| CVE ID | Title | Vendor | Product | Severity | CVSS Score | Published At | AI Analysis |
|---|---|---|---|---|---|---|---|
| CVE-2026-98392 | Bluetooth: btintel_pcie: fix tx_handle bounds off-by-one | Linux | Linux | - | - | 2026-10-14 13:25:56 | Deep Dive |
| CVE-2026-98390 | x86/amd_node: Avoid divide by zero on virtualized systems | Linux | Linux | - | - | 2026-10-14 13:25:55 | Deep Dive |
| CVE-2026-98391 | drm/xe: Guard page-fault worker with runtime PM check | Linux | Linux | - | - | 2026-10-14 13:25:55 | Deep Dive |
| CVE-2026-98389 | drm/amdgpu: skip gfx switch_power_profile during GPU reset | Linux | Linux | - | - | 2026-10-14 13:25:53 | Deep Dive |
| CVE-2026-98388 | exec: do_close_on_exec() before taking exec_update_lock | Linux | Linux | - | - | 2026-10-14 13:25:52 | Deep Dive |
| CVE-2026-98387 | s390/crypto: Fix skcipher_walk return code handling in aes_s390 | Linux | Linux | - | - | 2026-10-14 13:25:52 | Deep Dive |
| CVE-2026-98386 | scsi: qla2xxx: Use memset_io() to clear QLAFX00 request ring slot | Linux | Linux | - | - | 2026-10-14 13:25:51 | Deep Dive |
| CVE-2026-110652 | ONLYOFFICE DocumentServer before 10.0.0 SSRF via downloadfile isInJwtToken Bypass | ONLYOFFICE | DocumentServer | Medium | 4.0 | 2026-10-14 13:15:00 | Deep Dive |
| CVE-2026-107417 | WordPress Push Notification for Post and BuddyPress plugin <= 3.23 - Broken Access Control vulnerability | Muralidharan Ramasamy | Push Notification for Post and BuddyPress | Medium | 6.5 | 2026-10-14 13:00:16 | Deep Dive |
| CVE-2026-107426 | WordPress Paid Videochat Turnkey Site plugin <= 7.5.12 - Broken Access Control vulnerability | VideoWhisper.com | Paid Videochat Turnkey Site | High | 7.3 | 2026-10-14 13:00:15 | Deep Dive |
| CVE-2026-109968 | Clevis: clevis: pkcs#11 luks passphrase logged in plaintext to world-readable file | Red Hat | Red Hat Enterprise Linux 10 | Medium | 5.5 | 2026-10-14 12:50:34 | Deep Dive |
| CVE-2026-16740 | Missing Authentication for Critical Function in TR7 Cyber Defense's TR7 ASP | TR7 Cyber Defense Inc. | TR7 ASP | Critical | 9.8 | 2026-10-14 12:47:36 | Deep Dive |
| CVE-2026-16741 | OS Command in TR7 Cyber Defense's TR7 ASP | TR7 Cyber Defense Inc. | TR7 ASP | Critical | 9.8 | 2026-10-14 12:42:26 | Deep Dive |
| CVE-2026-82026 | Radar < 1.12.2 Missing Authorization via /api/local-terminal | skyhook-io | radar | High | 8.8 | 2026-10-14 12:37:19 | Deep Dive |
| CVE-2026-108291 | WordPress Affiliates plugin <= 7.0.1 - PHP Object Injection vulnerability | itthinx | Affiliates | Critical | 9.8 | 2026-10-14 12:08:28 | Deep Dive |
| CVE-2026-107867 | WordPress JetProductTables plugin <= 1.2.4 - Cross Site Scripting (XSS) vulnerability | Crocoblock | JetProductTables | High | 7.1 | 2026-10-14 12:08:28 | Deep Dive |
| CVE-2026-107422 | WordPress WP w3all phpBB plugin <= 3.1.0 - Cross Site Scripting (XSS) vulnerability | axew3.com | WP w3all phpBB | Medium | 6.5 | 2026-10-14 12:08:28 | Deep Dive |
| CVE-2026-107425 | WordPress Bus Ticket Booking with Seat Reservation plugin <= 5.9.7 - Broken Access Control vulnerability | Magepeople inc. | Bus Ticket Booking with Seat Reservation | Medium | 6.5 | 2026-10-14 12:08:28 | Deep Dive |
| CVE-2026-107421 | WordPress Broadcast Live Video plugin <= 7.3.2 - Session Hijacking vulnerability | VideoWhisper.com | Broadcast Live Video | High | 7.3 | 2026-10-14 12:08:28 | Deep Dive |
| CVE-2026-107424 | WordPress Frontend Dashboard plugin <= 3.0.7 - Privilege Escalation vulnerability | M A Vinoth Kumar | Frontend Dashboard | Critical | 9.8 | 2026-10-14 12:08:28 | Deep Dive |