| CVE ID | Title | Vendor | Product | Severity | CVSS Score | Published At | AI Analysis |
|---|---|---|---|---|---|---|---|
| CVE-2025-53837 | org.xwiki.rendering:xwiki-rendering-xml has an Eval Injection issue | xwiki | xwiki-rendering | Critical | 9.9 | 2026-09-18 15:07:40 | Deep Dive |
| CVE-2026-93606 | vm2 before 3.12.1 Sandbox Escape via Promise Symbol.species | patriksimek | vm2 | Critical | 10.0 | 2026-09-18 13:20:15 | Deep Dive |
| CVE-2026-93605 | vm2 NodeVM before 3.12.1 Remote Code Execution via child_process | patriksimek | vm2 | Critical | 10.0 | 2026-09-18 13:20:14 | Deep Dive |
| CVE-2026-93603 | vm2 before 3.12.1 Sandbox Escape RCE via Non-Strict Host Function | patriksimek | vm2 | Critical | 10.0 | 2026-09-18 13:20:13 | Deep Dive |
| CVE-2026-13639 | 群晖DSM多版本登录熵不足漏洞 | Synology | DiskStation Manager (DSM) | Critical | 9.8 | 2026-09-18 08:21:28 | Deep Dive |
| CVE-2026-13684 | Synology DSM SCGI不当编码致任意文件读写 | Synology | DiskStation Manager (DSM) | Critical | 9.8 | 2026-09-18 08:19:14 | Deep Dive |
| CVE-2026-67100 | HCL BigFix Service Management is affected by multiple security vulnerabilities. | HCL Software | HCL BigFix Service Management | Critical | 9.8 | 2026-09-18 07:53:03 | Deep Dive |
| CVE-2026-67101 | HCL BigFix Service Management is affected by multiple security vulnerabilities. | HCL Software | HCL BigFix Service Management | Critical | 9.3 | 2026-09-18 07:50:11 | Deep Dive |
| CVE-2026-93467 | HGiga｜OAKlouds - Insecure Deserialization | HGiga | OAKlouds-custom_page-2.0 | Critical | 9.8 | 2026-09-18 02:17:26 | Deep Dive |
| CVE-2026-85878 | Azure Database for PostgreSQL Elevation of Privilege Vulnerability | Microsoft | Azure HorizonDB | Critical | 9.9 | 2026-09-17 23:04:47 | Deep Dive |
| CVE-2026-69843 | Microsoft Fabric Elevation of Privilege Vulnerability | Microsoft | Microsoft Fabric | Critical | 10.0 | 2026-09-17 23:04:47 | Deep Dive |
| CVE-2026-62874 | Azure Billing Elevation of Privilege Vulnerability | Microsoft | Azure Billing | Critical | 10.0 | 2026-09-17 23:04:46 | Deep Dive |
| CVE-2026-85889 | Azure AI Foundry Elevation of Privilege Vulnerability | Microsoft | Azure AI Foundry | Critical | 10.0 | 2026-09-17 22:55:59 | Deep Dive |
| CVE-2026-70200 | Azure Logic Apps Elevation of Privilege Vulnerability | Microsoft | Azure Logic Apps | Critical | 10.0 | 2026-09-17 22:55:58 | Deep Dive |
| CVE-2026-87701 | Azure Cosmos DB Elevation of Privilege Vulnerability | Microsoft | Azure Cosmos DB | Critical | 9.6 | 2026-09-17 22:55:57 | Deep Dive |
| CVE-2026-85885 | Microsoft 365 Copilot Elevation of Privilege Vulnerability | Microsoft | Microsoft 365 Copilot | Critical | 9.9 | 2026-09-17 22:55:56 | Deep Dive |
| CVE-2026-83944 | Azure Logic Apps Elevation of Privilege Vulnerability | Microsoft | Azure Logic Apps | Critical | 10.0 | 2026-09-17 22:55:56 | Deep Dive |
| CVE-2026-69399 | Azure Arc Elevation of Privilege Vulnerability | Microsoft | Azure ARC | Critical | 10.0 | 2026-09-17 22:55:55 | Deep Dive |
| CVE-2026-77903 | Microsoft Dataverse Elevation of Privilege Vulnerability | Microsoft | Microsoft Dataverse | Critical | 9.0 | 2026-09-17 22:55:54 | Deep Dive |
| CVE-2026-69865 | Microsoft Container Registry Elevation of Privilege Vulnerability | Microsoft | Azure Container Registry | Critical | 10.0 | 2026-09-17 22:55:54 | Deep Dive |