411 – MikroTik RouterOS Integer Underflow
CVE ID :CVE-2026-84411 Published : Oct. 2, 2026, 11:16 p.m. | 2 hours, 6 minutes ago Description :The web management service in affected RouterOS versions contains an integer underflow in its HTTP request body…
CVE-2026-97363 – Monta monta.app Improper Restriction of Excessive Authentication Attempts
CVE ID :CVE-2026-97363 Published : Oct. 2, 2026, 10:16 p.m. | 1 hour, 5 minutes ago Description :The WebSocket Application Programming Interface lacks restrictions on the number of authentication requests. This absence of rate…
CVE-2026-95102 – Monta monta.app Missing Authentication for Critical Function
CVE ID :CVE-2026-95102 Published : Oct. 2, 2026, 10:16 p.m. | 1 hour, 5 minutes ago Description :WebSocket endpoints lack proper authentication mechanisms, enabling attackers to impersonate charging stations. As a result, attackers can…