| CVE ID | Title | Vendor | Product | Severity | CVSS Score | Published At | AI Analysis |
|---|---|---|---|---|---|---|---|
| CVE-2026-110833 | FreeRDP before 3.32.0 Unbounded Memory Retention via RDPDR Proxy | FreeRDP | FreeRDP | Medium | 5.9 | 2026-10-14 22:52:08 | Deep Dive |
| CVE-2026-110832 | FreeRDP 2.0.0 before 3.32.0 Memory Exhaustion via DRDYNVC DATA_FIRST | FreeRDP | FreeRDP | Medium | 6.5 | 2026-10-14 22:52:07 | Deep Dive |
| CVE-2026-110831 | FreeRDP 3.13.0 before 3.32.0 Resource Leak via Drive Redirection IRP_MJ_CREATE | FreeRDP | FreeRDP | Medium | 4.3 | 2026-10-14 22:52:06 | Deep Dive |
| CVE-2026-110830 | FreeRDP before 3.32.0 Denial of Service via Serial IRP_MJ_CREATE | FreeRDP | FreeRDP | Medium | 5.9 | 2026-10-14 22:52:05 | Deep Dive |
| CVE-2026-110829 | FreeRDP 3.0.0 before 3.32.0 Null Pointer Dereference via rdpsnd Fragment | FreeRDP | FreeRDP | Medium | 6.5 | 2026-10-14 22:52:04 | Deep Dive |
| CVE-2026-107795 | Improper Authorization in TP-Link Omada Controller TLS Certificate and Private Key Management API | TP-Link Systems Inc. | Omada Software Controller | High | 7.5 | 2026-10-14 22:26:50 | Deep Dive |
| CVE-2026-110816 | qs.stringify with arrayFormat comma throws TypeError on array elements that cannot be coerced to a string | ljharb | qs | Medium | 5.3 | 2026-10-14 22:05:24 | Deep Dive |
| CVE-2026-102298 | Insufficient Authorization and User Boundary Validation in Omada Controller MSP | TP-Link System Inc. | Omada Software Controller (Windows) | High | 7.5 | 2026-10-14 21:55:10 | Deep Dive |
| CVE-2026-110698 | Praat Model Loader whisper.cpp whisper_model_load out-of-bounds write | - | Praat | Medium | 6.3 | 2026-10-14 21:45:10 | Deep Dive |
| CVE-2026-108337 | Password Reset Code Accessible in User Listing API | Hitachi Vantara | Remot Ops Agent | High | 7.4 | 2026-10-14 21:43:08 | Deep Dive |
| CVE-2026-108336 | Token Signing Key Allows Unauthenticated Administrative Access | Hitachi Vantara | Remot Ops Agent | Critical | 9.1 | 2026-10-14 21:41:40 | Deep Dive |
| CVE-2026-108335 | Password Reset Functionality Missing Brute-Force Protection | Hitachi Vantara | Remote Ops Agent | Critical | 9.1 | 2026-10-14 21:39:17 | Deep Dive |
| CVE-2026-110696 | itsmeravitejak Online-Examination-System dbtables.sql information disclosure | itsmeravitejak | Online-Examination-System | Medium | 5.3 | 2026-10-14 21:30:11 | Deep Dive |
| CVE-2026-110695 | turboderp ExLlamaV2 Safetensors Tensor Loader stloader.py STFile.get_tensor buffer overflow | turboderp | ExLlamaV2 | Medium | 6.3 | 2026-10-14 21:15:10 | Deep Dive |
| CVE-2026-110694 | OAID Tengine tmfile Model Loader tm2_serializer.c get_tm_file_model out-of-bounds | OAID | Tengine | Medium | 6.3 | 2026-10-14 21:00:21 | Deep Dive |
| CVE-2026-110689 | OpenClaw ClawScan Static Scanner runner.go shouldSkipTargetPath protection mechanism | OpenClaw | ClawScan | Medium | 5.3 | 2026-10-14 20:45:21 | Deep Dive |
| CVE-2026-104109 | FileRise: Authenticated ZIP extraction follows a pre-existing symlink and deletes files outside the storage root | error311 | FileRise | Medium | 6.8 | 2026-10-14 20:44:29 | Deep Dive |
| CVE-2026-104107 | FileRise: Authenticated path traversal escapes configured storage root through inherited ACLs | error311 | FileRise | Medium | 6.5 | 2026-10-14 20:42:09 | Deep Dive |
| CVE-2026-104110 | FileRise: Unauthenticated disclosure of internal folder path, client email, and upload policy for FileRise Pro client portals via /api/pro/portals/get.php | error311 | FileRise | Medium | 5.3 | 2026-10-14 20:40:16 | Deep Dive |
| CVE-2026-104108 | FileRise OIDC login can bind an attacker identity to an existing local account | error311 | FileRise | High | 8.1 | 2026-10-14 20:39:28 | Deep Dive |