| CVE ID | Title | Vendor | Product | Severity | CVSS Score | Published At | AI Analysis |
|---|---|---|---|---|---|---|---|
| CVE-2026-110627 | ClipBucket v5 through 5.5.3-#206 Reflected XSS via add_todo val Parameter | MacWarrior | clipbucket-v5 | Medium | 4.7 | 2026-10-14 14:17:03 | Deep Dive |
| CVE-2026-110628 | Kan 0.5.5 through 0.6.0 Unauthenticated SSRF via /api/download/attatchment | kanbn | kan | High | 8.6 | 2026-10-14 14:17:03 | Deep Dive |
| CVE-2026-110626 | ClipBucket v5 through 5.5.3-#206 Reflected XSS via edit_language in language_settings.php | MacWarrior | clipbucket-v5 | Medium | 6.1 | 2026-10-14 14:17:02 | Deep Dive |
| CVE-2026-110624 | Papermerge Core through 3.5.3 Missing Authorization via /tags/all and /document-types/all | papermerge | papermerge-core | Low | 3.1 | 2026-10-14 14:17:01 | Deep Dive |
| CVE-2026-110625 | ClipBucket v5 through 5.5.3-#206 Reflected XSS via type Parameter in flagged_item.php | MacWarrior | clipbucket-v5 | Medium | 6.1 | 2026-10-14 14:17:01 | Deep Dive |
| CVE-2026-110623 | Papermerge Core through 3.5.3 Missing Authorization in Shared Nodes API | papermerge | papermerge-core | High | 7.5 | 2026-10-14 14:17:00 | Deep Dive |
| CVE-2026-110622 | Papermerge Core through 3.5.3 Missing Authorization in Page Management and OCR Endpoints | papermerge | papermerge-core | High | 7.5 | 2026-10-14 14:16:59 | Deep Dive |
| CVE-2026-110621 | Swetrix Cloud before 5.1.0 Missing Authorization via POST /project/organisation/:orgId | Swetrix | swetrix | High | 8.8 | 2026-10-14 14:16:59 | Deep Dive |
| CVE-2026-110620 | Formbricks before 4.9.0 Cross-Organization IDOR in Server Actions via organizationId | formbricks | formbricks | Medium | 6.8 | 2026-10-14 14:16:58 | Deep Dive |
| CVE-2026-110619 | frp 0.41.0 through 0.71.1 Missing Authentication for pprof Debug Endpoints | fatedier | frp | Medium | 4.8 | 2026-10-14 14:16:57 | Deep Dive |
| CVE-2026-110618 | SmsForwarder through 3.5.0 Missing Authentication in HTTP Server Remote Control API | pppscn | SmsForwarder | High | 8.1 | 2026-10-14 14:16:57 | Deep Dive |
| CVE-2026-110617 | we-mp-rss through 1.5.3 Missing Authorization via Export File Download Endpoint | rachelos | we-mp-rss | Medium | 4.8 | 2026-10-14 14:16:56 | Deep Dive |
| CVE-2026-110616 | NullHub through 2026.5.29 Missing Authentication for /api Management API | nullclaw | NullHub | High | 8.1 | 2026-10-14 14:16:55 | Deep Dive |
| CVE-2026-110615 | jshERP through 3.6 Missing Authorization via /user/batchSetStatus | jishenghua | jshERP | High | 7.1 | 2026-10-14 14:16:55 | Deep Dive |
| CVE-2026-110614 | Yiuman citrus through 0.15.0 ORDER BY SQL Injection via sortBy Parameter | Yiuman | citrus | Medium | 6.5 | 2026-10-14 14:16:54 | Deep Dive |
| CVE-2026-110612 | vlife through 2.0.1 Authentication Bypass via Hardcoded JWT Secret in TokenUtil | wwwlike | vlife | Critical | 9.8 | 2026-10-14 14:16:53 | Deep Dive |
| CVE-2026-110613 | youlai-mall through commit 9f62de8 Order Information Disclosure via App Order List | youlaitech | youlai-mall | Medium | 6.5 | 2026-10-14 14:16:53 | Deep Dive |
| CVE-2026-110611 | REBUILD through 4.5.0 Authorization Bypass via aibot2 Chat Endpoints chatid | getrebuild | rebuild | Medium | 5.9 | 2026-10-14 14:16:52 | Deep Dive |
| CVE-2026-110610 | ruoyi-vue-pro through 2026.09 SSRF via Midjourney referImageUrl and notify imageUrl | YunaiV | ruoyi-vue-pro | Medium | 5.4 | 2026-10-14 14:16:51 | Deep Dive |
| CVE-2026-110609 | Dromara Skyeye through commit 65d3ddcede70 SQL Injection via keyword Parameter | dromara | skyeye | Medium | 6.5 | 2026-10-14 14:16:51 | Deep Dive |