| CVE ID | Title | Vendor | Product | Severity | CVSS Score | Published At | AI Analysis |
|---|---|---|---|---|---|---|---|
| CVE-2026-103905 | Unauthenticated Plugin Safe Mode Toggle Vulnerability in JTL-Shop | JTL-Software GmbH | JTL-Shop | High | 7.5 | 2026-10-14 10:34:35 | Deep Dive |
| CVE-2026-97315 | Responsive Blocks < 2.3.0 - Unauthenticated HTML Injection in Form Notification Email | Unknown | Responsive Blocks | Medium | 5.4 | 2026-10-14 10:27:24 | Deep Dive |
| CVE-2026-88998 | Tickera < 3.6.0.4 - Unauthenticated Order Payment Bypass via 2Checkout IPN | Unknown | Tickera | Medium | 5.3 | 2026-10-14 10:27:24 | Deep Dive |
| CVE-2026-103308 | Visma Pay for WooCommerce < 1.2.2 - Unauthenticated Payment Bypass and Order Data Disclosure via Gateway Return Endpoint | Unknown | Visma Pay for WooCommerce | Medium | 6.5 | 2026-10-14 10:27:23 | Deep Dive |
| CVE-2026-82844 | WPForms Lite 1.10.0.1 - 2.0.2.1 - Unauthenticated Payment Bypass via PayPal Commerce | Unknown | WPForms Lite | Medium | 5.3 | 2026-10-14 10:27:23 | Deep Dive |
| CVE-2026-101301 | WPCode 2.0.0 - 2.3.9 - Unauthenticated Snippet Suppression via Safe Mode Bypass | Unknown | WPCode | Medium | 5.3 | 2026-10-14 10:27:22 | Deep Dive |
| CVE-2026-103904 | Stored XSS Vulnerability in JTL-Shop | JTL-Software GmbH | JTL-Shop | Critical | 9.3 | 2026-10-14 10:23:29 | Deep Dive |
| CVE-2026-73795 | HPE NonStop TMF Auditread2 - Denial of Service vulnerability | Hewlett Packard Enterprise | HPE NonStop TMF Auditread2 | Medium | 6.4 | 2026-10-14 10:20:23 | Deep Dive |
| CVE-2026-100229 | Gstreamer1-plugins-bad-free: gstreamer1-plugins-bad-free: out-of-bounds write in gst_h266_parser_parse_dci() due to off-by-one array bound check | Red Hat | Red Hat Enterprise Linux 10 | Medium | 6.5 | 2026-10-14 10:02:13 | Deep Dive |
| CVE-2026-88842 | Busybox: busybox: dpkg stale field_start pointer causes out-of-bounds read and status file corruption | Red Hat | Red Hat Hardened Images | Low | 3.3 | 2026-10-14 10:02:05 | Deep Dive |
| CVE-2026-109971 | Clevis: clevis: pkcs#11 token pin exposed on command line via pkcs11-tool | Red Hat | Red Hat Enterprise Linux 10 | Medium | 4.7 | 2026-10-14 10:01:05 | Deep Dive |
| CVE-2026-109970 | Clevis: clevis: pkcs#11 token pin written to world-readable file | Red Hat | Red Hat Enterprise Linux 10 | Medium | 4.7 | 2026-10-14 10:01:02 | Deep Dive |
| CVE-2026-109969 | Clevis: clevis: no authentication on pkcs#11 af_unix sockets allows key injection under permissive umask | Red Hat | Red Hat Enterprise Linux 10 | Medium | 4.7 | 2026-10-14 10:00:57 | Deep Dive |
| CVE-2026-100231 | Gstreamer1-plugins-bad-free: gstreamer1-plugins-bad-free: heap out-of-bounds write in asfmux due to incorrect utf-16 size calculation for non-bmp characters | Red Hat | Red Hat Enterprise Linux 10 | Medium | 6.1 | 2026-10-14 10:00:54 | Deep Dive |
| CVE-2026-88829 | Busybox: busybox: http request smuggling via pipelined requests in httpd reverse proxy | Red Hat | Red Hat Hardened Images | High | 7.2 | 2026-10-14 10:00:43 | Deep Dive |
| CVE-2026-90954 | Busybox: busybox: dpkg-deb extraction-root escape via per-ar-member deferred symlink flush | Red Hat | Red Hat Hardened Images | High | 7.8 | 2026-10-14 10:00:08 | Deep Dive |
| CVE-2026-86476 | Gstreamer1-plugins-base: gst-plugins-base: heap buffer overflow via unvalidated gstvideometa plane extents in gst_video_frame_map_id and video_meta_deserialize | Red Hat | Red Hat Enterprise Linux 10 | High | 8.4 | 2026-10-14 10:00:03 | Deep Dive |
| CVE-2026-73794 | HPE NonStop MODULAR NSJ - Vulnerability in Random Number Generation | Hewlett Packard Enterprise | HPE NonStop MODULAR NSJ | Medium | 4.6 | 2026-10-14 09:53:56 | Deep Dive |
| CVE-2026-73793 | HPE NonStop Middleware - Secret key handling vulnerability | Hewlett Packard Enterprise | HPE NonStop Middleware | High | 7.9 | 2026-10-14 09:38:04 | Deep Dive |
| CVE-2026-73792 | HPE NonStop Java JToolkit - Command Injection and buffer overflow vulnerability | Hewlett Packard Enterprise | HPE NonStop Java JToolkit | Low | 3.8 | 2026-10-14 09:21:57 | Deep Dive |