| CVE ID | Title | Vendor | Product | Severity | CVSS Score | Published At | AI Analysis |
|---|---|---|---|---|---|---|---|
| CVE-2026-84319 | Nginx UI: MCP configuration tools bypass restricted directive validation and allow secondary authenticated users to execute NJS in Nginx worker context | 0xJacky | nginx-ui | High | 8.3 | 2026-10-12 21:03:36 | Deep Dive |
| CVE-2026-18513 | IBM Maximo Application Suite - Location Service for Esri Component Improper Privilege Management | IBM | Maximo Application Suite - Location Service for Esri Component | High | 7.2 | 2026-10-12 21:01:38 | Deep Dive |
| CVE-2026-18517 | IBM Maximo Application Suite - Location Service for Esri Component Improper Access Control | IBM | Maximo Application Suite - Location Service for Esri Component | High | 7.7 | 2026-10-12 21:01:30 | Deep Dive |
| CVE-2026-18529 | IBM Maximo Application Suite - Location Service for Esri Component Code Execution | IBM | Maximo Application Suite - Location Service for Esri Component | High | 8.7 | 2026-10-12 21:01:26 | Deep Dive |
| CVE-2026-18533 | IBM Maximo Application Suite - Location Service for Esri Component Code Execution | IBM | Maximo Application Suite - Location Service for Esri Component | Medium | 6.5 | 2026-10-12 21:01:22 | Deep Dive |
| CVE-2026-18537 | IBM Maximo Application Suite - Location Service for Esri Component Code Execution | IBM | Maximo Application Suite - Location Service for Esri Component | High | 8.7 | 2026-10-12 21:01:15 | Deep Dive |
| CVE-2026-75881 | IBM Maximo Application Suite - IoT Component Denial of Service | IBM | Maximo Application Suite - IoT Component | High | 7.5 | 2026-10-12 21:01:10 | Deep Dive |
| CVE-2026-78673 | Maximo AI Service Improper Input Validation | IBM | Maximo AI Service | High | 7.5 | 2026-10-12 21:01:06 | Deep Dive |
| CVE-2026-105052 | IBM Maximo Application Suite Information Disclosure | IBM | Maximo Application Suite | High | 7.5 | 2026-10-12 21:01:03 | Deep Dive |
| CVE-2026-108931 | Netcore NR268 DHCP dhcp_dynamicip_show.cgi eval cross site scripting | Netcore | NR268 | Medium | 4.3 | 2026-10-12 21:00:16 | Deep Dive |
| CVE-2026-84317 | Nginx UI: MCP nginx_config_add skips config directive validation → authenticated nginx directive injection (RCE on the official image) | 0xJacky | nginx-ui | High | 8.8 | 2026-10-12 20:59:58 | Deep Dive |
| CVE-2026-109571 | Fire-Boltt BSW013 firmware through V0.0.8 Unauthenticated Heart Rate Disclosure via BLE | Fire-Boltt | BSW013 | Medium | 4.3 | 2026-10-12 20:55:23 | Deep Dive |
| CVE-2026-109570 | Fire-Boltt BSW013 through V0.0.8 Unauthenticated BLE Notification Injection | Fire-Boltt | BSW013 | Medium | 4.3 | 2026-10-12 20:55:22 | Deep Dive |
| CVE-2026-109569 | sandboxed.sh through 1.3.0 Container Escape via nsenter Missing Root Namespace | Th0rgal | sandboxed.sh | High | 8.8 | 2026-10-12 20:55:22 | Deep Dive |
| CVE-2026-109568 | Shaark 1.2.13 through 1.2.44 Missing Authorization via API Update and Delete Routes | MarceauKa | Shaark | High | 7.1 | 2026-10-12 20:55:21 | Deep Dive |
| CVE-2026-109566 | Rapyd Admin 9.0.0 before 9.20.0 Hard-Coded Super-Admin Credentials via AuthSeeder | zofe | rapyd-admin | Critical | 9.8 | 2026-10-12 20:55:20 | Deep Dive |
| CVE-2026-109567 | Rapyd Admin from 9.0.0 before 9.20.0 Privilege Escalation via UsersEdit Component | zofe | rapyd-admin | High | 7.2 | 2026-10-12 20:55:20 | Deep Dive |
| CVE-2026-109564 | LearnHouse before 1.4.0 Missing Authorization via Playground Duplicate Endpoint | learnhouse | LearnHouse | Low | 3.1 | 2026-10-12 20:55:18 | Deep Dive |
| CVE-2026-109565 | Rapyd Admin 9.4.0 before 9.20.0 Stored XSS via select-list Component | zofe | rapyd-admin | Medium | 6.1 | 2026-10-12 20:55:18 | Deep Dive |
| CVE-2026-109563 | N3.js before 2.11.1 ReDoS via N3Lexer Numeric-Literal Regex | rdfjs | N3.js | High | 7.5 | 2026-10-12 20:55:17 | Deep Dive |