| CVE ID | Title | Vendor | Product | Severity | CVSS Score | Published At | AI Analysis |
|---|---|---|---|---|---|---|---|
| CVE-2026-102893 | Zulip: OpenID Connect authentication ignores the email_verified claim | zulip | zulip | Critical | 9.1 | 2026-10-14 15:49:03 | Deep Dive |
| CVE-2026-49206 | rapidcsv: Integer overflow in iterator arithmetic causes out-of-bounds access | d99kris | rapidcsv | Low | 2.9 | 2026-10-14 15:44:43 | Deep Dive |
| CVE-2026-62858 | YOURLS: Unauthenticated File Inclusion | YOURLS | YOURLS | Medium | 5.3 | 2026-10-14 15:42:51 | Deep Dive |
| CVE-2026-86561 | Dpdk: dpdk: missing memory size validation before mmap in vhost memory region setup | Red Hat | Fast Datapath for RHEL 10 | Medium | 6.5 | 2026-10-14 15:42:43 | Deep Dive |
| CVE-2026-93683 | Dpdk: dpdk: guest-triggered out-of-bounds walk via vhost indirect descriptor length toctou | Red Hat | Fast Datapath for RHEL 10 | Medium | 6.4 | 2026-10-14 15:42:35 | Deep Dive |
| CVE-2026-110735 | Godot Engine<4.7.2堆溢出漏洞 | godotengine | Godot Engine | Low | 2.5 | 2026-10-14 15:41:50 | Deep Dive |
| CVE-2026-53614 | util-linux LIBMOUNT_FORCE_MOUNT2 allows nosuid and noexec bypass | util-linux | util-linux | High | 7.0 | 2026-10-14 15:40:54 | Deep Dive |
| CVE-2026-100394 | Nezha Monitoring: Whole-instance DoS in Nezha dashboard: a member can crash the process for every tenant | nezhahq | nezha | Medium | 6.5 | 2026-10-14 15:38:47 | Deep Dive |
| CVE-2026-91157 | Discourse: Media uploads remain publicly accessible after category permissions are restricted | discourse | discourse | High | 7.5 | 2026-10-14 15:37:02 | Deep Dive |
| CVE-2026-110734 | Godot Engine 4.7.2前版Hdr解码堆溢出 | godotengine | Godot Engine | Low | 2.5 | 2026-10-14 15:36:09 | Deep Dive |
| CVE-2026-91156 | Discourse: Chat MessageBus delivers read-restricted messages to unauthorized users | discourse | discourse | High | 7.5 | 2026-10-14 15:33:33 | Deep Dive |
| CVE-2026-91159 | Discourse: Stored oEmbed HTML injection via allowed iframe | discourse | discourse | High | 7.7 | 2026-10-14 15:30:14 | Deep Dive |
| CVE-2026-77572 | VeraCrypt: Missing authorization on veracrypt.sys IOCTLs exposes disk topology, symlink targets, and DeviceObject reference count to any client of \\.\VeraCrypt | veracrypt | VeraCrypt | Low | 3.3 | 2026-10-14 15:26:31 | Deep Dive |
| CVE-2026-91883 | Dell Terraform OME 插件 1.0.0-1.2.3 敏感信息注入漏洞 | Dell | Terraform Provider for OME | Medium | 4.3 | 2026-10-14 15:20:26 | Deep Dive |
| CVE-2026-89077 | MOVEit Transfer Identity validation flaw in SFTP authentication | Progress | MOVEit Transfer | High | 7.5 | 2026-10-14 15:16:24 | Deep Dive |
| CVE-2026-91882 | Dell Terraform Provider OME敏感信息注入漏洞 | Dell | Terraform Provider for OME | High | 8.6 | 2026-10-14 15:15:26 | Deep Dive |
| CVE-2026-89076 | MOVEit Transfer SQL injection in custom reporting | Progress | MOVEit Transfer | High | 7.2 | 2026-10-14 15:15:24 | Deep Dive |
| CVE-2026-89075 | MOVEit Transfer Local Disclosure of Session Information Vulnerability | Progress | MOVEit Transfer | High | 7.3 | 2026-10-14 15:14:29 | Deep Dive |
| CVE-2026-89074 | MOVEit Transfer Email MFA Bypass | Progress | MOVEit Transfer | High | 7.5 | 2026-10-14 15:12:50 | Deep Dive |
| CVE-2026-89073 | MOVEit Transfer Access restriction bypass in OAuth authentication | Progress | MOVEit Transfer | High | 7.5 | 2026-10-14 15:11:31 | Deep Dive |