| CVE ID | Title | Vendor | Product | Severity | CVSS Score | Published At | AI Analysis |
|---|---|---|---|---|---|---|---|
| CVE-2026-108927 | itsourcecode Baptism Information Management System pbaptism.php sql injection | itsourcecode | Baptism Information Management System | Medium | 6.3 | 2026-10-12 20:00:17 | Deep Dive |
| CVE-2026-41504 | OWASP Coraza WAF: Native audit-log format allows CRLF injection and log forgery via request body and header fields | corazawaf | coraza | Medium | 5.8 | 2026-10-12 19:59:46 | Deep Dive |
| CVE-2026-104774 | OWASP Coraza WAF: jsDecode Off-by-One in Octal Escape Handling Enables WAF Bypass | corazawaf | coraza | Medium | 5.8 | 2026-10-12 19:58:39 | Deep Dive |
| CVE-2026-41510 | OWASP Coraza WAF: Silent argument drop at ArgumentLimit allows bypass of ARGS-targeted rules via parameter flooding | corazawaf | coraza | High | 7.2 | 2026-10-12 19:57:40 | Deep Dive |
| CVE-2026-109425 | Tink-go 2.8.0 Keyset Validation Bypass via NewHandleWithNoSecrets | tink-crypto | tink-go | Medium | 5.3 | 2026-10-12 19:55:37 | Deep Dive |
| CVE-2026-95838 | containerd: Unpack DoS via repeated opaque whiteouts | containerd | containerd | Medium | 4.6 | 2026-10-12 19:53:25 | Deep Dive |
| CVE-2026-108926 | itsourcecode Baptism Information Management System ebaptism.php sql injection | itsourcecode | Baptism Information Management System | Medium | 6.3 | 2026-10-12 19:45:11 | Deep Dive |
| CVE-2026-95837 | containerd CRI plugin: Checkpoint restore bypasses destination security context | containerd | containerd | High | 7.8 | 2026-10-12 19:37:50 | Deep Dive |
| CVE-2026-109424 | NetEase Cloud Music Weak Encryption via eapi/xeapi | NetEase | NetEase Cloud Music for Windows | Medium | 5.9 | 2026-10-12 19:35:20 | Deep Dive |
| CVE-2026-109423 | NetEase Cloud Music TLS Certificate Validation Bypass | NetEase | NetEase Cloud Music for Windows | High | 7.4 | 2026-10-12 19:34:32 | Deep Dive |
| CVE-2026-109422 | NetEase Cloud Music RCE via os.navigateExternal IPC | NetEase | NetEase Cloud Music for Windows | High | 8.1 | 2026-10-12 19:33:32 | Deep Dive |
| CVE-2026-109575 | CVE-2026-109575 | HAProxy | Data Plane API EE | Critical | 9.8 | 2026-10-12 19:32:13 | Deep Dive |
| CVE-2026-96012 | IBM Db2 Mirror for i Privilege Escalation | IBM | Db2 Mirror for i | Critical | 9.9 | 2026-10-12 19:30:56 | Deep Dive |
| CVE-2026-108924 | getkirby Kirby Dynamic Option Generation OptionsQuery.php resolve authorization | getkirby | Kirby | Medium | 4.3 | 2026-10-12 19:30:15 | Deep Dive |
| CVE-2026-104364 | IBM® Db2® Denial of Service | IBM | Db2 | Low | 3.3 | 2026-10-12 19:25:23 | Deep Dive |
| CVE-2026-104332 | IBM® Db2® Denial of Service | IBM | Db2 | Medium | 5.5 | 2026-10-12 19:18:02 | Deep Dive |
| CVE-2026-108923 | 1024-lab smart-admin Support Config Query queryByKey access control | 1024-lab | smart-admin | Medium | 6.3 | 2026-10-12 19:15:13 | Deep Dive |
| CVE-2025-27895 | DB2 Recovery Expert for Linux, UNIX and Windows Cross-Site Scripting | IBM | DB2 Recovery Expert for Linux, UNIX and Windows | Medium | 6.1 | 2026-10-12 19:07:09 | Deep Dive |
| CVE-2025-27896 | IBM Db2 Recovery Expert for Linux, Unix and Windows Cross-Site Scripting | IBM | DB2 Recovery Expert for Linux, UNIX and Windows | Medium | 6.1 | 2026-10-12 19:06:53 | Deep Dive |
| CVE-2026-108361 | Privasys Intra-handshake attested TLS implementation is vulnerable to TOCTOU Attacks | Privasys | ra-tls-clients | High | 7.2 | 2026-10-12 19:06:20 | Deep Dive |