| CVE ID | Title | Vendor | Product | Severity | CVSS Score | Published At | AI Analysis |
|---|---|---|---|---|---|---|---|
| CVE-2026-85471 | Quay: quay: webhook notification ssrf -- hostname-string blocklist trivially bypassable | Red Hat | mirror registry for Red Hat OpenShift | Medium | 6.4 | 2026-10-12 18:50:20 | Deep Dive |
| CVE-2026-102663 | OpenList: Search metadata/count disclosure via Non-Separator-Aware Path Check in Bleve Search | OpenListTeam | OpenList | Medium | 4.3 | 2026-10-12 18:49:23 | Deep Dive |
| CVE-2026-57118 | PraisonAI AgentTeam.launch exposes unauthenticated remote agent listing and invocation endpoints | MervinPraison | PraisonAI | Critical | 9.8 | 2026-10-12 18:48:23 | Deep Dive |
| CVE-2026-57143 | PraisonAI: Server-Side Request Forgery (SSRF) in SearxNG / search_web tools via attacker-controlled searxng_url parameter | MervinPraison | praisonaiagents | High | 8.8 | 2026-10-12 18:48:00 | Deep Dive |
| CVE-2026-18166 | IBM® Db2® is vulnerable to arbitrary library loading via the CREATE WRAPPER command, allowing a privileged database user to read sensitive files from the host filesystem | IBM | Db2 | High | 7.7 | 2026-10-12 18:47:17 | Deep Dive |
| CVE-2026-105464 | IBM® Db2® is vulnerable to a local attacker with DBADM authorization gaining elevated privileges due to improper privilege management | IBM | Db2 | High | 8.8 | 2026-10-12 18:46:15 | Deep Dive |
| CVE-2026-108921 | KusalkaSilva Learning-Management-System State-Changing Endpoints remove_announcements.php mysql_query missing authentication | KusalkaSilva | Learning-Management-System | High | 7.3 | 2026-10-12 18:45:16 | Deep Dive |
| CVE-2026-89140 | Temporal Server internal completion callbacks are not bound to their namespace, allowing cross-namespace changes to Scheduler V2 schedule state | Temporal Technologies, Inc. | Temporal Server | Medium | 6.0 | 2026-10-12 18:44:23 | Deep Dive |
| CVE-2026-104355 | Temporal Server applies inbound namespace replication from a connected peer cluster to local namespaces | Temporal Technologies, Inc. | Temporal Server | High | 7.0 | 2026-10-12 18:43:34 | Deep Dive |
| CVE-2026-105466 | IBM® Db2® is vulnerable to a denial of service when inserting into a table with XML columns under specific conditions | IBM | Db2 | Medium | 6.5 | 2026-10-12 18:42:56 | Deep Dive |
| CVE-2026-87744 | Io.quarkus:quarkus-hibernate-orm-rest-data-panache: missing authorization in quarkus rest data panache via dropped security annotations | Red Hat | Exploit Intelligence | Critical | 9.1 | 2026-10-12 18:41:47 | Deep Dive |
| CVE-2026-105465 | IBM® Db2® is vulnerable to privilege escalation when db2ssh is enabled with the db2 instance | IBM | Db2 | High | 8.8 | 2026-10-12 18:41:42 | Deep Dive |
| CVE-2026-78404 | IBM® Db2® is vulnerable to local privilege escalation via the db2pd utility | IBM | Db2 | Medium | 6.5 | 2026-10-12 18:39:43 | Deep Dive |
| CVE-2026-59976 | ConvertX: Path Traversal vulnerability leading to Arbitrary File Write | C4illin | ConvertX | High | 8.1 | 2026-10-12 18:36:13 | Deep Dive |
| CVE-2026-59977 | ConvertX: Cross-Site Request Forgery (CSRF) leading to Unauthorized Data Destruction | C4illin | ConvertX | High | 8.1 | 2026-10-12 18:35:19 | Deep Dive |
| CVE-2026-107226 | AsyncHttpClient: Cookies received over plaintext HTTP can plant, overwrite or delete Secure cookies set over HTTPS | AsyncHttpClient | async-http-client | Medium | 6.8 | 2026-10-12 18:34:19 | Deep Dive |
| CVE-2026-104102 | copyparty FTP: upload outside defined volumes (limited path traversal) | 9001 | copyparty | Medium | 5.3 | 2026-10-12 18:32:01 | Deep Dive |
| CVE-2026-108920 | SourceCodester Drug Recommendation System Admin Record Tables user_record.php cross site scripting | SourceCodester | Drug Recommendation System | Medium | 4.3 | 2026-10-12 18:30:16 | Deep Dive |
| CVE-2026-103061 | Path traversal in Gleam via unvalidated package application names | Gleam | Gleam | Medium | 5.9 | 2026-10-12 18:23:42 | Deep Dive |
| CVE-2026-108919 | SourceCodester Drug Recommendation System Student Registration add_student.php cross site scripting | SourceCodester | Drug Recommendation System | Medium | 4.3 | 2026-10-12 18:15:14 | Deep Dive |