| CVE ID | Title | Vendor | Product | Severity | CVSS Score | Published At | AI Analysis |
|---|---|---|---|---|---|---|---|
| CVE-2026-91157 | Discourse: Media uploads remain publicly accessible after category permissions are restricted | discourse | discourse | High | 7.5 | 2026-10-14 15:37:02 | Deep Dive |
| CVE-2026-110734 | Godot Engine 4.7.2前版Hdr解码堆溢出 | godotengine | Godot Engine | Low | 2.5 | 2026-10-14 15:36:09 | Deep Dive |
| CVE-2026-91156 | Discourse: Chat MessageBus delivers read-restricted messages to unauthorized users | discourse | discourse | High | 7.5 | 2026-10-14 15:33:33 | Deep Dive |
| CVE-2026-91159 | Discourse: Stored oEmbed HTML injection via allowed iframe | discourse | discourse | High | 7.7 | 2026-10-14 15:30:14 | Deep Dive |
| CVE-2026-77572 | VeraCrypt: Missing authorization on veracrypt.sys IOCTLs exposes disk topology, symlink targets, and DeviceObject reference count to any client of \\.\VeraCrypt | veracrypt | VeraCrypt | Low | 3.3 | 2026-10-14 15:26:31 | Deep Dive |
| CVE-2026-91883 | Dell Terraform OME 插件 1.0.0-1.2.3 敏感信息注入漏洞 | Dell | Terraform Provider for OME | Medium | 4.3 | 2026-10-14 15:20:26 | Deep Dive |
| CVE-2026-89077 | MOVEit Transfer Identity validation flaw in SFTP authentication | Progress | MOVEit Transfer | High | 7.5 | 2026-10-14 15:16:24 | Deep Dive |
| CVE-2026-91882 | Dell Terraform Provider OME敏感信息注入漏洞 | Dell | Terraform Provider for OME | High | 8.6 | 2026-10-14 15:15:26 | Deep Dive |
| CVE-2026-89076 | MOVEit Transfer SQL injection in custom reporting | Progress | MOVEit Transfer | High | 7.2 | 2026-10-14 15:15:24 | Deep Dive |
| CVE-2026-89075 | MOVEit Transfer Local Disclosure of Session Information Vulnerability | Progress | MOVEit Transfer | High | 7.3 | 2026-10-14 15:14:29 | Deep Dive |
| CVE-2026-89074 | MOVEit Transfer Email MFA Bypass | Progress | MOVEit Transfer | High | 7.5 | 2026-10-14 15:12:50 | Deep Dive |
| CVE-2026-89073 | MOVEit Transfer Access restriction bypass in OAuth authentication | Progress | MOVEit Transfer | High | 7.5 | 2026-10-14 15:11:31 | Deep Dive |
| CVE-2026-103929 | mise permits untrusted local configuration to override default shell arguments | jdx | mise | High | 7.8 | 2026-10-14 15:11:14 | Deep Dive |
| CVE-2026-89072 | MOVEit Transfer Authorization Flaw in Certificate Management | Progress | MOVEit Transfer | High | 7.5 | 2026-10-14 15:10:41 | Deep Dive |
| CVE-2026-91881 | Dell Terraform Provider <1.6.2证书验证绕过漏洞 | Dell | Terraform Provider for Redfish | Critical | 9.0 | 2026-10-14 15:10:11 | Deep Dive |
| CVE-2026-89071 | MOVEit Transfer LDAP injection in certificate-based authentication | Progress | MOVEit Transfer | High | 7.5 | 2026-10-14 15:09:45 | Deep Dive |
| CVE-2026-89070 | MOVEit Transfer OIDC Authentication Replay Vulnerability | Progress | MOVEit Transfer | High | 7.5 | 2026-10-14 15:08:46 | Deep Dive |
| CVE-2026-89069 | MOVEit Transfer Stored XSS Vulnerability in Ad Hoc Packages | Progress | MOVEit Transfer | High | 8.0 | 2026-10-14 15:07:01 | Deep Dive |
| CVE-2026-89068 | MOVEit Transfer Authentication bypass in LDAP sign-on | Progress | MOVEit Transfer | High | 8.1 | 2026-10-14 15:06:14 | Deep Dive |
| CVE-2026-101896 | Angular: Denial of Service via Numeric URL Matrix Parameters in Server-Side Rendering (SSR) | angular | angular | High | 8.2 | 2026-10-14 15:05:43 | Deep Dive |