| CVE ID | Title | Vendor | Product | Severity | CVSS Score | Published At | AI Analysis |
|---|---|---|---|---|---|---|---|
| CVE-2026-110761 | ILIAS before 9.24, 10.12, and 11.5 PHP Object Injection via Test Results Import | ILIAS-eLearning e.V. | ILIAS | High | 8.8 | 2026-10-14 18:47:36 | Deep Dive |
| CVE-2026-102755 | DataEase Datasource/Dataset Folder Name Stored Cross-Site Scripting | dataease | dataease | Medium | 5.1 | 2026-10-14 18:45:25 | Deep Dive |
| CVE-2026-110666 | cemtan sar2html File Upload sar2html.py updateDb path traversal | cemtan | sar2html | Medium | 6.5 | 2026-10-14 18:45:13 | Deep Dive |
| CVE-2026-102756 | DataEase bar-horizontal Axis Label Tooltip Stored Cross-Site Scripting | dataease | dataease | Medium | 5.1 | 2026-10-14 18:44:43 | Deep Dive |
| CVE-2026-102479 | Vert.x 5.0-5.2 HTTP请求走私漏洞 | Eclipse Foundation | Eclipse Vert.x | High | 8.7 | 2026-10-14 18:43:55 | Deep Dive |
| CVE-2026-104143 | DataEase: Stored SQL Injection via dateFormat field templates | dataease | dataease | High | 8.7 | 2026-10-14 18:43:34 | Deep Dive |
| CVE-2026-104142 | DataEase: Stored SQL Injection in group-field binning bounds | dataease | dataease | High | 8.7 | 2026-10-14 18:42:36 | Deep Dive |
| CVE-2026-104141 | DataEase: SQL Injection in datasource metadata identifiers | dataease | dataease | High | 8.7 | 2026-10-14 18:41:07 | Deep Dive |
| CVE-2026-82153 | Dell OS Recovery Tool<2.4.4信息泄露漏洞 | Dell | OS Recovery Tool | Low | 2.2 | 2026-10-14 18:40:16 | Deep Dive |
| CVE-2026-53999 | Radius Controller May Delete a Container Resource via an Injected Deployment Annotation (Multi-Tenant Installs) | radius-project | radius | High | 7.7 | 2026-10-14 18:39:25 | Deep Dive |
| CVE-2026-102460 | CVE-2026-102460 | Eclipse Foundation | Eclipse Vert.x | High | 8.6 | 2026-10-14 18:36:41 | Deep Dive |
| CVE-2026-110248 | Insertion of sensitive information into log files in Amazon SageMaker Python SDK git_utils[.]py | AWS | SageMaker Python SDK | Medium | 5.3 | 2026-10-14 18:34:17 | Deep Dive |
| CVE-2026-102748 | Dgraph: Zero Unauthenticated HTTP Admin removeNode Denial of Service | dgraph-io | dgraph | Critical | 9.2 | 2026-10-14 18:34:16 | Deep Dive |
| CVE-2026-109506 | Improper Authentication in Multiple TP-Link WiFi Repeaters | TP-Link Systems Inc. | RE190 v5 | Medium | 5.9 | 2026-10-14 18:31:37 | Deep Dive |
| CVE-2026-102682 | Pipecat: Public exposure of Pipecat’s development runner can allow unauthenticated bot session creation | pipecat-ai | pipecat | Medium | 5.6 | 2026-10-14 18:30:07 | Deep Dive |
| CVE-2026-100406 | dbt: Unauthenticated Arbitrary SQL Execution in `dbt docs serve` | dbt-labs | dbt-core | High | 8.2 | 2026-10-14 18:27:25 | Deep Dive |
| CVE-2026-63626 | Mongoose: ppp_handle_ipv6cp() uses attacker-controlled length without bounds check — OOB read and heap overflow (PPP/PPPoE, MG_ENABLE_IPV6) | cesanta | mongoose | High | 8.8 | 2026-10-14 18:26:17 | Deep Dive |
| CVE-2026-73261 | Mongoose: handle_opt() missing opts[1] > len check — 1-byte OOB read corrupts TCP MSS, silences mg_send() per connection | cesanta | mongoose | High | 7.5 | 2026-10-14 18:25:41 | Deep Dive |
| CVE-2026-73260 | Mongoose: Out-of-bounds Read via length-counter underflow in built-in TLS X.509 DER parser | cesanta | mongoose | High | 7.5 | 2026-10-14 18:25:01 | Deep Dive |
| CVE-2026-73252 | Mongoose: Unauthenticated remote heap out-of-bounds read in built-in TLS: off-by-one length check in mg_tls_recv_record() underflows recv_len to SIZE_MAX | cesanta | mongoose | High | 7.5 | 2026-10-14 18:24:17 | Deep Dive |