Skip to content
OpenAdvisories

Archive

13 October 2026

Vulnerabilities first published on this day (UTC), newest first.

← September 2026 2026 / October /13 November 2026 →
  1. 1400
  2. 2405
  3. 3114
  4. 464
  5. 5421
  6. 61017
  7. 7330
  8. 8492
  9. 9332
  10. 10412
  11. 11234
  12. 12683
  13. 132293
  14. 14824
  15. 15550
  16. 16480
  17. 17100
  18. 18552
  19. 19444
  20. 201925
  21. 21549
  22. 22488
  23. 23502
  24. 2476
  25. 25133
  26. 26768
  27. 27629
  28. 28636
  29. 29544
  30. 30688
  31. 31113
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • Critical 9.8
    CVE-2026-105016 Public exploit

    Microsoft QUIC Remote Code Execution Vulnerability

    Heap-based buffer overflow in Microsoft QUIC allows an unauthorized attacker to execute code over a network.

    Microsoft Windows Server 2022 Windows Server 2025 Windows Server 2025 (Server Core installation) Windows Ubuntu Alpine NuGet
  • Critical 10.0
    CVE-2026-103849 Public exploit

    Adobe Commerce | Improper Neutralization of Special Elements Used in a Template Engine (CWE-1336)

    Adobe Commerce is affected by an Improper Neutralization of Special Elements Used in a Template Engine vulnerability that could result in arbitrary code execution in the context of the current user, potentially gaining elevated access or control over the vict…

    Adobe Adobe Commerce Magento Open Source Adobe Commerce B2B Web / CMS
  • Critical 9.4
    CVE-2026-106173 Public exploit

    A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiSIEM 7.…

    Fortinet FortiSIEM Network devices
  • Critical 9.4
    CVE-2026-105445 Public exploit

    Docker Hub account conversion could reassign an active personal access token to another user

    An Incorrect Privilege Assignment vulnerability in Docker Hub's account-to-organization conversion feature allowed an authenticated attacker to reassign a personal access token (PAT) they controlled to another Docker Hub user without rotating or revoking the …

    Docker Docker Hub
  • Critical 10.0
    CVE-2026-97229 Exploited Public exploit Scanner template EPSS 69%

    Integer Overflow or Wraparound in GitLab

    GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an unauthenticated user to execute arbitrary code on the GitLab server…

    GitLab GitLab gitlab ruby Web / CMS Debian Ubuntu Azure Linux Alpine Wolfi
    KEV Oct 29, 2026
  • Critical 9.8
    CVE-2026-104584 Public exploit

    reNgine up to v2.2.0 and current master branch (commit de4199222cca5618f1255930ce78987e47d43a99) is vulnerable to OS Co…

  • Critical 9.8
    CVE-2026-104585 Public exploit

    Mobile Security Framework (MobSF) v4.5.2 is vulnerable to Command Injection in /download_data/, /api/v1/scan, Dynamic A…

  • Critical 9.8
    CVE-2026-37107 Public exploit

    An issue in HTMLy v.3.1.1 allows a remote attacker to escalate privileges via the get_feed function in the admin.php co…