| CVE ID | Title | Vendor | Product | Severity | CVSS Score | Published At | AI Analysis |
|---|---|---|---|---|---|---|---|
| CVE-2026-109377 | ERPNext 9.0.0 through 16.50.0 Missing Authorization in Batch Lookup Methods | Frappe | ERPNext | Medium | 4.3 | 2026-10-12 20:55:10 | Deep Dive |
| CVE-2026-109375 | Vercel deepsec before 1.1.17 Arbitrary File Write via Symlink in Sandbox Tarball Extraction | Vercel | deepsec | Medium | 6.1 | 2026-10-12 20:55:09 | Deep Dive |
| CVE-2026-109376 | ERPNext 15.55.0 through 16.50.0 Incorrect Authorization via get_timesheet_html | Frappe | ERPNext | Medium | 4.3 | 2026-10-12 20:55:09 | Deep Dive |
| CVE-2025-71429 | GPT-SoVITS through 20250606v2pro OS Command Injection via UVR5 vr.py | RVC-Boss | GPT-SoVITS | Critical | 9.8 | 2026-10-12 20:55:08 | Deep Dive |
| CVE-2024-58389 | HoloViz Panel from 1.2.2 before 1.9.0 Open Redirect via next Parameter | HoloViz | Panel | Medium | 6.1 | 2026-10-12 20:55:07 | Deep Dive |
| CVE-2022-51020 | Flower before 2.2.0 CSRF via Worker and Task Control API Endpoints | mher | flower | Medium | 5.9 | 2026-10-12 20:55:07 | Deep Dive |
| CVE-2021-48012 | fast-toml through 0.5.4 Prototype Pollution via __proto__ Keys in Parsed TOML | Gin-Quin | fast-toml | High | 8.2 | 2026-10-12 20:55:06 | Deep Dive |
| CVE-2021-48011 | Servor 1.0.0 through 4.0.2 Unauthenticated Path Traversal via URL-Encoded Dot Segments | lukejacksonn | servor | High | 7.5 | 2026-10-12 20:55:05 | Deep Dive |
| CVE-2020-37280 | cbor-sync through 1.0.4 Memory Exhaustion via Unchecked CBOR Array Lengths | PelionIoT | cbor-sync | High | 7.5 | 2026-10-12 20:55:05 | Deep Dive |
| CVE-2020-37279 | easy-pdf-merge 0.1.0 through 0.2.6 OS Command Injection via merge function | karuppiah7890 | easy-pdf-merge | High | 8.1 | 2026-10-12 20:55:04 | Deep Dive |
| CVE-2026-16678 | IBM Power Systems Firmware Denial of Service | IBM | Virtualization Management Interface | Medium | 4.5 | 2026-10-12 20:52:45 | Deep Dive |
| CVE-2026-96261 | IBM Power Systems Firmware Buffer Overflow | IBM | PowerVM Hypervisor | High | 7.3 | 2026-10-12 20:52:36 | Deep Dive |
| CVE-2026-96262 | IBM Power Systems Firmware Buffer Overflow | IBM | PowerVM Hypervisor | High | 8.2 | 2026-10-12 20:52:29 | Deep Dive |
| CVE-2026-96263 | IBM Power Systems Firmware Buffer Overflow | IBM | PowerVM Hypervisor | High | 8.2 | 2026-10-12 20:52:21 | Deep Dive |
| CVE-2026-96264 | IBM Power Systems Firmware Buffer Overflow | IBM | PowerVM Hypervisor | High | 8.2 | 2026-10-12 20:52:11 | Deep Dive |
| CVE-2026-96265 | IBM Power Systems Firmware Improper Memory Buffer Restriction | IBM | PowerVM Hypervisor | High | 8.2 | 2026-10-12 20:52:01 | Deep Dive |
| CVE-2026-96266 | IBM Power Systems Firmware Buffer Overflow | IBM | PowerVM Hypervisor | High | 8.2 | 2026-10-12 20:51:56 | Deep Dive |
| CVE-2026-84313 | Nginx UI: TOTP / passkey enrolment requires no re-authentication, enabling persistent account takeover | 0xJacky | nginx-ui | High | 8.8 | 2026-10-12 20:51:45 | Deep Dive |
| CVE-2026-84321 | Nginx UI: Standalone short tokens survive administrative revocation in cache and authenticate again after account re-enable | 0xJacky | nginx-ui | Medium | 5.4 | 2026-10-12 20:49:37 | Deep Dive |
| CVE-2026-53997 | Netherman Portal del Hermano Account Takeover via Password Reset Oracle | NetHerman | Portal del Hermano (portaldelhermano.es) | High | 7.4 | 2026-10-12 20:48:31 | Deep Dive |