| CVE ID | Title | Vendor | Product | Severity | CVSS Score | Published At | AI Analysis |
|---|---|---|---|---|---|---|---|
| CVE-2026-89073 | MOVEit Transfer Access restriction bypass in OAuth authentication | Progress | MOVEit Transfer | High | 7.5 | 2026-10-14 15:11:31 | Deep Dive |
| CVE-2026-103929 | mise permits untrusted local configuration to override default shell arguments | jdx | mise | High | 7.8 | 2026-10-14 15:11:14 | Deep Dive |
| CVE-2026-89072 | MOVEit Transfer Authorization Flaw in Certificate Management | Progress | MOVEit Transfer | High | 7.5 | 2026-10-14 15:10:41 | Deep Dive |
| CVE-2026-91881 | Dell Terraform Provider <1.6.2证书验证绕过漏洞 | Dell | Terraform Provider for Redfish | Critical | 9.0 | 2026-10-14 15:10:11 | Deep Dive |
| CVE-2026-89071 | MOVEit Transfer LDAP injection in certificate-based authentication | Progress | MOVEit Transfer | High | 7.5 | 2026-10-14 15:09:45 | Deep Dive |
| CVE-2026-89070 | MOVEit Transfer OIDC Authentication Replay Vulnerability | Progress | MOVEit Transfer | High | 7.5 | 2026-10-14 15:08:46 | Deep Dive |
| CVE-2026-89069 | MOVEit Transfer Stored XSS Vulnerability in Ad Hoc Packages | Progress | MOVEit Transfer | High | 8.0 | 2026-10-14 15:07:01 | Deep Dive |
| CVE-2026-89068 | MOVEit Transfer Authentication bypass in LDAP sign-on | Progress | MOVEit Transfer | High | 8.1 | 2026-10-14 15:06:14 | Deep Dive |
| CVE-2026-101896 | Angular: Denial of Service via Numeric URL Matrix Parameters in Server-Side Rendering (SSR) | angular | angular | High | 8.2 | 2026-10-14 15:05:43 | Deep Dive |
| CVE-2026-89067 | MOVEit Transfer Secure Messaging Authentication Bypass | Progress | MOVEit Transfer | High | 8.8 | 2026-10-14 15:05:27 | Deep Dive |
| CVE-2026-76113 | Dell Terraform Provider 1.1.0-1.6.1敏感信息泄露漏洞 | Dell | Terraform Provider for Redfish | Medium | 4.3 | 2026-10-14 15:04:44 | Deep Dive |
| CVE-2026-87093 | MOVEit Transfer Service Directory Writable by Local Users Enables Local Privilege Escalation | Progress | MOVEit Transfer | High | 8.8 | 2026-10-14 15:04:17 | Deep Dive |
| CVE-2026-101897 | Angular DevTools (Local DoS) | angular | angular | Medium | 5.1 | 2026-10-14 15:03:36 | Deep Dive |
| CVE-2026-110719 | Portkey AI Gateway 1.14.0 through 1.15.2 SSRF via x-portkey-custom-host Header | Portkey-AI | gateway | High | 7.2 | 2026-10-14 15:01:32 | Deep Dive |
| CVE-2026-110718 | TurboDocx html-to-docx through 1.23.1 SSRF via img src Remote Image Download | TurboDocx | html-to-docx | Medium | 5.9 | 2026-10-14 15:01:32 | Deep Dive |
| CVE-2026-110716 | unshield through 1.6.2 Heap Out-of-Bounds Read via unshield_get_file_table | twogood | unshield | Medium | 5.5 | 2026-10-14 15:01:31 | Deep Dive |
| CVE-2026-110717 | Janus WebRTC Server through 1.4.3 Path Traversal via Record&Play Filename | meetecho | janus-gateway | Medium | 5.3 | 2026-10-14 15:01:31 | Deep Dive |
| CVE-2026-110715 | MuJS 1.3.6 before 1.3.9 Heap Out-of-Bounds Read/Write via Array.prototype.sort | Artifex Software | MuJS | Medium | 6.1 | 2026-10-14 15:01:30 | Deep Dive |
| CVE-2026-110714 | libsmb2 through 6.2 Heap Out-of-Bounds Read via decode_acl Integer Underflow | sahlberg | libsmb2 | Medium | 6.5 | 2026-10-14 15:01:29 | Deep Dive |
| CVE-2026-110713 | libsmb2 through 6.2 Heap Out-of-Bounds Read via File System Info Decoders | sahlberg | libsmb2 | Medium | 6.5 | 2026-10-14 15:01:28 | Deep Dive |