Index
Search
Search the public record. Drafts and scheduled notes are not included.
news
Windows 11 Health Service flaw CVE-2026-85884 allows local privilege escalation
Microsoft fixed CVE-2026-85884 on 13 October 2026. A missing authentication check in the Windows Health and Optimized Experiences Service lets a local attacker gain privileges on Windows 11. CVSS 3.1 7.8 (Important, scored by Microsoft). Third-party PoC claimed. Not in CISA KEV.
Published 5h ago
news
Splunk Enterprise Patroni flaw CVE-2026-76268 allows unauthenticated RCE
Splunk fixed CVE-2026-76268 on 7 October 2026. Unauthenticated network access to the Patroni REST API on search head cluster members can lead to command execution. CVSS 3.1 9.8 (Critical, scored by Splunk). Fixed in 10.2.7 and 10.4.3. A third-party PoC is claimed. Not in CISA KEV.
Published 7h ago
CVE-2026-93479
NGINX map regex capture heap buffer overflow in worker process
RCE
Published 16h ago
CVE-2026-97205
NGINX SSI with AIO use-after-free in worker process
RCE
Published 16h ago
news
GitLab CI regex compiler RCE is CVE-2026-97229
GitLab’s 12 October 2026 critical patch release fixes CVE-2026-97229, a CVSS 10.0 integer overflow in the CI/CD regular expression compiler that can, under certain conditions, allow unauthenticated code execution. Fixed in 19.2.8, 19.3.5, and 19.4.2. GitLab.com and Dedicated already patched. Not in CISA KEV.
Published 27h ago
CVE-2026-85884
Windows Health and Optimized Experiences Service elevation of privilege
LPE
Published 2d ago
news
Forminator Forms unauthenticated file upload is CVE-2026-15748
Wordfence disclosed CVE-2026-15748 in Forminator Forms through 1.56.1: forged Select-field data can override upload configuration and bypass file-type checks, enabling unauthenticated executable uploads and possible RCE. Fixed in 1.56.2. CVSS 9.8. About 600,000 active installs. Not in CISA KEV.
Published 2d ago
CVE-2026-97229
GitLab CI/CD regex compiler unauthenticated code execution
RCE
Published 3d ago
news
WatchGuard Endpoint PSKMAD auth bypass is CVE-2026-13043
WatchGuard Endpoint Security for Windows before protection 8.00.26.0012 has a missing authentication flaw in its PSKMAD kernel memory driver. A local user can forge the driver's access handshake and disclose kernel and process memory. CVSS 4.0 9.3 (WatchGuard). Fixed in 8.00.26.0012. Public PoC exists. Not in CISA KEV.
Published 4d ago
research
Telegram Desktop one-click file theft is CVE-2026-107181
A researcher write-up shows how one click on a crafted external link could make Telegram Desktop before 7.2.9 send local files, including session data, to an attacker chat. CVSS 4.0 8.6 (VulnCheck). Fixed in 7.2.9 without a vendor advisory. Public PoC write-up exists. Not in CISA KEV; no known exploitation.
Published 6d ago
CVE-2026-66082
DolphinScheduler cross-project schedule and workflow authorization bypass
Auth bypass
Published 7d ago
news
Atlassian arbitrary file access is CVE-2026-21589
Atlassian’s 5 October 2026 advisory for CVE-2026-21589 covers unauthenticated reads of known paths under the web root across Bitbucket, Confluence, Jira, Bamboo, Crowd, Crucible, and Fisheye Data Center lines. CVSS 4.0 9.3. Public detector exists. Not in CISA KEV. Atlassian has not confirmed Data Center exploitation in the advisory.
Published 8d ago
news
Smarty cache injection is CVE-2026-82531
GHSA-3w63-v7pm-cq9x / CVE-2026-82531: Smarty before 4.5.8 and 5.x before 5.8.5 can write forged SmartyNocache content from assigned data into regenerated PHP caches during extends inheritance, enabling RCE on include. CVSS 4.0 9.2. Public PoC exists. Fixed in 4.5.8 and 5.8.5. Not in CISA KEV.
Published 8d ago
CVE-2026-107181
Telegram Desktop IPC record injection leading to local file exfiltration
Info disclosure
Published 8d ago
CVE-2026-14911
ASUS router XSS via crafted URL against authenticated session
XSS
Published 8d ago
CVE-2026-19396
ASUS RT-BE57 IFTTT pairing token from predictable PRNG seed
Auth bypass
Published 8d ago
CVE-2026-76268
Splunk Enterprise Patroni REST API missing authentication RCE
RCE
Published 8d ago
CVE-2026-82531
Smarty template cache code injection via extends inheritance
RCE
Published 9d ago
CVE-2026-21589
Atlassian Data Center unauthenticated arbitrary file access
Info disclosure
Published 9d ago
news
DevKit Pro admin takeover is CVE-2026-14378
Wordfence disclosed CVE-2026-14378 in DevKit Pro for WordPress through 2.3.0: unauthenticated administrator session takeover via the user-switch revert flow. CVSS 9.8. A public PoC exists under a misnamed repository. Not in CISA KEV. CVE-2026-19660 is a different Divi Membership bug.
Published 10d ago
news
Goose recipe command execution is CVE-2026-85623
VulnCheck published CVE-2026-85623 / GHSA-rh2p-fw5h-rc3m for Goose: recipe stdio extensions and retry checks can run shell commands the unicode recipe scan does not inspect. CVSS 3.1 8.8. Goose 1.52.0 ships a Desktop consent-before-session fix. A public PoC exists. Not in CISA KEV.
Published 10d ago
CVE-2026-104711
OGNL injection in the legacy RESTful action mapper
RCE
Published 10d ago
CVE-2026-14378
DevKit Pro unauthenticated admin takeover via revert_switch
Auth bypass
Published 13d ago
CVE-2026-13043
WatchGuard Endpoint Security PSKMAD missing authentication
Info disclosure
Published 1 Oct 2026
CVE-2026-10747
IBM MQ pre-auth heap overflow in protocol message processing
RCE
Published 18 Sept 2026
CVE-2026-10858
IBM MQ authenticated heap underflow on multi-segment messages
RCE
Published 18 Sept 2026
CVE-2026-85623
Goose recipe stdio extensions run commands without scan coverage
RCE
Published 4 Sept 2026
CVE-2026-15748
Forminator Forms unauthenticated arbitrary file upload
RCE
Published 18 Aug 2026