Skip to content
OpenAdvisories

Archive

October 2026

Vulnerabilities first published in this month (UTC), newest first.

← September 2026 2026 / October November 2026 →
  1. 1400
  2. 2405
  3. 3114
  4. 464
  5. 5421
  6. 61017
  7. 7330
  8. 8492
  9. 9332
  10. 10412
  11. 11234
  12. 12683
  13. 132293
  14. 14824
  15. 15550
  16. 16480
  17. 17100
  18. 18552
  19. 19443
  20. 201925
  21. 21549
  22. 22488
  23. 23502
  24. 2476
  25. 25133
  26. 26768
  27. 27629
  28. 28636
  29. 29544
  30. 30688
  31. 31113
All Critical High Medium Low Exploited only Public exploit

9 results · Clear filters · Feed

  • High 8.1
    CVE-2026-119977 Exploited Public exploit

    WordPress Core 4.7.0 - 7.1.3 - Unauthenticated Upgrade-Window Staged-Installer Remote Code Execution

    WordPress Core is vulnerable to Remote Code Execution in versions 4.7 through 7.1.3. This is due to predictable, web-accessible staging paths used during full-package core upgrades. This makes it possible for unauthenticated attackers to execute code on the s…

    WordPress WordPress wordpress Web / CMS Debian
    KEV Nov 3, 2026
  • High 8.6
    CVE-2026-76418 Exploited

    Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Tunnel Denial of Service Vulnerability

    A vulnerability in the Remote Access SSL VPN service of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause the device to reload unex…

    Cisco Cisco Secure Firewall Threat Defense (FTD) Software Cisco Secure Firewall Adaptive Security Appliance (ASA) Software Network devices
    KEV Oct 29, 2026
  • High 7.0
    CVE-2026-111357 Exploited

    Ivanti Connect Secure 22.8R2.4 mishandles the manner in which the dsinvoked broker trusts DSCache configuration data, l…

    ivanti Connect Secure Network devices
    KEV Oct 30, 2026
  • High 8.5
    CVE-2026-0322 Exploited Public exploit

    PAN-OS: Authenticated Remote Code Execution (RCE) in the Management Interface

    A remote code execution (RCE) vulnerability in the management interface of Palo Alto Networks PAN-OS® software enables an authenticated attacker with network access to execute arbitrary code with root privileges on the firewall. The security risk posed by thi…

    Palo Alto Networks PAN-OS Prisma Access Cloud NGFW Network devices
    KEV Oct 14, 2026
  • High 7.8
    CVE-2026-106931 Exploited

    SiteGuard Server Edition contains an OS command injection vulnerability, which may allow an attacker to execute arbitra…

    EG Secure Solutions SiteGuard Server Edition for Nginx SiteGuard Server Edition for Apache httpd on FreeBSD SiteGuard Server Edition for Apache httpd
    KEV Oct 20, 2026
  • High 8.8
    CVE-2026-96951 Exploited

    Windows Shell Security Feature Bypass Vulnerability

    Improper neutralization of special elements used in a command ('command injection') in Windows Shell allows an unauthorized attacker to bypass a security feature over a network.

    Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows Browsers
    KEV Oct 13, 2026
  • High 8.6
    CVE-2026-104935 Exploited Public exploit Scanner template EPSS 89%

    Authentication bypass by spoofing in ICS before version 25.1.3.0 allows a remote unauthenticated attacker to execute ar…

    ivanti Connect Secure Network devices
    KEV Oct 13, 2026
  • High 7.3
    CVE-2026-105133 Exploited Public exploit Scanner template EPSS 84%

    Ahsay AhsayCBS API ApiStructsAction.java checkSysPwd improper authentication

    A vulnerability was detected in Ahsay AhsayCBS up to 9.15.2.69/10.3.4.44. This affects the function checkSysPwd of the file com/ahsay/obs/api/ApiStructsAction.java of the component API. Performing a manipulation of the argument random results in improper auth…

    Ahsay AhsayCBS
    KEV Oct 14, 2026
  • High 8.7
    CVE-2026-88779 Exploited EPSS 11%

    Memory overflow vulnerability leading to Denial of Service

    Vulnerability in NetScaler ADC and NetScaler Gateway. This issue affects ADC: before 14.1-73.41, before 13.1-64.28, before 14.1-73.41 FIPS, and before 13.1-37.282; Gateway: before 14.1-73.41 and before 13.1-64.28.

    NetScaler ADC Gateway
    KEV Oct 4, 2026