| CVE ID | Title | Vendor | Product | Severity | CVSS Score | Published At | AI Analysis |
|---|---|---|---|---|---|---|---|
| CVE-2026-107350 | Authentication bypass via second StartupMessage during SCRAM authentication in PgBouncer | - | PgBouncer | High | 8.8 | 2026-10-14 17:34:39 | Deep Dive |
| CVE-2026-107349 | Infinite loop on empty option name in startup options parameter in PgBouncer | - | PgBouncer | High | 7.5 | 2026-10-14 17:34:34 | Deep Dive |
| CVE-2026-107348 | Integer overflow causes an infinite loop in message buffer growth in PgBouncer | - | PgBouncer | Medium | 5.9 | 2026-10-14 17:34:30 | Deep Dive |
| CVE-2026-103414 | GUIX二进制资源加载器缓冲区溢出漏洞 | Eclipse Foundation | GUIX | High | 8.4 | 2026-10-14 17:32:12 | Deep Dive |
| CVE-2026-86461 | FV Flowplayer Video Player <= 7.5.54.7212 - Authenticated (Subscriber+) Arbitrary File Upload via 'video_url' Parameter | foliovision | FV Flowplayer Video Player | High | 8.8 | 2026-10-14 17:29:14 | Deep Dive |
| CVE-2026-0322 | PAN-OS: Authenticated Remote Code Execution (RCE) in the Management Interface | Palo Alto Networks | Cloud NGFW | High | 8.5 | 2026-10-14 17:26:52 | Deep Dive |
| CVE-2026-101954 | Junos OS and Junos OS Evolved: Unauthenticated network access causes full device takeover when J-Web is enabled | Juniper Networks | Junos OS | Critical | 9.8 | 2026-10-14 17:22:07 | Deep Dive |
| CVE-2026-101952 | Junos OS and Junos OS Evolved: A specific BGP ISO-VPN update causes an rpd crash when BMP or NSR is enabled | Juniper Networks | Junos OS | High | 7.5 | 2026-10-14 17:21:18 | Deep Dive |
| CVE-2026-101949 | Junos OS and Junos OS Evolved: In a scenario with VPN-flowspec and BMP monitoring a specific BGP update causes an rpd crash | Juniper Networks | Junos OS | High | 7.5 | 2026-10-14 17:20:52 | Deep Dive |
| CVE-2026-92160 | F´: SendPartial Integer Overflow Leading to Assertion DoS | nasa | fprime | Medium | 6.5 | 2026-10-14 17:20:36 | Deep Dive |
| CVE-2026-101964 | Junos OS and Junos OS Evolved: An attacker can cause an rpd crash via a crafted LDP message | Juniper Networks | Junos OS | Medium | 6.5 | 2026-10-14 17:20:21 | Deep Dive |
| CVE-2026-101963 | Junos OS and Junos OS Evolved: A BGP EVPN neighbor causes an rpd crash when SRv6 multihoming is used | Juniper Networks | Junos OS | High | 7.5 | 2026-10-14 17:19:56 | Deep Dive |
| CVE-2026-101962 | Junos OS and Junos OS Evolved: An attacker sending a malformed update causes an rpd crash when BGP EVPN signaling is used | Juniper Networks | Junos OS | High | 7.5 | 2026-10-14 17:19:36 | Deep Dive |
| CVE-2026-92155 | F´: FileUplink Unknown Packet Type Assertion DoS | nasa | fprime | High | 7.5 | 2026-10-14 17:19:21 | Deep Dive |
| CVE-2026-101961 | Junos OS and Junos OS Evolved: A specific BGP packet causes an rpd crash when an ECMP qualifier is used in an import policy | Juniper Networks | Junos OS | High | 7.5 | 2026-10-14 17:19:10 | Deep Dive |
| CVE-2026-101959 | Junos OS and Junos OS Evolved: A malformed LSP-ping causes an rpd crash | Juniper Networks | Junos OS | Medium | 6.5 | 2026-10-14 17:18:37 | Deep Dive |
| CVE-2026-92150 | F´: GenericHub Malformed Buffer Assertion DoS | nasa | fprime | High | 7.5 | 2026-10-14 17:18:29 | Deep Dive |
| CVE-2026-101983 | Junos OS and Junos OS Evolved: An attacker causes remote code execution when J-Web virtual-domain is configured | Juniper Networks | Junos OS | Critical | 9.8 | 2026-10-14 17:17:38 | Deep Dive |
| CVE-2026-108390 | HestiaCP Low-Privileged User to Root via Config-Field Injection and PATH Hijacking | hestiacp | hestiacp | Critical | 9.9 | 2026-10-14 17:17:24 | Deep Dive |
| CVE-2026-92154 | F´: File size bounds bypass in Svc::FileUplink via unsigned integer overflow in DATA packet validation | nasa | fprime | High | 8.1 | 2026-10-14 17:17:20 | Deep Dive |