| CVE ID | Title | Vendor | Product | Severity | CVSS Score | Published At | AI Analysis |
|---|---|---|---|---|---|---|---|
| CVE-2026-62146 | Cri-o: cri-o: sandbox state poisoning via pod annotations may expose runtime socket | Red Hat | Red Hat OpenShift Container Platform 4 | High | 7.8 | 2026-09-30 11:49:20 | Deep Dive |
| CVE-2026-10726 | Cato Windows SDP Client arbitrary file disclosure due to improper TLS certificate validation | Cato Networks | SDP Client | Medium | 6.8 | 2026-09-30 11:38:32 | Deep Dive |
| CVE-2026-10739 | Cato Networks SDP Client for Windows is vulnerable to Local Privilege Escalation | Cato Networks | SDP Client | High | 8.5 | 2026-09-30 11:37:51 | Deep Dive |
| CVE-2026-103012 | CVE-2026-103012 | Anthropic | @anthropic-ai/claude-code | Low | 2.0 | 2026-09-30 11:30:38 | Deep Dive |
| CVE-2026-103114 | OS4ED openSIS-Classic Assignment Management Endpoint Assignments.php DBQuery_assignment sql injection | OS4ED | openSIS-Classic | Medium | 6.3 | 2026-09-30 11:15:09 | Deep Dive |
| CVE-2026-76992 | Uncontrolled Memory Allocation in CODESYS Gateway Client | CODESYS | Development System 3 | High | 7.5 | 2026-09-30 11:07:46 | Deep Dive |
| CVE-2026-13720 | Editor can forge file-provisioning provenance on dashboards via the dashboard API | Grafana | Grafana OSS | Medium | 5.4 | 2026-09-30 11:06:38 | Deep Dive |
| CVE-2026-13719 | Alert rules in restricted folders disclosed via the alert rules list API | Grafana | Grafana Enterprise | Medium | 4.3 | 2026-09-30 11:06:38 | Deep Dive |
| CVE-2026-96342 | WordPress WPMobile.App plugin <= 11.83 - Sensitive Data Exposure vulnerability | Amauri.IO | WPMobile.App | Medium | 6.9 | 2026-09-30 11:00:18 | Deep Dive |
| CVE-2026-103113 | OS4ED openSIS-Classic General Information Tab Student.php save action sql injection | OS4ED | openSIS-Classic | Medium | 4.7 | 2026-09-30 10:30:09 | Deep Dive |
| CVE-2026-103239 | MISP Tag Collection Save Allows Privilege Escalation via Sibling Model Injection | MISP | MISP | High | 8.6 | 2026-09-30 10:16:19 | Deep Dive |
| CVE-2026-103237 | MISP: Nested Model Alias Key Bypasses Sanitization to Modify Cross-Tenant Rows | MISP | MISP | High | 8.3 | 2026-09-30 09:56:36 | Deep Dive |
| CVE-2026-77185 | Apache MINA SSHD: Asynchronous authentication can bypass signature verification | Apache Software Foundation | Apache MINA SSHD | Critical | 9.1 | 2026-09-30 09:47:04 | Deep Dive |
| CVE-2026-93994 | Apache MINA SSHD: Repeated-publickey policy bypass on server | Apache Software Foundation | Apache MINA SSHD | High | 8.1 | 2026-09-30 09:45:33 | Deep Dive |
| CVE-2026-94053 | Apache MINA SSHD: LDAP injection in sshd-ldap | Apache Software Foundation | Apache MINA SSHD | Critical | 9.1 | 2026-09-30 09:43:47 | Deep Dive |
| CVE-2026-10764 | Information disclosure in BVMS 4.5 up to 12.3 | IQSIGHT | BVMS | High | 8.7 | 2026-09-30 09:43:45 | Deep Dive |
| CVE-2026-93995 | Apache MINA SSHD: Remote execution of JGit "archive -o=file.zip" can write file on the server | Apache Software Foundation | Apache MINA SSHD | Medium | 6.5 | 2026-09-30 09:38:48 | Deep Dive |
| CVE-2026-93996 | Apache MINA SSHD: Memory exhaustion DoS via unbounded SCP command line read | Apache Software Foundation | Apache MINA SSHD | Medium | 6.5 | 2026-09-30 09:37:43 | Deep Dive |
| CVE-2026-94002 | Apache MINA SSHD: Memory exhaustion in SFTP client via unsolicited SFTP replies | Apache Software Foundation | Apache MINA SSHD | High | 7.5 | 2026-09-30 09:37:02 | Deep Dive |
| CVE-2026-94029 | Apache MINA SSHD: Memory exhaustion in SFTP v6 check-file-name/check-file-handle extension | Apache Software Foundation | Apache MINA SSHD | Medium | 6.5 | 2026-09-30 09:35:52 | Deep Dive |