Skip to content
OpenAdvisories

Archive

14 October 2026

Vulnerabilities first published on this day (UTC), newest first.

← September 2026 2026 / October /14 November 2026 →
  1. 1400
  2. 2405
  3. 3114
  4. 464
  5. 5421
  6. 61017
  7. 7330
  8. 8492
  9. 9332
  10. 10412
  11. 11234
  12. 12683
  13. 132293
  14. 14824
  15. 15550
  16. 16480
  17. 17100
  18. 18552
  19. 19444
  20. 201925
  21. 21549
  22. 22488
  23. 23502
  24. 2476
  25. 25133
  26. 26768
  27. 27629
  28. 28636
  29. 29544
  30. 30688
  31. 31113
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Critical 9.8
    CVE-2026-76519 Exploited Public exploit

    Cisco Secure Email Gateway Arbitrary File Write Vulnerability

    A vulnerability in the Advanced Malware Protection (AMP) feature of Cisco Secure Email Gateway could allow an unauthenticated, remote attacker to write arbitrary files on the underlying operating system. This vulnerability is due to improper handling of email…

    Cisco Cisco Secure Email Network devices
    KEV Oct 14, 2026
  • Critical 9.8
    CVE-2026-59774 Public exploit Scanner template EPSS 28%

    Gitea Org-mode file disclosure and code execution

    Gitea's Org-mode markup renderer processes INCLUDE directives supplied to the repository markup endpoint without preventing access to server-side files. An unauthenticated attacker can use a suitable public repository to read files accessible to the Gitea ser…

    Gitea Gitea
  • Critical 9.8
    CVE-2026-110634 Public exploit

    git-diff before 2.0.7 OS Command Injection via gitDiff Input Strings

    git-diff before 2.0.7 contains an OS command injection vulnerability that allows attackers to execute shell commands by supplying crafted strings to the gitDiff API. Attackers who control a diffed document string can embed $(cmd) or backtick substitutions tha…

    danday74 git-diff git-diff npm
  • Critical 9.8
    CVE-2026-104748 Public exploit

    SimpleForm <= 3.10.0 - Unauthenticated Privilege Escalation to wp_capabilities Mass Assignment via simpleform_wp_register

    The SimpleForm – Form Maker to Chat Apps with Quiz, Poll and Multi Lead Notifications plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 3.10.0 This is due to the `wp_ajax_nopriv_simpleform_wp_register` AJAX actio…

    wpazleen SimpleForm – Form Maker to Chat Apps with Quiz, Poll and Multi Lead Notifications Web / CMS
  • Critical 9.2
    CVE-2026-110447 Exploited Public exploit Scanner template EPSS 73%

    Collabora Online Built-in CODE Server before 26.4.303 (richdocumentscode), a Nextcloud app, allows remote code executio…

    Collabora Collabora Online - Built-in CODE Server
    KEV Oct 23, 2026
  • Critical 9.8
    CVE-2026-97657 Public exploit

    Abandoned Cart Pro for WooCommerce <= 10.8.0 - Unauthenticated Authentication Bypass via Malleable Encryption and Bypassable HMAC via Recovery Link 'validate' Parameter

    The Abandoned Cart Pro for WooCommerce plugin for WordPress is vulnerable to Authentication Bypass via Malleable Encryption and Bypassable HMAC in all versions up to, and including, 10.8.0. This is due to the use of MAC-free AES-CTR encryption for cart-recove…

    Tyche Softwares Abandoned Cart Pro for WooCommerce Web / CMS