| CVE ID | Title | Vendor | Product | Severity | CVSS Score | Published At | AI Analysis |
|---|---|---|---|---|---|---|---|
| CVE-2026-95838 | containerd: Unpack DoS via repeated opaque whiteouts | containerd | containerd | Medium | 4.6 | 2026-10-12 19:53:25 | Deep Dive |
| CVE-2026-108926 | itsourcecode Baptism Information Management System ebaptism.php sql injection | itsourcecode | Baptism Information Management System | Medium | 6.3 | 2026-10-12 19:45:11 | Deep Dive |
| CVE-2026-95837 | containerd CRI plugin: Checkpoint restore bypasses destination security context | containerd | containerd | High | 7.8 | 2026-10-12 19:37:50 | Deep Dive |
| CVE-2026-109424 | NetEase Cloud Music Weak Encryption via eapi/xeapi | NetEase | NetEase Cloud Music for Windows | Medium | 5.9 | 2026-10-12 19:35:20 | Deep Dive |
| CVE-2026-109423 | NetEase Cloud Music TLS Certificate Validation Bypass | NetEase | NetEase Cloud Music for Windows | High | 7.4 | 2026-10-12 19:34:32 | Deep Dive |
| CVE-2026-109422 | NetEase Cloud Music RCE via os.navigateExternal IPC | NetEase | NetEase Cloud Music for Windows | High | 8.1 | 2026-10-12 19:33:32 | Deep Dive |
| CVE-2026-109575 | CVE-2026-109575 | HAProxy | Data Plane API EE | Critical | 9.8 | 2026-10-12 19:32:13 | Deep Dive |
| CVE-2026-96012 | IBM Db2 Mirror for i Privilege Escalation | IBM | Db2 Mirror for i | Critical | 9.9 | 2026-10-12 19:30:56 | Deep Dive |
| CVE-2026-108924 | getkirby Kirby Dynamic Option Generation OptionsQuery.php resolve authorization | getkirby | Kirby | Medium | 4.3 | 2026-10-12 19:30:15 | Deep Dive |
| CVE-2026-104364 | IBM® Db2® Denial of Service | IBM | Db2 | Low | 3.3 | 2026-10-12 19:25:23 | Deep Dive |
| CVE-2026-104332 | IBM® Db2® Denial of Service | IBM | Db2 | Medium | 5.5 | 2026-10-12 19:18:02 | Deep Dive |
| CVE-2026-108923 | 1024-lab smart-admin Support Config Query queryByKey access control | 1024-lab | smart-admin | Medium | 6.3 | 2026-10-12 19:15:13 | Deep Dive |
| CVE-2025-27895 | DB2 Recovery Expert for Linux, UNIX and Windows Cross-Site Scripting | IBM | DB2 Recovery Expert for Linux, UNIX and Windows | Medium | 6.1 | 2026-10-12 19:07:09 | Deep Dive |
| CVE-2025-27896 | IBM Db2 Recovery Expert for Linux, Unix and Windows Cross-Site Scripting | IBM | DB2 Recovery Expert for Linux, UNIX and Windows | Medium | 6.1 | 2026-10-12 19:06:53 | Deep Dive |
| CVE-2026-108361 | Privasys Intra-handshake attested TLS implementation is vulnerable to TOCTOU Attacks | Privasys | ra-tls-clients | High | 7.2 | 2026-10-12 19:06:20 | Deep Dive |
| CVE-2026-108362 | Privasys attested TLS accepted evidence from any unrevoked TEE platform (diversion attack) | Privasys | ra-tls-clients | Critical | 9.1 | 2026-10-12 19:06:11 | Deep Dive |
| CVE-2025-27897 | IBM Db2 Recovery Expert for Linux, Unix and Windows Cross-Site Scripting | IBM | DB2 Recovery Expert for Linux, UNIX and Windows | Medium | 6.1 | 2026-10-12 19:05:53 | Deep Dive |
| CVE-2025-27902 | IBM Db2 Recovery Expert for Linux, Unix and Windows Information Disclosure | IBM | DB2 Recovery Expert for Linux, UNIX and Windows | Medium | 6.1 | 2026-10-12 19:04:46 | Deep Dive |
| CVE-2026-108922 | KusalkaSilva Learning-Management-System upload_save.php getimagesize unrestricted upload | KusalkaSilva | Learning-Management-System | Medium | 6.3 | 2026-10-12 19:00:11 | Deep Dive |
| CVE-2026-65954 | PHPCSUtils: Remote code execution via eval() in AbstractArrayDeclarationSniff::getActualArrayKey() | PHPCSStandards | PHPCSUtils | High | 8.6 | 2026-10-12 18:51:02 | Deep Dive |