Search
63 CVEs · published 2026-10-29 to 2026-10-29, Critical severity
CVEs (63)
Showing 1–25 of 63
| CVE ID | Severity | Patch | CVSS | Published ↓ | Description |
|---|---|---|---|---|---|
| CVE-2023-22793 | CRITICAL | — | 2026-10-29 | A vulnerability allowing an unauthenticated attacker to perform remote code execution (RCE) on servers running the Veeam Virtualization Extensions service of Veeam Manageme… | |
| CVE-2026-61707 | CRITICAL | Patched | 9.0 | 2026-10-29 | SOCFortress CoPilot focuses on providing a single pane of glass for all your security operations needs. Prior to 0.1.76, in the reported deployment, case-report templates u… |
| CVE-2026-61645 | CRITICAL | 9.1 | 2026-10-29 | Docat is a tool for hosting versioned static documentation. In the affected implementation, an arbitrary file upload vulnerability in the `Upload API` arises because the AP… | |
| CVE-2026-103093 | CRITICAL | Patched | — | 2026-10-29 | ServiceNow has remediated a sandbox escape security issue that was identified in the ServiceNow AI Platform. This vulnerability could enable an authenticated user with the … |
| CVE-2026-118769 | CRITICAL | Patched | — | 2026-10-29 | Botan is a C++ cryptography library. From 2.1.0 until 3.13.0, the Botan C API function botan_block_cipher_block_size converted a size_t block size to int without a bounds c… |
| CVE-2026-118762 | CRITICAL | Patched | 9.3 | 2026-10-29 | Monkeytype is a minimalistic and customizable typing test. Prior to 26.43.0, the .github/workflows/fix-formatting.yml workflow runs on pull_request_target with repository w… |
| CVE-2026-107058 | CRITICAL | 9.8 | 2026-10-29 | An issue in Shelter versionCode 445 allows attackers to register their own auth_key and execute a takeover of another user's binder service API and preference state. | |
| CVE-2026-93680 | CRITICAL | Patched | 9.8 | 2026-10-29 | IBM Langflow OSS 1.0.0 through 1.12.8 could allow a remote attacker to bypass security restrictions due to improper authentication. |
| CVE-2026-90868 | CRITICAL | 9.9 | 2026-10-29 | An OS command injection vulnerability in Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows could allow arbitrary command execution under ce… | |
| CVE-2026-90866 | CRITICAL | 9.1 | 2026-10-29 | A path traversal vulnerability in Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows could allow a delegated Host Administrator to access lo… | |
| CVE-2026-90865 | CRITICAL | 9.0 | 2026-10-29 | An OS command injection vulnerability in Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows could allow arbitrary command execution with ele… | |
| CVE-2026-90864 | CRITICAL | 9.1 | 2026-10-29 | A path traversal vulnerability in Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows could allow a delegated Host Administrator to access or… | |
| CVE-2026-90863 | CRITICAL | 9.1 | 2026-10-29 | Missing authorization in the administrative interface of Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows could allow a delegated Host Adm… | |
| CVE-2026-84295 | CRITICAL | 10.0 | 2026-10-29 | Improper authentication in Progress Software WS_FTP Server versions prior to 2024.0.6 and 2025.0.3 on Windows could allow an unauthenticated remote attacker to access sensi… | |
| CVE-2026-62131 | CRITICAL | 9.8 | 2026-10-29 | Unauthenticated PHP Object Injection in Zoho Flow <= 2.14.5 versions. | |
| CVE-2026-62018 | CRITICAL | 9.8 | 2026-10-29 | Unauthenticated PHP Object Injection in Gunslinger <= 1.11 versions. | |
| CVE-2026-62017 | CRITICAL | 9.8 | 2026-10-29 | Unauthenticated PHP Object Injection in Good Homes <= 1.3.13 versions. | |
| CVE-2026-62016 | CRITICAL | 9.8 | 2026-10-29 | Unauthenticated PHP Object Injection in Gamic <= 1.19 versions. | |
| CVE-2026-62015 | CRITICAL | 9.8 | 2026-10-29 | Unauthenticated PHP Object Injection in Gamezone <= 1.1.11 versions. | |
| CVE-2026-62014 | CRITICAL | 9.8 | 2026-10-29 | Unauthenticated PHP Object Injection in EmojiNation <= 1.0.12 versions. | |
| CVE-2026-62013 | CRITICAL | 9.8 | 2026-10-29 | Unauthenticated PHP Object Injection in Edge Decor <= 2.9 versions. | |
| CVE-2026-62012 | CRITICAL | 9.8 | 2026-10-29 | Unauthenticated PHP Object Injection in Coinpress <= 1.0.15 versions. | |
| CVE-2026-62011 | CRITICAL | 9.8 | 2026-10-29 | Unauthenticated PHP Object Injection in Bonbon <= 1.11 versions. | |
| CVE-2026-62010 | CRITICAL | 9.8 | 2026-10-29 | Unauthenticated PHP Object Injection in Avventure <= 1.1.12 versions. | |
| CVE-2026-62009 | CRITICAL | 9.8 | 2026-10-29 | Unauthenticated PHP Object Injection in Filmax <= 1.1.11 versions. |