| CVE ID | Title | Vendor | Product | Severity | CVSS Score | Published At | AI Analysis |
|---|---|---|---|---|---|---|---|
| CVE-2026-103766 | ClipBucket v5 through 5.5.3-#197 SQL Injection via ads_manager.php delete Parameter | MacWarrior | clipbucket-v5 | High | 7.2 | 2026-10-01 23:20:00 | Deep Dive |
| CVE-2026-103764 | Mooncake transfer engine before 0.3.13 Unauthenticated Arbitrary Memory Read/Write via TCP Transport | kvcache-ai | Mooncake | Critical | 9.8 | 2026-10-01 23:19:58 | Deep Dive |
| CVE-2026-103765 | Mooncake through 0.3.13.post1 Missing Authentication in HTTP Metadata Server | kvcache-ai | Mooncake | Critical | 9.4 | 2026-10-01 23:19:58 | Deep Dive |
| CVE-2026-103761 | Mooncake transfer engine through 0.3.13.post1 Memory Exhaustion via Unbounded Notify Queue | kvcache-ai | Mooncake | High | 7.5 | 2026-10-01 22:53:06 | Deep Dive |
| CVE-2026-103760 | Mooncake transfer engine through 0.3.13.post1 Denial of Service via P2P Handshake Daemon Response Write | kvcache-ai | Mooncake | Medium | 5.9 | 2026-10-01 22:53:05 | Deep Dive |
| CVE-2025-71427 | Office-PowerPoint-MCP-Server through 2.0.7 Path Traversal via save_presentation and manage_image | GongRzhe | Office-PowerPoint-MCP-Server | Medium | 6.8 | 2026-10-01 22:53:05 | Deep Dive |
| CVE-2026-18397 🧪 | SConnect: Native Host Unauthenticated Remote Code Execution Vulnerability | Thales | SConnect | Critical | 9.4 | 2026-10-01 21:49:42 | Deep Dive |
| CVE-2026-86344 | 389-ds-base: 389-ds-base: unauthenticated worker-thread-pool exhaustion via completed-operation-then-incomplete-pdu connection requeue | Red Hat | Red Hat Directory Server 11 | High | 7.5 | 2026-10-01 21:29:56 | Deep Dive |
| CVE-2026-27873 | Johnson Controls EasyIO FG <2.0b52 硬编码凭据漏洞 | Johnson Controls | EasyIO FG | Medium | 5.6 | 2026-10-01 21:27:33 | Deep Dive |
| CVE-2026-64893 | Johnson Controls EasyIO NEO <3.3b25 明文传输漏洞 | Johnson Controls | EasyIO NEO | High | 7.3 | 2026-10-01 21:25:26 | Deep Dive |
| CVE-2026-64892 | Johnson Controls Easy IO Neo 3.3b63前敏感信息泄露 | Johnson Controls | Easy IO Neo | Medium | 6.3 | 2026-10-01 21:23:34 | Deep Dive |
| CVE-2026-104356 | PictShare < 3.7.1 Predictable Delete Code via rand() | HaschekSolutions | pictshare | Medium | 5.9 | 2026-10-01 21:21:46 | Deep Dive |
| CVE-2026-34494 | Johnson Controls Neo Series MVP2 (<3.3b63) On-Chip调试接口数据收集漏洞 | Johnson Controls | Neo Series MVP2 | High | 7.2 | 2026-10-01 21:20:55 | Deep Dive |
| CVE-2026-34493 | Johnson Controls EasyIO FS32 <3.3b63 芯片调试接口漏洞 | Johnson Controls | EasyIO FS32 | High | 7.2 | 2026-10-01 21:18:55 | Deep Dive |
| CVE-2026-71449 | Johnson Controls EasyIO FS32 硬编码密钥漏洞 | Johnson Controls | EasyIO FS32 | Critical | 9.3 | 2026-10-01 21:16:58 | Deep Dive |
| CVE-2026-71448 | EasyIO FS32 <3.0b63 不安全资源初始化认证滥用漏洞 | Johnson Controls | EasyIO FS32 | Medium | 5.6 | 2026-10-01 21:15:22 | Deep Dive |
| CVE-2026-71454 | CAPEC-63 3.0b63之前版本存在XSS漏洞 | CWE-79 - Cross-site Scripting | CAPEC-63 | Medium | 5.8 | 2026-10-01 21:13:17 | Deep Dive |
| CVE-2026-71453 | Johnson Controls EasyIO FS32 (<3.0b63) 路径遍历漏洞 | Johnson Controls | EasyIO FS32 | Medium | 5.6 | 2026-10-01 21:10:09 | Deep Dive |
| CVE-2026-104051 | PictShare < 3.7.1 Sensitive Information Disclosure via info API | HaschekSolutions | pictshare | High | 8.2 | 2026-10-01 21:08:38 | Deep Dive |
| CVE-2026-71452 | Johnson Controls EasyIO FS32 3.0b63以下命令注入漏洞 | Johnson Controls | EasyIO FS32 | High | 7.2 | 2026-10-01 21:06:21 | Deep Dive |