| CVE ID | Title | Vendor | Product | Severity | CVSS Score | Published At | AI Analysis |
|---|---|---|---|---|---|---|---|
| CVE-2026-104107 | FileRise: Authenticated path traversal escapes configured storage root through inherited ACLs | error311 | FileRise | Medium | 6.5 | 2026-10-14 20:42:09 | Deep Dive |
| CVE-2026-104110 | FileRise: Unauthenticated disclosure of internal folder path, client email, and upload policy for FileRise Pro client portals via /api/pro/portals/get.php | error311 | FileRise | Medium | 5.3 | 2026-10-14 20:40:16 | Deep Dive |
| CVE-2026-104108 | FileRise OIDC login can bind an attacker identity to an existing local account | error311 | FileRise | High | 8.1 | 2026-10-14 20:39:28 | Deep Dive |
| CVE-2026-103977 | FileRise: Session-scoped TOTP rate limiting permits repeated verification attempts | error311 | FileRise | High | 8.1 | 2026-10-14 20:38:39 | Deep Dive |
| CVE-2026-104105 | FileRise: TOTP codes are not single-use — valid 6-digit code can be replayed within its window (capture-replay) | error311 | FileRise | Medium | 6.4 | 2026-10-14 20:37:45 | Deep Dive |
| CVE-2026-104106 | FileRise: 2FA disable and TOTP enrollment lack step-up re-authentication; enrollment activates before verification | error311 | FileRise | Medium | 6.5 | 2026-10-14 20:36:27 | Deep Dive |
| CVE-2026-103988 | FileRise renameFolder omits destination-parent authorization | error311 | FileRise | Medium | 5.4 | 2026-10-14 20:35:47 | Deep Dive |
| CVE-2026-69193 | FileRise: Rate Limiting Bypass via Username Rotation Enables Unlimited Password Spraying | error311 | FileRise | Medium | 6.5 | 2026-10-14 20:34:13 | Deep Dive |
| CVE-2026-69191 | FileRise: Login Method Restriction Bypass via Direct API Access | error311 | FileRise | Medium | 5.4 | 2026-10-14 20:33:33 | Deep Dive |
| CVE-2026-77427 | FileRise: Insecure default cryptographic key fallback in manual installs | error311 | FileRise | Medium | 5.9 | 2026-10-14 20:32:56 | Deep Dive |
| CVE-2026-69194 | FileRise: Unsanitized footerHtml in Public Site Config | error311 | FileRise | Medium | 4.8 | 2026-10-14 20:32:01 | Deep Dive |
| CVE-2026-110679 | OpenSIPS rtpproxy rtpproxy_answer out-of-bounds | - | OpenSIPS | High | 7.3 | 2026-10-14 20:30:21 | Deep Dive |
| CVE-2026-0311 | Checkov by Prisma Cloud: Server-Side Request Forgery Vulnerability | Palo Alto Networks | Checkov by Prisma Cloud | Low | 1.1 | 2026-10-14 20:29:19 | Deep Dive |
| CVE-2026-0312 | Checkov by Prisma Cloud: Path Traversal Vulnerabilities | Palo Alto Networks | Checkov by Prisma Cloud | Medium | 4.3 | 2026-10-14 20:28:18 | Deep Dive |
| CVE-2026-0313 | Cortex XSOAR: OS Command Injection Vulnerability | Palo Alto Networks | Cortex XSOAR OS Query | Medium | 6.1 | 2026-10-14 20:27:19 | Deep Dive |
| CVE-2026-64856 | FileRise: Missing Authentication Guard on File Snippet Preview Endpoint | error311 | FileRise | Low | 3.7 | 2026-10-14 20:25:38 | Deep Dive |
| CVE-2026-0314 | GlobalProtect App: Local Denial of Service (DoS) on Windows | Palo Alto Networks | GlobalProtect App | Medium | 4.3 | 2026-10-14 20:25:32 | Deep Dive |
| CVE-2026-62664 | FileRise: Authenticated path traversal in createFolder allows arbitrary directory creation outside the upload root | error311 | FileRise | Medium | 5.4 | 2026-10-14 20:24:50 | Deep Dive |
| CVE-2026-0315 | GlobalProtect App: Local Privilege Escalation Vulnerability on macOS | Palo Alto Networks | GlobalProtect App | Medium | 5.9 | 2026-10-14 20:24:21 | Deep Dive |
| CVE-2026-61844 | FileRise: Folder Metadata Filename Collisions Bypass "read_own" Isolation | error311 | FileRise | High | 7.1 | 2026-10-14 20:23:53 | Deep Dive |