| CVE ID | Title | Vendor | Product | Severity | CVSS Score | Published At | AI Analysis |
|---|---|---|---|---|---|---|---|
| CVE-2026-110766 | Colanode Server through 0.4.7 Path Traversal via Avatar Download Route | colanode | colanode | Medium | 4.3 | 2026-10-14 18:47:43 | Deep Dive |
| CVE-2026-110765 | FlexPrice through 2.1.38 QuickBooks Webhook Signature Verification Bypass | flexprice | flexprice | Medium | 5.9 | 2026-10-14 18:47:42 | Deep Dive |
| CVE-2026-110764 | AstronRPA through 1.1.6 Cross-Tenant File Disclosure via /file/download | iflytek | astron-rpa | Medium | 5.3 | 2026-10-14 18:47:40 | Deep Dive |
| CVE-2026-110763 | lamp-boot 4.16.0-java17 through 4.21.2-java17 IDOR via /anyone/findDeptByCompany | zuihou | lamp-boot | Medium | 4.3 | 2026-10-14 18:47:39 | Deep Dive |
| CVE-2026-110762 | bbPress before 2.6.19 Information Disclosure via BuddyPress Activity Stream | bbPress | bbPress | Low | 3.7 | 2026-10-14 18:47:38 | Deep Dive |
| CVE-2026-110761 | ILIAS before 9.24, 10.12, and 11.5 PHP Object Injection via Test Results Import | ILIAS-eLearning e.V. | ILIAS | High | 8.8 | 2026-10-14 18:47:36 | Deep Dive |
| CVE-2026-102755 | DataEase Datasource/Dataset Folder Name Stored Cross-Site Scripting | dataease | dataease | Medium | 5.1 | 2026-10-14 18:45:25 | Deep Dive |
| CVE-2026-110666 | cemtan sar2html File Upload sar2html.py updateDb path traversal | cemtan | sar2html | Medium | 6.5 | 2026-10-14 18:45:13 | Deep Dive |
| CVE-2026-102756 | DataEase bar-horizontal Axis Label Tooltip Stored Cross-Site Scripting | dataease | dataease | Medium | 5.1 | 2026-10-14 18:44:43 | Deep Dive |
| CVE-2026-102479 | CVE-2026-102479 | Eclipse Foundation | Eclipse Vert.x | High | 8.7 | 2026-10-14 18:43:55 | Deep Dive |
| CVE-2026-104143 | DataEase: Stored SQL Injection via dateFormat field templates | dataease | dataease | High | 8.7 | 2026-10-14 18:43:34 | Deep Dive |
| CVE-2026-104142 | DataEase: Stored SQL Injection in group-field binning bounds | dataease | dataease | High | 8.7 | 2026-10-14 18:42:36 | Deep Dive |
| CVE-2026-104141 | DataEase: SQL Injection in datasource metadata identifiers | dataease | dataease | High | 8.7 | 2026-10-14 18:41:07 | Deep Dive |
| CVE-2026-82153 | CVE-2026-82153 | Dell | OS Recovery Tool | Low | 2.2 | 2026-10-14 18:40:16 | Deep Dive |
| CVE-2026-53999 | Radius Controller May Delete a Container Resource via an Injected Deployment Annotation (Multi-Tenant Installs) | radius-project | radius | High | 7.7 | 2026-10-14 18:39:25 | Deep Dive |
| CVE-2026-102460 | CVE-2026-102460 | Eclipse Foundation | Eclipse Vert.x | High | 8.6 | 2026-10-14 18:36:41 | Deep Dive |
| CVE-2026-110248 | Insertion of sensitive information into log files in Amazon SageMaker Python SDK git_utils[.]py | AWS | SageMaker Python SDK | Medium | 5.3 | 2026-10-14 18:34:17 | Deep Dive |
| CVE-2026-102748 | Dgraph: Zero Unauthenticated HTTP Admin removeNode Denial of Service | dgraph-io | dgraph | Critical | 9.2 | 2026-10-14 18:34:16 | Deep Dive |
| CVE-2026-109506 | Improper Authentication in Multiple TP-Link WiFi Repeaters | TP-Link Systems Inc. | RE190 v5 | Medium | 5.9 | 2026-10-14 18:31:37 | Deep Dive |
| CVE-2026-102682 | Pipecat: Public exposure of Pipecat’s development runner can allow unauthenticated bot session creation | pipecat-ai | pipecat | Medium | 5.6 | 2026-10-14 18:30:07 | Deep Dive |