CVE ID :CVE-2026-77931 Published : Oct. 15, 2026, 1:24 a.m. | 8 minutes ago Description :MoviePilot through 3.1.5 contains a command injection vulnerability that allows attackers to execute arbitrary OS commands by embedding…
CVE-2026-0993 – SODOLA SL902-SWTGW124AS Buffer Overflow DoS via Multipart Boundary Parser
CVE ID :CVE-2026-0993 Published : Oct. 15, 2026, 1:19 a.m. | 13 minutes ago Description :SODOLA SL902-SWTGW124AS firmware before 200.2.12 contains a buffer overflow vulnerability that allows unauthenticated remote attackers to cause a…
CVE-2026-110872 – Nodemailer 3.0.0 before 10.0.10 Denial of Service via SMTP Reply Parsing
CVE ID :CVE-2026-110872 Published : Oct. 14, 2026, 11:17 p.m. | 15 minutes ago Description :Nodemailer from 3.0.0 before 10.0.10 contains a quadratic complexity denial of service vulnerability in the SMTP client reply…
CVE-2026-110869 – Nodemailer 3.0.0 before 10.0.13 ReDoS via SMTP AUTH Mechanism Detection Regexes
CVE ID :CVE-2026-110869 Published : Oct. 14, 2026, 11:17 p.m. | 15 minutes ago Description :Nodemailer 3.0.0 before 10.0.13 has a regular expression denial of service in SMTPConnection._actionEHLO, whose four AUTH mechanism detection…
CVE-2026-110868 – Renovate before 44.79.0 SSRF via HTTP Preset URLs and customDatasources
CVE ID :CVE-2026-110868 Published : Oct. 14, 2026, 11:17 p.m. | 15 minutes ago Description :Renovate before 44.79.0 contains a server-side request forgery vulnerability that allows users to make the shared HTTP client…
CVE-2026-110867 – Renovate before 44.60.1 allowedEnv Allowlist Bypass via Shared Preset
CVE ID :CVE-2026-110867 Published : Oct. 14, 2026, 11:17 p.m. | 15 minutes ago Description :Renovate before 44.60.1 contains an allowlist bypass vulnerability that allows repositories to set restricted environment variables by placing…
CVE-2026-110864 – Better Auth 1.5.0-beta.12 before 1.7.7 Authentication Bypass via OAuth Proxy
CVE ID :CVE-2026-110864 Published : Oct. 14, 2026, 11:17 p.m. | 15 minutes ago Description :Better Auth from 1.5.0-beta.12 before 1.7.7 contains an authentication bypass vulnerability in the OAuth Proxy plugin that allows…
CVE-2026-110385 – ONLYOFFICE Document Server Remote Code Execution Vulnerability
CVE ID :CVE-2026-110385 Published : Oct. 14, 2026, 1:17 a.m. | 15 minutes ago Description :A remote code execution vulnerability in ONLYOFFICE Document Server versions before10.0.0 allows an authenticated attacker with a valid…
CVE-2026-108473 – Improper Authentication and Credential Exposure in Multiple TP-Link Kasa Devices
CVE ID :CVE-2026-108473 Published : Oct. 14, 2026, 1:17 a.m. | 15 minutes ago Description :Multiple Kasa devices contain an improper authentication vulnerability in the local device-management protocol. An unauthenticated adjacent attacker may…
CVE-2026-92817 – Inductive Automation Ignition Software Incorrect Authorization
CVE ID :CVE-2026-92817 Published : Oct. 13, 2026, 11:22 p.m. | 10 minutes ago Description :The Ignition Perspective module does not properly validate session privileges when determining Designer-level access. An authenticated user with…