https://bugrater.com/releases/july-2026-security-updates2026-10-19 https://bugrater.com/releases/ios-26-6-and-ipados-26-62026-10-19 https://bugrater.com/releases/macos-tahoe-26-62026-10-19 https://bugrater.com/releases/macos-sequoia-15-7-82026-10-19 https://bugrater.com/releases/stable-channel-update-for-desktop-151-0-7922-71-722026-10-19 https://bugrater.com/releases/stable-channel-update-for-desktop-150-0-7871-186-1872026-10-19 https://bugrater.com/releases/june-2026-security-updates2026-10-19 https://bugrater.com/releases/may-2026-security-updates2026-10-19 https://bugrater.com/releases/mozilla-bug-bounty-hall-of-fame2026-10-19 https://bugrater.com/releases/nvidia-product-security-acknowledgements2026-10-19 https://bugrater.com/releases/apple-web-server-security-acknowledgements2026-10-19 https://bugrater.com/releases/macos-tahoe-26-6-12026-10-19 https://bugrater.com/releases/macos-sequoia-15-7-92026-10-19 https://bugrater.com/releases/macos-sonoma-14-8-92026-10-19 https://bugrater.com/releases/august-2026-early-security-updates2026-10-19 https://bugrater.com/releases/stable-channel-update-for-desktop-151-0-7922-108-1092026-10-19 https://bugrater.com/releases/macos-sonoma-14-8-82026-10-19 https://bugrater.com/releases/tvos-26-62026-10-19 https://bugrater.com/releases/watchos-26-62026-10-19 https://bugrater.com/releases/stable-channel-update-for-desktop-151-0-7922-137-1382026-10-19 https://bugrater.com/releases/visionos-26-62026-10-19 https://bugrater.com/releases/safari-26-62026-10-19 https://bugrater.com/releases/ios-26-5-2-and-ipados-26-5-22026-10-19 https://bugrater.com/releases/ios-26-6-1-and-ipados-26-6-12026-10-19 https://bugrater.com/releases/ios-18-7-10-and-ipados-18-7-102026-10-19 https://bugrater.com/releases/macos-tahoe-26-6-22026-10-19 https://bugrater.com/releases/safari-26-6-12026-10-19 https://bugrater.com/releases/macos-tahoe-26-5-22026-10-19 https://bugrater.com/releases/safari-26-5-22026-10-19 https://bugrater.com/releases/stable-channel-update-for-desktop-151-0-7922-169-1702026-10-19 https://bugrater.com/releases/beats-firmware-update-1b2112026-10-19 https://bugrater.com/releases/safari-26-52026-10-19 https://bugrater.com/releases/ios-26-5-and-ipados-26-52026-10-19 https://bugrater.com/releases/axis-communications-security-hall-of-fame2026-10-19 https://bugrater.com/releases/ios-18-7-9-and-ipados-18-7-92026-10-19 https://bugrater.com/releases/stable-channel-update-for-desktop-151-0-7922-173-1742026-10-19 https://bugrater.com/releases/jenkins-security-advisory-2026-08-052026-10-19 https://bugrater.com/releases/jenkins-security-advisory-2026-06-242026-10-19 https://bugrater.com/releases/jenkins-security-advisory-2026-06-102026-10-19 https://bugrater.com/releases/drupal-core-moderately-critical-cross-site-scripting-sa-core-2026-0122026-10-19 https://bugrater.com/releases/drupal-core-moderately-critical-cross-site-scripting-sa-core-2026-0112026-10-19 https://bugrater.com/releases/drupal-core-moderately-critical-information-disclosure-sa-core-2026-0102026-10-19 https://bugrater.com/releases/drupal-core-moderately-critical-improper-validation-sa-core-2026-0092026-10-19 https://bugrater.com/releases/drupal-core-moderately-critical-server-side-request-forgery-sa-core-2026-0082026-10-19 https://bugrater.com/releases/drupal-core-less-critical-cache-poisoning-and-open-redirect-sa-core-2026-0072026-10-19 https://bugrater.com/releases/drupal-core-moderately-critical-gadget-chain-sa-core-2026-0062026-10-19 https://bugrater.com/releases/drupal-core-critical-php-object-injection-sa-core-2026-0052026-10-19 https://bugrater.com/releases/gitlab-critical-patch-release-19-2-4-19-1-6-19-0-8-18-11-112026-10-19 https://bugrater.com/releases/gitlab-patch-release-19-2-2-19-1-4-19-0-62026-10-19 https://bugrater.com/releases/mapp-26-0001-site-plugin-can-read-web-service-tokens-from-other-stored-sites2026-10-19 https://bugrater.com/releases/msa-26-0029-missing-capability-checks-in-report-builder-fragment-callbacks2026-10-19 https://bugrater.com/releases/msa-26-0028-dos-risk-via-user-profile-description2026-10-19 https://bugrater.com/releases/msa-26-0027-blind-ssrf-risk-in-mnet-peers-function2026-10-19 https://bugrater.com/releases/msa-26-0026-missing-capability-check-in-assignment-marker-allocation2026-10-19 https://bugrater.com/releases/msa-26-0025-csrf-risk-in-quiz-attempt-regrading2026-10-19 https://bugrater.com/releases/zsb-26017-zoom-clients-use-after-free2026-08-21 https://bugrater.com/releases/zsb-26016-zoom-clients-buffer-over-read2026-08-21 https://bugrater.com/releases/wikimedia-security-hall-of-fame2026-08-21 https://bugrater.com/releases/palo-alto-networks-security-researcher-acknowledgments2026-10-19 https://bugrater.com/releases/philips-coordinated-vulnerability-disclosure-hall-of-honors2026-10-19 https://bugrater.com/releases/schneider-electric-cybersecurity-wall-of-thanks2026-10-19 https://bugrater.com/releases/signify-coordinated-vulnerability-disclosure-hall-of-fame2026-10-19 https://bugrater.com/releases/jenkins-security-advisory-2026-05-272026-10-19 https://bugrater.com/releases/jenkins-security-advisory-2026-04-292026-10-19 https://bugrater.com/releases/jenkins-security-advisory-2026-03-182026-10-19 https://bugrater.com/releases/drupal-core-highly-critical-sql-injection-sa-core-2026-0042026-10-19 https://bugrater.com/releases/drupal-core-moderately-critical-cross-site-scripting-sa-core-2026-0032026-10-19 https://bugrater.com/releases/drupal-core-moderately-critical-gadget-chain-sa-core-2026-0022026-10-19 https://bugrater.com/releases/drupal-core-critical-cross-site-scripting-sa-core-2026-0012026-10-19 https://bugrater.com/releases/drupal-core-moderately-critical-information-disclosure-sa-core-2025-0082026-10-19 https://bugrater.com/releases/drupal-core-moderately-critical-defacement-sa-core-2025-0072026-10-19 https://bugrater.com/releases/drupal-core-moderately-critical-gadget-chain-sa-core-2025-0062026-10-19 https://bugrater.com/releases/drupal-core-moderately-critical-denial-of-service-sa-core-2025-0052026-10-19 https://bugrater.com/releases/gitlab-patch-release-19-2-1-19-1-3-19-0-52026-10-19 https://bugrater.com/releases/gitlab-patch-release-19-1-2-19-0-4-18-11-72026-10-19 https://bugrater.com/releases/msa-26-0024-missing-capability-checks-in-ai-placement-web-services2026-10-19 https://bugrater.com/releases/msa-26-0023-csrf-risk-when-adding-quiz-section-headings2026-10-19 https://bugrater.com/releases/msa-26-0022-csrf-risk-in-group-messaging-state-toggle2026-10-19 https://bugrater.com/releases/msa-26-0021-csrf-and-xss-in-grade-item-idnumber-editing2026-10-19 https://bugrater.com/releases/zsb-26015-zoom-clients-buffer-over-write2026-08-26 https://bugrater.com/releases/zsb-26018-zoom-vdi-path-traversal2026-08-26 https://bugrater.com/releases/jenkins-security-advisory-2026-02-182026-10-19 https://bugrater.com/releases/jenkins-security-advisory-2025-12-102026-10-19 https://bugrater.com/releases/jenkins-security-advisory-2025-10-292026-10-19 https://bugrater.com/releases/drupal-core-moderately-critical-cross-site-scripting-sa-core-2025-0042026-10-19 https://bugrater.com/releases/drupal-core-moderately-critical-gadget-chain-sa-core-2025-0032026-10-19 https://bugrater.com/releases/drupal-core-moderately-critical-access-bypass-sa-core-2025-0022026-10-19 https://bugrater.com/releases/drupal-core-critical-cross-site-scripting-sa-core-2025-0012026-10-19 https://bugrater.com/releases/screenshot-critical-unsupported-sa-contrib-2026-1022026-10-19 https://bugrater.com/releases/link-content-parser-critical-unsupported-sa-contrib-2026-1012026-10-19 https://bugrater.com/releases/quick-tabs-moderately-critical-access-bypass-sa-contrib-2026-0992026-10-19 https://bugrater.com/releases/gitlab-patch-release-19-1-1-19-0-3-18-11-62026-10-19 https://bugrater.com/releases/gitlab-patch-release-19-0-2-18-11-5-18-10-82026-10-19 https://bugrater.com/releases/zsb-26014-zoom-workplace-for-windows-improper-input-validation2026-08-26 https://bugrater.com/releases/zsb-26013-zoom-workplace-vdi-plugin-for-windows-improper-input-validation2026-08-26 https://bugrater.com/releases/jenkins-security-advisory-2025-09-172026-10-19 https://bugrater.com/releases/jenkins-security-advisory-2025-09-032026-10-19 https://bugrater.com/releases/jenkins-security-advisory-2025-07-092026-10-19 https://bugrater.com/releases/external-authentication-moderately-critical-access-bypass-sa-contrib-2026-0982026-10-19 https://bugrater.com/releases/entity-share-websub-moderately-critical-server-side-request-forgery-ssrf-sa-contrib-2026-0972026-10-19 https://bugrater.com/releases/diff-moderately-critical-access-bypass-sa-contrib-2026-0962026-10-19 https://bugrater.com/releases/commerce-paypal-moderately-critical-access-bypass-sa-contrib-2026-0952026-10-19 https://bugrater.com/releases/entity-browser-moderately-critical-cross-site-scripting-sa-contrib-2026-0942026-10-19 https://bugrater.com/releases/edit-in-place-field-moderately-critical-access-bypass-sa-contrib-2026-0932026-10-19 https://bugrater.com/releases/gitlab-patch-release-19-0-1-18-11-4-18-10-72026-10-19 https://bugrater.com/releases/gitlab-patch-release-18-11-3-18-10-6-18-9-72026-10-19 https://bugrater.com/releases/zsb-26012-zoom-clients-for-windows-race-condition2026-08-26 https://bugrater.com/releases/zsb-26011-zoom-rooms-for-windows-improper-privilege-management2026-08-25 https://bugrater.com/releases/jenkins-security-advisory-2025-05-142026-10-19 https://bugrater.com/releases/jenkins-security-advisory-2025-04-102026-10-19 https://bugrater.com/releases/token-content-access-moderately-critical-access-bypass-sa-contrib-2026-0902026-10-19 https://bugrater.com/releases/photoswipe-responsive-javascript-modal-image-gallery-moderately-critical-access-bypass-sa-contrib-2026-0882026-10-19 https://bugrater.com/releases/webform-rest-moderately-critical-access-bypass-sa-contrib-2026-0872026-10-19 https://bugrater.com/releases/email-login-otp-critical-unsupported-sa-contrib-2026-0852026-10-19 https://bugrater.com/releases/gitlab-patch-release-18-11-1-18-10-4-18-9-62026-10-19 https://bugrater.com/releases/gitlab-patch-release-18-10-3-18-9-5-18-8-92026-10-19 https://bugrater.com/releases/gitlab-patch-release-18-10-1-18-9-3-18-8-72026-10-19 https://bugrater.com/releases/zsb-26010-zoom-workplace-mobile-clients-improper-authorization-in-handler-for-custom-url-scheme2026-08-26 https://bugrater.com/releases/zsb-26009-remote-control-for-zoom-contact-center-for-windows-insufficient-verification-of-data-authenticity2026-08-26 https://bugrater.com/releases/stable-channel-update-for-desktop2026-10-19 https://bugrater.com/releases/jenkins-security-advisory-2025-04-022026-10-19 https://bugrater.com/releases/jenkins-security-advisory-2025-03-192026-10-19 https://bugrater.com/releases/jenkins-security-advisory-2025-03-052026-10-19 https://bugrater.com/releases/gitlab-patch-release-18-9-2-18-8-6-18-7-62026-10-19 https://bugrater.com/releases/gitlab-patch-release-18-9-1-18-8-5-18-7-52026-10-19 https://bugrater.com/releases/gitlab-patch-release-18-8-4-18-7-4-18-6-62026-10-19 https://bugrater.com/releases/zsb-26008-zoom-rooms-for-windows-untrusted-search-path2026-08-26 https://bugrater.com/releases/zsb-26007-zoom-workplace-vdi-plugin-for-windows-external-control-of-file-name-or-path2026-08-26 https://bugrater.com/releases/macos-tahoe-26-52026-10-19 https://bugrater.com/releases/jenkins-security-advisory-2025-01-222026-10-19 https://bugrater.com/releases/jenkins-security-advisory-2024-11-272026-10-19 https://bugrater.com/releases/jenkins-security-advisory-2024-11-132026-10-19 https://bugrater.com/releases/slick-carousel-moderately-critical-cross-site-scripting-sa-contrib-2026-1172026-10-19 https://bugrater.com/releases/monster-menus-moderately-critical-cross-site-scripting-sa-contrib-2026-1162026-10-19 https://bugrater.com/releases/ldap-active-directory-integration-moderately-critical-information-disclosure-sa-contrib-2026-1152026-10-19 https://bugrater.com/releases/entity-pdf-moderately-critical-access-bypass-sa-contrib-2026-1142026-10-19 https://bugrater.com/releases/entity-api-moderately-critical-information-disclosure-sa-contrib-2026-1132026-10-19 https://bugrater.com/releases/dxpr-builder-the-ai-visual-page-builder-for-drupal-moderately-critical-information-disclosure-sa-contrib-2026-1122026-10-19 https://bugrater.com/releases/disable-login-page-moderately-critical-access-bypass-sa-contrib-2026-1112026-10-19 https://bugrater.com/releases/disable-login-page-moderately-critical-access-bypass-sa-contrib-2026-1102026-10-19 https://bugrater.com/releases/gitlab-patch-release-19-3-1-19-2-5-19-1-72026-10-19 https://bugrater.com/releases/gitlab-patch-release-18-8-2-18-7-2-18-6-42026-10-19 https://bugrater.com/releases/zsb-26006-zoom-workplace-for-ios-protection-mechanism-failure2026-10-18 https://bugrater.com/releases/zsb-26005-zoom-workplace-for-windows-external-control-of-file-name-or-path2026-10-18 https://bugrater.com/releases/jenkins-security-advisory-2024-10-022026-10-19 https://bugrater.com/releases/jenkins-security-advisory-2024-08-072026-10-19 https://bugrater.com/releases/jenkins-security-advisory-2024-06-262026-10-19 https://bugrater.com/releases/digital-signage-framework-moderately-critical-access-bypass-sa-contrib-2026-1092026-10-19 https://bugrater.com/releases/data-field-moderately-critical-information-disclosure-sa-contrib-2026-1082026-10-19 https://bugrater.com/releases/content-moderation-notifications-moderately-critical-access-bypass-sa-contrib-2026-1072026-10-19 https://bugrater.com/releases/commerce-cybersource-moderately-critical-insufficient-input-validation-sa-contrib-2026-1062026-10-19 https://bugrater.com/releases/captcha-protected-page-moderately-critical-cookie-forgery-sa-contrib-2026-1052026-10-19 https://bugrater.com/releases/blazy-less-critical-access-bypass-sa-contrib-2026-1042026-10-19 https://bugrater.com/releases/address-suggestion-moderately-critical-cross-site-scripting-sa-contrib-2026-1032026-10-19 https://bugrater.com/releases/gitlab-patch-release-18-7-1-18-6-3-18-5-52026-10-19 https://bugrater.com/releases/gitlab-patch-release-18-6-2-18-5-4-18-4-62026-10-19 https://bugrater.com/releases/zsb-26004-zoom-clients-for-windows-improper-privilege-management2026-10-18 https://bugrater.com/releases/zsb-26003-zoom-rooms-for-windows-improper-input-validation2026-10-18 https://bugrater.com/releases/jenkins-security-advisory-2024-05-242026-10-19 https://bugrater.com/releases/jenkins-security-advisory-2024-05-022026-10-19 https://bugrater.com/releases/gitlab-patch-release-18-6-1-18-5-3-18-4-52026-10-19 https://bugrater.com/releases/gitlab-patch-release-18-5-2-18-4-4-18-3-62026-10-19 https://bugrater.com/releases/gitlab-patch-release-18-5-1-18-4-3-18-3-52026-10-19 https://bugrater.com/releases/zsb-26002-zoom-workplace-clients-for-windows-improper-check2026-10-18 https://bugrater.com/releases/zsb-26001-zoom-node-deployments-command-injection2026-10-18 https://bugrater.com/releases/jenkins-security-advisory-2024-03-062026-10-19 https://bugrater.com/releases/jenkins-security-advisory-2024-01-242026-10-19 https://bugrater.com/releases/gitlab-patch-release-18-4-2-18-3-4-18-2-82026-10-19 https://bugrater.com/releases/gitlab-patch-release-18-4-1-18-3-3-18-2-72026-10-19 https://bugrater.com/releases/gitlab-patch-release-18-3-2-18-2-6-18-1-62026-10-19 https://bugrater.com/releases/jenkins-security-advisory-2023-12-132026-10-19 https://bugrater.com/releases/jenkins-security-advisory-2023-11-292026-10-19 https://bugrater.com/releases/jenkins-security-advisory-2023-10-252026-10-19 https://bugrater.com/releases/gitlab-patch-release-18-3-1-18-2-5-18-1-52026-10-19 https://bugrater.com/releases/jenkins-security-advisory-2023-09-202026-10-19 https://bugrater.com/releases/jenkins-security-advisory-2023-09-062026-10-19 https://bugrater.com/releases/gitlab-patch-release-18-2-2-18-1-4-18-0-62026-10-19 https://bugrater.com/releases/gitlab-patch-release-18-2-1-18-1-3-18-0-52026-10-19 https://bugrater.com/releases/gitlab-patch-release-18-1-2-18-0-4-17-11-62026-10-19 https://bugrater.com/releases/stable-channel-update-for-desktop-152-0-7977-75-762026-10-19 https://bugrater.com/releases/jenkins-security-advisory-2023-08-162026-10-19 https://bugrater.com/releases/jenkins-security-advisory-2023-07-262026-10-19 https://bugrater.com/releases/jenkins-security-advisory-2023-07-122026-10-19 https://bugrater.com/releases/gitlab-patch-release-18-1-1-18-0-3-17-11-52026-10-19 https://bugrater.com/releases/gitlab-patch-release-18-0-2-17-11-4-17-10-82026-10-19 https://bugrater.com/releases/jenkins-security-advisory-2026-09-022026-10-19 https://bugrater.com/releases/jenkins-security-advisory-2023-06-142026-10-19 https://bugrater.com/releases/jenkins-security-advisory-2023-05-162026-10-19 https://bugrater.com/releases/webform-submissions-delete-moderately-critical-access-bypass-sa-contrib-2026-1332026-10-19 https://bugrater.com/releases/unpublished-node-permissions-critical-access-bypass-sa-contrib-2026-1322026-10-19 https://bugrater.com/releases/photoswipe-responsive-javascript-modal-image-gallery-moderately-critical-cross-site-scripting-sa-contrib-2026-1312026-10-19 https://bugrater.com/releases/monobank-payment-api-moderately-critical-access-bypass-sa-contrib-2026-1302026-10-19 https://bugrater.com/releases/media-library-importer-moderately-critical-access-bypass-sa-contrib-2026-1292026-10-19 https://bugrater.com/releases/mailer-plus-log-moderately-critical-access-bypass-sa-contrib-2026-1282026-10-19 https://bugrater.com/releases/jsonapi-role-access-critical-access-bypass-sa-contrib-2026-1272026-10-19 https://bugrater.com/releases/islandora-moderately-critical-access-bypass-sa-contrib-2026-1262026-10-19 https://bugrater.com/releases/stable-channel-update-for-desktop-152-0-7977-82-832026-10-19 https://bugrater.com/releases/jenkins-security-advisory-2023-04-122026-10-19 https://bugrater.com/releases/jenkins-security-advisory-2023-03-212026-10-19 https://bugrater.com/releases/jenkins-security-advisory-2023-03-082026-10-19 https://bugrater.com/releases/email-verification-sms-verification-otp-verification-critical-cross-site-scripting-sa-contrib-2026-1252026-10-19 https://bugrater.com/releases/email-verification-sms-verification-otp-verification-critical-access-bypass-sa-contrib-2026-1242026-10-19 https://bugrater.com/releases/component-blocks-moderately-critical-cross-site-scripting-sa-contrib-2026-1232026-10-19 https://bugrater.com/releases/calculate-working-days-critical-access-bypass-sa-contrib-2026-1222026-10-19 https://bugrater.com/releases/ai-translate-moderately-critical-access-bypass-sa-contrib-2026-1212026-10-19 https://bugrater.com/releases/ai-artificial-intelligence-moderately-critical-access-bypass-sa-contrib-2026-1202026-10-19 https://bugrater.com/releases/ai-artificial-intelligence-moderately-critical-cross-site-scripting-sa-contrib-2026-1192026-10-19 https://bugrater.com/releases/advanced-search-moderately-critical-access-bypass-sa-contrib-2026-1182026-10-19 https://bugrater.com/releases/jenkins-security-advisory-2023-02-152026-10-19 https://bugrater.com/releases/jenkins-security-advisory-2023-01-242026-10-19 https://bugrater.com/releases/jenkins-security-advisory-2022-12-072026-10-19 https://bugrater.com/releases/jenkins-security-advisory-2022-11-152026-10-19 https://bugrater.com/releases/jenkins-security-advisory-2022-10-192026-10-19 https://bugrater.com/releases/september-2026-early-security-updates2026-10-19 https://bugrater.com/releases/jenkins-security-advisory-2022-09-212026-10-19 https://bugrater.com/releases/jenkins-security-advisory-2022-08-232026-10-19 https://bugrater.com/releases/jenkins-security-advisory-2022-07-272026-10-19 https://bugrater.com/releases/jenkins-security-advisory-2022-06-302026-10-19 https://bugrater.com/releases/jenkins-security-advisory-2022-06-222026-10-19 https://bugrater.com/releases/stable-channel-update-for-desktop-22026-10-19 https://bugrater.com/releases/jenkins-security-advisory-2022-05-172026-10-19 https://bugrater.com/releases/jenkins-security-advisory-2022-04-122026-10-19 https://bugrater.com/releases/jenkins-security-advisory-2022-03-292026-10-19 https://bugrater.com/releases/jenkins-security-advisory-2022-03-152026-10-19 https://bugrater.com/releases/jenkins-security-advisory-2022-02-152026-10-19 https://bugrater.com/releases/drupal-core-moderately-critical-gadget-chain-sa-core-2024-0082026-10-19 https://bugrater.com/releases/drupal-core-moderately-critical-gadget-chain-sa-core-2024-0072026-10-19 https://bugrater.com/releases/drupal-core-less-critical-gadget-chain-sa-core-2024-0062026-10-19 https://bugrater.com/releases/drupal-core-critical-cross-site-scripting-sa-core-2024-0052026-10-19 https://bugrater.com/releases/drupal-core-moderately-critical-access-bypass-sa-core-2024-0042026-10-19 https://bugrater.com/releases/drupal-core-moderately-critical-cross-site-scripting-sa-core-2024-0032026-10-19 https://bugrater.com/releases/drupal-core-moderately-critical-improper-error-handling-sa-core-2024-0022026-10-19 https://bugrater.com/releases/drupal-core-moderately-critical-denial-of-service-sa-core-2024-0012026-10-19 https://bugrater.com/releases/msa-26-0041-csrf-risk-in-xml-grade-imports2026-10-19 https://bugrater.com/releases/msa-26-0040-user-list-filters-do-not-respect-user-profile-field-visibility2026-10-19 https://bugrater.com/releases/msa-26-0039-minor-xss-risk-via-password-reset-link2026-10-19 https://bugrater.com/releases/msa-26-0038-enrolling-user-to-course-while-selecting-group-does-not-validate-group-belongs-to-that-course2026-10-19 https://bugrater.com/releases/msa-26-0037-missing-capability-checks-allow-unauthorised-triggering-of-grade-penalty-recalculation2026-10-19 https://bugrater.com/releases/msa-26-0036-incorrect-capability-check-in-ai-editor-placement-generate-image-service2026-10-19 https://bugrater.com/releases/jenkins-security-advisory-2022-01-122026-10-19 https://bugrater.com/releases/jenkins-security-advisory-2021-11-122026-10-19 https://bugrater.com/releases/jenkins-security-advisory-2021-11-042026-10-19 https://bugrater.com/releases/drupal-core-critical-cache-poisoning-sa-core-2023-0062026-10-19 https://bugrater.com/releases/drupal-core-moderately-critical-access-bypass-sa-core-2023-0052026-10-19 https://bugrater.com/releases/drupal-core-moderately-critical-access-bypass-sa-core-2023-0042026-10-19 https://bugrater.com/releases/drupal-core-moderately-critical-information-disclosure-sa-core-2023-0032026-10-19 https://bugrater.com/releases/drupal-core-moderately-critical-information-disclosure-sa-core-2023-0022026-10-19 https://bugrater.com/releases/drupal-core-moderately-critical-information-disclosure-sa-core-2023-0012026-10-19 https://bugrater.com/releases/drupal-core-critical-multiple-vulnerabilities-sa-core-2022-0162026-10-19 https://bugrater.com/releases/drupal-core-moderately-critical-multiple-vulnerabilities-sa-core-2022-0152026-10-19 https://bugrater.com/releases/gitlab-critical-patch-release-19-3-2-19-2-6-19-1-82026-10-19 https://bugrater.com/releases/msa-26-0035-manual-enrolment-does-not-correctly-observe-disabled-state-of-plugin2026-10-19 https://bugrater.com/releases/msa-26-0034-xss-risk-in-forum-post-templates2026-10-19 https://bugrater.com/releases/msa-26-0033-arbitrary-class-instantiation-via-audience-classname-in-core-reportbuilder2026-10-19 https://bugrater.com/releases/msa-26-0032-user-profile-information-disclosure-via-grade-web-service2026-10-19 https://bugrater.com/releases/jenkins-security-advisory-2021-10-062026-10-19 https://bugrater.com/releases/jenkins-security-advisory-2021-08-312026-10-19 https://bugrater.com/releases/jenkins-security-advisory-2021-06-302026-10-19 https://bugrater.com/releases/drupal-core-critical-arbitrary-php-code-execution-sa-core-2022-0142026-10-19 https://bugrater.com/releases/drupal-core-moderately-critical-access-bypass-sa-core-2022-0132026-10-19 https://bugrater.com/releases/drupal-core-moderately-critical-information-disclosure-sa-core-2022-0122026-10-19 https://bugrater.com/releases/drupal-core-moderately-critical-third-party-libraries-sa-core-2022-0112026-10-19 https://bugrater.com/releases/drupal-core-moderately-critical-third-party-libraries-sa-core-2022-0102026-10-19 https://bugrater.com/releases/drupal-core-moderately-critical-access-bypass-sa-core-2022-0092026-10-19 https://bugrater.com/releases/drupal-core-moderately-critical-improper-input-validation-sa-core-2022-0082026-10-19 https://bugrater.com/releases/drupal-core-moderately-critical-third-party-libraries-sa-core-2022-0062026-10-19 https://bugrater.com/releases/jenkins-security-advisory-2021-06-182026-10-19 https://bugrater.com/releases/jenkins-security-advisory-2021-06-162026-10-19 https://bugrater.com/releases/jenkins-security-advisory-2021-06-102026-10-19 https://bugrater.com/releases/drupal-core-moderately-critical-third-party-libraries-sa-core-2022-0052026-10-19 https://bugrater.com/releases/drupal-core-moderately-critical-information-disclosure-sa-core-2022-0042026-10-19 https://bugrater.com/releases/drupal-core-moderately-critical-improper-input-validation-sa-core-2022-0032026-10-19 https://bugrater.com/releases/drupal-core-moderately-critical-cross-site-scripting-sa-core-2022-0022026-10-19 https://bugrater.com/releases/drupal-core-moderately-critical-cross-site-scripting-sa-core-2022-0012026-10-19 https://bugrater.com/releases/drupal-core-moderately-critical-cross-site-scripting-sa-core-2021-0112026-10-19 https://bugrater.com/releases/ultimate-table-field-critical-access-bypass-sa-contrib-2026-1532026-10-19 https://bugrater.com/releases/taxonomy-term-glossary-critical-access-bypass-sa-contrib-2026-1522026-10-19 https://bugrater.com/releases/jenkins-security-advisory-2021-05-252026-10-19 https://bugrater.com/releases/jenkins-security-advisory-2021-05-112026-10-19 https://bugrater.com/releases/jenkins-security-advisory-2021-04-212026-10-19 https://bugrater.com/releases/saml-sso-service-provider-moderately-critical-server-side-request-forgery-sa-contrib-2026-1512026-10-19 https://bugrater.com/releases/saml-sso-service-provider-moderately-critical-insufficient-replay-protection-sa-contrib-2026-1502026-10-19 https://bugrater.com/releases/saml-sso-service-provider-moderately-critical-information-disclosure-sa-contrib-2026-1492026-10-19 https://bugrater.com/releases/saml-sso-service-provider-moderately-critical-embedded-credentials-sa-contrib-2026-1482026-10-19 https://bugrater.com/releases/saml-sso-service-provider-moderately-critical-cross-site-scripting-sa-contrib-2026-1472026-10-19 https://bugrater.com/releases/saml-sso-service-provider-moderately-critical-cross-site-scripting-sa-contrib-2026-1462026-10-19 https://bugrater.com/releases/saml-sso-service-provider-moderately-critical-authentication-bypass-sa-contrib-2026-1452026-10-19 https://bugrater.com/releases/saml-sso-service-provider-critical-weak-cryptographic-practices-sa-contrib-2026-1442026-10-19 https://bugrater.com/releases/ios-27-and-ipados-272026-10-19 https://bugrater.com/releases/ios-26-7-and-ipados-26-72026-10-19 https://bugrater.com/releases/macos-golden-gate-272026-10-19 https://bugrater.com/releases/jenkins-security-advisory-2021-04-072026-10-19 https://bugrater.com/releases/jenkins-security-advisory-2021-03-302026-10-19 https://bugrater.com/releases/saml-sso-service-provider-critical-open-redirect-sa-contrib-2026-1432026-10-19 https://bugrater.com/releases/saml-sso-service-provider-critical-improper-certificate-validation-sa-contrib-2026-1422026-10-19 https://bugrater.com/releases/saml-sso-service-provider-critical-improper-access-control-sa-contrib-2026-1412026-10-19 https://bugrater.com/releases/safedelete-moderately-critical-cross-site-scripting-sa-contrib-2026-1402026-10-19 https://bugrater.com/releases/patreon-critical-unsupported-sa-contrib-2026-1392026-10-19 https://bugrater.com/releases/key-auth-moderately-critical-access-bypass-sa-contrib-2026-1382026-10-19 https://bugrater.com/releases/feed-block-moderately-critical-cross-site-scripting-sa-contrib-2026-1372026-10-19 https://bugrater.com/releases/csp-log-critical-sql-injection-sa-contrib-2026-1362026-10-19 https://bugrater.com/releases/macos-tahoe-26-72026-10-19 https://bugrater.com/releases/macos-sequoia-15-82026-10-19 https://bugrater.com/releases/tvos-272026-10-19 https://bugrater.com/releases/stable-channel-update-for-desktop-153-0-8010-47-482026-10-19 https://bugrater.com/releases/jenkins-security-advisory-2021-03-182026-10-19 https://bugrater.com/releases/jenkins-security-advisory-2021-02-242026-10-19 https://bugrater.com/releases/central-authentication-system-cas-server-moderately-critical-open-redirect-sa-contrib-2026-1352026-10-19 https://bugrater.com/releases/amazee-ai-private-ai-provider-critical-sql-injection-sa-contrib-2026-1342026-10-19 https://bugrater.com/releases/jenkins-security-advisory-2026-09-162026-10-19 https://bugrater.com/releases/jenkins-security-advisory-2021-02-192026-10-19 https://bugrater.com/releases/drupal-core-moderately-critical-third-party-libraries-sa-core-2026-0132026-10-19 https://bugrater.com/releases/jenkins-security-advisory-2021-01-262026-10-19 https://bugrater.com/releases/jenkins-security-advisory-2021-01-132026-10-19 https://bugrater.com/releases/jenkins-security-advisory-2020-12-032026-10-19 https://bugrater.com/releases/jenkins-security-advisory-2020-11-042026-10-19 https://bugrater.com/releases/jenkins-security-advisory-2020-10-082026-10-19 https://bugrater.com/releases/jenkins-security-advisory-2020-09-232026-10-19 https://bugrater.com/releases/jenkins-security-advisory-2020-09-162026-10-19 https://bugrater.com/releases/jenkins-security-advisory-2020-09-012026-10-19 https://bugrater.com/releases/jenkins-security-advisory-2020-08-122026-10-19 https://bugrater.com/releases/stable-channel-update-for-desktop-32026-10-19 https://bugrater.com/releases/jenkins-security-advisory-2020-07-152026-10-19 https://bugrater.com/releases/jenkins-security-advisory-2020-07-022026-10-19 https://bugrater.com/releases/msa-26-0043-possible-to-bypass-the-login-notification-mechanism2026-10-19 https://bugrater.com/releases/msa-26-0042-blind-sql-injection-risk-in-profile-availability-condition-check2026-10-19 https://bugrater.com/releases/watchos-272026-10-19 https://bugrater.com/releases/visionos-272026-10-19 https://bugrater.com/releases/safari-272026-10-19 https://bugrater.com/releases/jenkins-security-advisory-2020-06-032026-10-19 https://bugrater.com/releases/jenkins-security-advisory-2020-05-062026-10-19 https://bugrater.com/releases/diba-carousel-slider-moderately-critical-cross-site-scripting-xss-sa-contrib-2026-1912026-10-19 https://bugrater.com/releases/smart-content-moderately-critical-access-bypass-sa-contrib-2026-1902026-10-19 https://bugrater.com/releases/css-usage-analyzer-moderately-critical-improper-access-control-sa-contrib-2026-1892026-10-19 https://bugrater.com/releases/combined-image-style-moderately-critical-improper-access-control-sa-contrib-2026-1882026-10-19 https://bugrater.com/releases/ai-ckeditor-moderately-critical-code-execution-via-twig-templates-sa-contrib-2026-1872026-10-19 https://bugrater.com/releases/webform-rest-less-critical-access-bypass-sa-contrib-2026-1862026-10-19 https://bugrater.com/releases/editoria11y-accessibility-checker-moderately-critical-access-bypass-sa-contrib-2026-1852026-10-19 https://bugrater.com/releases/tawk-to-live-chat-application-critical-cross-site-request-forgery-sa-contrib-2026-1842026-10-19 https://bugrater.com/releases/gitlab-critical-patch-release-19-4-1-19-3-3-19-2-72026-10-19 https://bugrater.com/releases/jenkins-security-advisory-2020-04-162026-10-19 https://bugrater.com/releases/jenkins-security-advisory-2020-04-072026-10-19 https://bugrater.com/releases/stop-administrator-login-moderately-critical-access-bypass-sa-contrib-2026-1832026-10-19 https://bugrater.com/releases/rest-json-api-authentication-for-drupal-moderately-critical-access-bypass-sa-contrib-2026-1822026-10-19 https://bugrater.com/releases/cookiecuttr-moderately-critical-cross-site-scripting-sa-contrib-2026-1812026-10-19 https://bugrater.com/releases/mermaid-diagram-field-moderately-critical-access-bypass-sa-contrib-2026-1802026-10-19 https://bugrater.com/releases/commerce-decoupled-checkout-moderately-critical-access-bypass-sa-contrib-2026-1792026-10-19 https://bugrater.com/releases/project-browser-critical-cross-site-request-forgery-sa-contrib-2026-1782026-10-19 https://bugrater.com/releases/cloud-critical-remote-code-execution-sa-contrib-2026-1772026-10-19 https://bugrater.com/releases/cloud-critical-remote-code-execution-sa-contrib-2026-1762026-10-19 https://bugrater.com/releases/jenkins-security-advisory-2020-03-252026-10-19 https://bugrater.com/releases/jenkins-security-advisory-2020-03-092026-10-19 https://bugrater.com/releases/webform-critical-remote-code-execution-sa-contrib-2026-1752026-10-19 https://bugrater.com/releases/webform-moderately-critical-access-bypass-sa-contrib-2026-1742026-10-19 https://bugrater.com/releases/webform-less-critical-access-bypass-sa-contrib-2026-1732026-10-19 https://bugrater.com/releases/webform-moderately-critical-cross-site-scripting-sa-contrib-2026-1722026-10-19 https://bugrater.com/releases/webform-moderately-critical-access-bypass-sa-contrib-2026-1712026-10-19 https://bugrater.com/releases/webform-less-critical-denial-of-service-sa-contrib-2026-1702026-10-19 https://bugrater.com/releases/webform-moderately-critical-access-bypass-sa-contrib-2026-1692026-10-19 https://bugrater.com/releases/webform-moderately-critical-access-bypass-sa-contrib-2026-1682026-10-19 https://bugrater.com/releases/jenkins-security-advisory-2020-02-122026-10-19 https://bugrater.com/releases/jenkins-security-advisory-2020-01-292026-10-19 https://bugrater.com/releases/webform-moderately-critical-access-bypass-sa-contrib-2026-1672026-10-19 https://bugrater.com/releases/webform-moderately-critical-cross-site-scripting-sa-contrib-2026-1662026-10-19 https://bugrater.com/releases/webform-less-critical-access-bypass-sa-contrib-2026-1652026-10-19 https://bugrater.com/releases/webform-moderately-critical-access-bypass-server-side-request-forgery-sa-contrib-2026-1642026-10-19 https://bugrater.com/releases/webform-moderately-critical-cross-site-scripting-sa-contrib-2026-1632026-10-19 https://bugrater.com/releases/webform-moderately-critical-cross-site-scripting-sa-contrib-2026-1622026-10-19 https://bugrater.com/releases/webform-moderately-critical-cross-site-scripting-sa-contrib-2026-1612026-10-19 https://bugrater.com/releases/webform-moderately-critical-cross-site-scripting-sa-contrib-2026-1602026-10-19 https://bugrater.com/releases/jenkins-security-advisory-2020-01-152026-10-19 https://bugrater.com/releases/jenkins-security-advisory-2019-12-172026-10-19 https://bugrater.com/releases/webform-moderately-critical-cross-site-scripting-sa-contrib-2026-1592026-10-19 https://bugrater.com/releases/webform-moderately-critical-cross-site-scripting-sa-contrib-2026-1582026-10-19 https://bugrater.com/releases/webform-moderately-critical-cross-site-scripting-sa-contrib-2026-1552026-10-19 https://bugrater.com/releases/webform-moderately-critical-cross-site-scripting-sa-contrib-2026-1542026-10-19 https://bugrater.com/releases/ios-26-7-1-and-ipados-26-7-12026-10-19 https://bugrater.com/releases/macos-tahoe-26-7-12026-10-19 https://bugrater.com/releases/macos-sequoia-15-8-12026-10-19 https://bugrater.com/releases/jenkins-security-advisory-2019-11-212026-10-19 https://bugrater.com/releases/jenkins-security-advisory-2019-10-232026-10-19 https://bugrater.com/releases/stable-channel-update-for-desktop-154-0-8037-92-932026-10-19 https://bugrater.com/releases/jenkins-security-advisory-2019-10-162026-10-19 https://bugrater.com/releases/jenkins-security-advisory-2019-10-012026-10-19 https://bugrater.com/releases/msrc-cve-2026-411082026-10-18 https://bugrater.com/releases/msrc-cve-2026-454672026-10-18 https://bugrater.com/releases/msrc-cve-2026-454682026-10-18 https://bugrater.com/releases/msrc-cve-2026-454692026-10-18 https://bugrater.com/releases/msrc-cve-2026-454752026-10-18 https://bugrater.com/releases/msrc-cve-2026-454722026-10-18 https://bugrater.com/releases/msrc-cve-2026-454712026-10-18 https://bugrater.com/releases/msrc-cve-2026-454742026-10-18 https://bugrater.com/releases/msrc-cve-2026-454792026-10-18 https://bugrater.com/releases/msrc-cve-2026-454862026-10-18 https://bugrater.com/releases/msrc-cve-2026-454852026-10-18 https://bugrater.com/releases/msrc-cve-2026-454832026-10-18 https://bugrater.com/releases/msrc-cve-2026-476442026-10-18 https://bugrater.com/releases/msrc-cve-2026-476552026-10-18 https://bugrater.com/releases/msrc-cve-2026-404092026-10-01 https://bugrater.com/releases/msrc-cve-2026-404042026-10-18 https://bugrater.com/releases/msrc-cve-2026-338282026-10-18 https://bugrater.com/releases/msrc-cve-2026-343352026-10-18 https://bugrater.com/releases/msrc-cve-2026-429022026-10-18 https://bugrater.com/releases/msrc-cve-2026-448172026-10-18 https://bugrater.com/releases/msrc-cve-2026-448182026-10-18 https://bugrater.com/releases/msrc-cve-2026-448192026-10-18 https://bugrater.com/releases/msrc-cve-2026-448202026-10-18 https://bugrater.com/releases/msrc-cve-2026-448212026-10-18 https://bugrater.com/releases/msrc-cve-2026-448232026-10-18 https://bugrater.com/releases/msrc-cve-2026-448242026-10-18 https://bugrater.com/releases/msrc-cve-2026-454562026-10-18 https://bugrater.com/releases/msrc-cve-2026-454582026-10-18 https://bugrater.com/releases/msrc-cve-2026-454602026-10-18 https://bugrater.com/releases/msrc-cve-2026-454612026-10-18 https://bugrater.com/releases/msrc-cve-2026-454662026-10-18 https://bugrater.com/releases/msrc-cve-2026-454872026-10-18 https://bugrater.com/releases/msrc-cve-2026-454902026-10-18 https://bugrater.com/releases/msrc-cve-2026-454912026-10-18 https://bugrater.com/releases/msrc-cve-2026-455002026-10-18 https://bugrater.com/releases/msrc-cve-2026-455012026-10-01 https://bugrater.com/releases/msrc-cve-2026-455022026-10-01 https://bugrater.com/releases/msrc-cve-2026-455032026-10-18 https://bugrater.com/releases/msrc-cve-2026-455042026-10-18 https://bugrater.com/releases/msrc-cve-2026-455832026-10-18 https://bugrater.com/releases/msrc-cve-2026-456052026-10-18 https://bugrater.com/releases/msrc-cve-2026-456392026-10-18 https://bugrater.com/releases/msrc-cve-2026-456402026-10-18 https://bugrater.com/releases/msrc-cve-2026-456072026-10-18 https://bugrater.com/releases/msrc-cve-2026-456412026-10-18 https://bugrater.com/releases/msrc-cve-2026-456342026-10-18 https://bugrater.com/releases/msrc-cve-2026-456422026-10-18 https://bugrater.com/releases/msrc-cve-2026-456432026-10-18 https://bugrater.com/releases/msrc-cve-2026-456452026-10-18 https://bugrater.com/releases/msrc-cve-2026-456482026-10-18 https://bugrater.com/releases/msrc-cve-2026-456492026-10-18 https://bugrater.com/releases/msrc-cve-2026-456502026-10-18 https://bugrater.com/releases/msrc-cve-2026-456552026-10-18 https://bugrater.com/releases/msrc-cve-2026-456562026-10-18 https://bugrater.com/releases/msrc-cve-2026-456572026-10-18 https://bugrater.com/releases/msrc-cve-2026-472872026-10-18 https://bugrater.com/releases/msrc-cve-2026-472882026-10-18 https://bugrater.com/releases/msrc-cve-2026-472892026-10-18 https://bugrater.com/releases/msrc-cve-2026-472912026-10-18 https://bugrater.com/releases/msrc-cve-2026-472922026-10-18 https://bugrater.com/releases/msrc-cve-2026-410922026-10-18 https://bugrater.com/releases/msrc-cve-2026-321932026-10-18 https://bugrater.com/releases/msrc-cve-2026-476312026-10-18 https://bugrater.com/releases/msrc-cve-2026-410982026-10-18 https://bugrater.com/releases/msrc-cve-2026-476352026-10-18 https://bugrater.com/releases/msrc-cve-2026-476362026-10-18 https://bugrater.com/releases/msrc-cve-2026-476372026-10-18 https://bugrater.com/releases/msrc-cve-2026-476382026-10-18 https://bugrater.com/releases/msrc-cve-2026-476392026-10-18 https://bugrater.com/releases/msrc-cve-2026-476412026-10-18 https://bugrater.com/releases/msrc-cve-2026-455882026-10-18 https://bugrater.com/releases/msrc-cve-2026-476482026-10-18 https://bugrater.com/releases/msrc-cve-2026-88632026-10-18 https://bugrater.com/releases/msrc-cve-2026-476532026-10-18 https://bugrater.com/releases/msrc-cve-2026-476522026-10-18 https://bugrater.com/releases/msrc-cve-2026-476542026-10-18 https://bugrater.com/releases/msrc-cve-2026-485632026-10-18 https://bugrater.com/releases/msrc-cve-2026-485662026-10-18 https://bugrater.com/releases/msrc-cve-2026-485682026-10-18 https://bugrater.com/releases/msrc-cve-2026-485702026-10-18 https://bugrater.com/releases/msrc-cve-2026-485732026-10-18 https://bugrater.com/releases/msrc-cve-2026-485752026-10-18 https://bugrater.com/releases/msrc-cve-2026-485762026-10-18 https://bugrater.com/releases/msrc-cve-2026-485782026-10-18 https://bugrater.com/releases/msrc-cve-2026-485832026-10-18 https://bugrater.com/releases/msrc-cve-2026-491612026-10-18 https://bugrater.com/releases/msrc-cve-2026-505082026-10-18 https://bugrater.com/releases/msrc-cve-2026-261422026-10-18 https://bugrater.com/releases/msrc-cve-2026-403712026-10-18 https://bugrater.com/releases/msrc-cve-2026-428282026-10-18 https://bugrater.com/releases/msrc-cve-2026-428292026-10-18 https://bugrater.com/releases/msrc-cve-2026-428352026-10-18 https://bugrater.com/releases/msrc-cve-2026-403762026-10-18 https://bugrater.com/releases/msrc-cve-2026-448222026-10-18 https://bugrater.com/releases/msrc-cve-2026-454542026-10-18 https://bugrater.com/releases/msrc-cve-2026-454552026-10-18 https://bugrater.com/releases/msrc-cve-2026-454572026-10-18 https://bugrater.com/releases/msrc-cve-2026-454592026-10-18 https://bugrater.com/releases/msrc-cve-2026-454622026-10-18 https://bugrater.com/releases/msrc-cve-2026-454632026-10-18 https://bugrater.com/releases/msrc-cve-2026-454642026-10-18 https://bugrater.com/releases/msrc-cve-2026-454652026-10-18 https://bugrater.com/releases/msrc-cve-2026-454762026-10-18 https://bugrater.com/releases/msrc-cve-2026-454822026-10-18 https://bugrater.com/releases/msrc-cve-2026-455862026-10-18 https://bugrater.com/releases/msrc-cve-2026-455912026-10-18 https://bugrater.com/releases/msrc-cve-2026-455942026-10-18 https://bugrater.com/releases/msrc-cve-2026-456042026-10-18 https://bugrater.com/releases/msrc-cve-2026-455952026-10-18 https://bugrater.com/releases/msrc-cve-2026-455992026-10-18 https://bugrater.com/releases/msrc-cve-2026-456012026-10-18 https://bugrater.com/releases/msrc-cve-2026-455982026-10-18 https://bugrater.com/releases/msrc-cve-2026-456362026-10-18 https://bugrater.com/releases/msrc-cve-2026-455962026-10-18 https://bugrater.com/releases/msrc-cve-2026-456002026-10-18 https://bugrater.com/releases/msrc-cve-2026-456382026-10-01 https://bugrater.com/releases/msrc-cve-2026-456032026-10-18 https://bugrater.com/releases/msrc-cve-2026-456372026-10-18 https://bugrater.com/releases/msrc-cve-2026-456082026-10-18 https://bugrater.com/releases/msrc-cve-2026-456442026-10-18 https://bugrater.com/releases/msrc-cve-2026-456532026-10-18 https://bugrater.com/releases/msrc-cve-2026-456542026-10-18 https://bugrater.com/releases/msrc-cve-2026-456472026-10-18 https://bugrater.com/releases/msrc-cve-2026-456582026-10-18 https://bugrater.com/releases/msrc-cve-2026-472812026-10-18 https://bugrater.com/releases/msrc-cve-2026-472832026-10-18 https://bugrater.com/releases/msrc-cve-2026-472842026-10-01 https://bugrater.com/releases/msrc-cve-2026-472932026-10-18 https://bugrater.com/releases/msrc-cve-2026-476342026-10-18 https://bugrater.com/releases/msrc-cve-2026-476402026-10-18 https://bugrater.com/releases/msrc-cve-2026-476432026-10-18 https://bugrater.com/releases/msrc-cve-2026-454812026-10-18 https://bugrater.com/releases/msrc-cve-2026-454842026-10-18 https://bugrater.com/releases/msrc-cve-2026-476562026-10-18 https://bugrater.com/releases/msrc-cve-2026-485602026-10-18 https://bugrater.com/releases/msrc-cve-2026-485652026-10-18 https://bugrater.com/releases/msrc-cve-2026-485692026-10-18 https://bugrater.com/releases/msrc-cve-2026-485742026-10-18 https://bugrater.com/releases/msrc-cve-2026-491602026-10-18 https://bugrater.com/releases/msrc-cve-2026-505072026-10-18 https://bugrater.com/releases/msrc-cve-2026-505112026-10-18 https://bugrater.com/releases/msrc-cve-2026-505122026-10-18 https://bugrater.com/releases/msrc-cve-2026-428362026-10-18 https://bugrater.com/releases/msrc-cve-2026-428372026-10-18 https://bugrater.com/releases/msrc-cve-2026-429042026-10-18 https://bugrater.com/releases/msrc-cve-2026-429052026-10-18 https://bugrater.com/releases/msrc-cve-2026-429062026-10-18 https://bugrater.com/releases/msrc-cve-2026-429072026-10-18 https://bugrater.com/releases/msrc-cve-2026-429082026-10-18 https://bugrater.com/releases/msrc-cve-2026-429802026-10-18 https://bugrater.com/releases/msrc-cve-2026-429092026-10-18 https://bugrater.com/releases/msrc-cve-2026-429162026-10-18 https://bugrater.com/releases/msrc-cve-2026-429112026-10-18 https://bugrater.com/releases/msrc-cve-2026-429132026-10-18 https://bugrater.com/releases/msrc-cve-2026-429122026-10-18 https://bugrater.com/releases/msrc-cve-2026-429142026-10-18 https://bugrater.com/releases/msrc-cve-2026-429152026-10-01 https://bugrater.com/releases/msrc-cve-2026-429682026-10-18 https://bugrater.com/releases/msrc-cve-2026-429722026-10-18 https://bugrater.com/releases/msrc-cve-2026-429692026-10-18 https://bugrater.com/releases/msrc-cve-2026-429712026-10-18 https://bugrater.com/releases/msrc-cve-2026-429702026-10-18 https://bugrater.com/releases/msrc-cve-2026-429732026-10-18 https://bugrater.com/releases/msrc-cve-2026-429842026-10-18 https://bugrater.com/releases/msrc-cve-2026-429742026-10-18 https://bugrater.com/releases/msrc-cve-2026-429862026-10-18 https://bugrater.com/releases/msrc-cve-2026-429782026-10-18 https://bugrater.com/releases/msrc-cve-2026-429772026-10-18 https://bugrater.com/releases/msrc-cve-2026-429792026-10-18 https://bugrater.com/releases/msrc-cve-2026-429912026-10-18 https://bugrater.com/releases/msrc-cve-2026-429892026-10-18 https://bugrater.com/releases/msrc-cve-2026-448092026-10-18 https://bugrater.com/releases/msrc-cve-2026-448102026-10-18 https://bugrater.com/releases/msrc-cve-2026-429922026-10-18 https://bugrater.com/releases/msrc-cve-2026-448052026-10-18 https://bugrater.com/releases/msrc-cve-2026-448112026-10-18 https://bugrater.com/releases/msrc-cve-2026-448082026-10-18 https://bugrater.com/releases/msrc-cve-2026-448072026-10-18 https://bugrater.com/releases/msrc-cve-2026-447992026-10-18 https://bugrater.com/releases/msrc-cve-2026-448152026-10-18 https://bugrater.com/releases/msrc-cve-2026-429832026-10-18 https://bugrater.com/releases/msrc-cve-2026-448142026-10-18 https://bugrater.com/releases/msrc-cve-2026-448012026-10-18 https://bugrater.com/releases/msrc-cve-2026-429852026-10-18 https://bugrater.com/releases/msrc-cve-2026-429872026-10-18 https://bugrater.com/releases/msrc-cve-2026-448032026-10-18 https://bugrater.com/releases/msrc-cve-2026-448122026-10-01 https://bugrater.com/releases/msrc-cve-2026-429932026-10-18 https://bugrater.com/releases/msrc-cve-2026-448132026-10-18 https://bugrater.com/releases/msrc-cve-2026-448042026-10-18 https://bugrater.com/releases/msrc-cve-2026-454972026-10-18 https://bugrater.com/releases/msrc-cve-2026-428242026-10-18 https://bugrater.com/releases/msrc-cve-2026-485672026-10-18 https://bugrater.com/releases/msrc-cve-2026-485792026-10-18 https://bugrater.com/releases/msrc-cve-2026-472982026-10-18 https://bugrater.com/releases/msrc-cve-2026-456062026-10-18 https://bugrater.com/releases/msrc-cve-2026-429812026-10-18 https://bugrater.com/releases/msrc-cve-2026-476332026-10-18 https://bugrater.com/releases/msrc-cve-2026-322082026-10-18 https://bugrater.com/releases/msrc-cve-2026-321742026-10-18 https://bugrater.com/releases/msrc-cve-2026-454802026-10-18 https://bugrater.com/releases/msrc-cve-2026-428952026-10-18 https://bugrater.com/releases/msrc-cve-2026-541302026-10-18 https://bugrater.com/releases/msrc-cve-2026-476472026-10-18 https://bugrater.com/releases/msrc-cve-2026-485842026-10-18 https://bugrater.com/releases/msrc-cve-2026-505192026-10-18 https://bugrater.com/releases/msrc-cve-2026-485822026-10-18 https://bugrater.com/releases/msrc-cve-2026-476452026-10-18 https://bugrater.com/releases/msrc-cve-2026-476462026-10-18 https://bugrater.com/releases/msrc-cve-2026-429032026-10-18 https://bugrater.com/releases/msrc-cve-2026-505212026-10-18 https://bugrater.com/releases/msrc-cve-2026-429102026-10-18 https://bugrater.com/releases/msrc-cve-2026-448022026-10-18 https://bugrater.com/releases/msrc-cve-2026-455922026-10-18 https://bugrater.com/releases/msrc-cve-2026-455932026-10-18 https://bugrater.com/releases/msrc-cve-2026-455972026-10-18 https://bugrater.com/releases/msrc-cve-2026-695432026-10-18 https://bugrater.com/releases/msrc-cve-2026-485612026-10-18 https://bugrater.com/releases/msrc-cve-2026-454882026-10-01 https://bugrater.com/releases/msrc-cve-2026-429822026-10-18 https://bugrater.com/releases/msrc-cve-2026-472962026-10-18 https://bugrater.com/releases/msrc-cve-2026-261452026-10-18 https://bugrater.com/releases/msrc-cve-2026-454992026-10-18 https://bugrater.com/releases/msrc-cve-2026-571002026-10-18 https://bugrater.com/releases/msrc-cve-2026-549982026-10-18 https://bugrater.com/releases/msrc-cve-2026-411062026-10-18 https://bugrater.com/releases/msrc-cve-2026-343492026-10-18 https://bugrater.com/releases/msrc-cve-2026-343462026-10-18 https://bugrater.com/releases/msrc-cve-2026-429002026-10-18 https://bugrater.com/releases/msrc-cve-2026-454892026-10-18 https://bugrater.com/releases/msrc-cve-2026-429752026-10-18 https://bugrater.com/releases/msrc-cve-2026-473002026-10-18 https://bugrater.com/releases/msrc-cve-2026-473022026-10-18 https://bugrater.com/releases/msrc-cve-2026-473032026-10-18 https://bugrater.com/releases/msrc-cve-2026-429902026-10-18 https://bugrater.com/releases/msrc-cve-2026-485722026-10-18 https://bugrater.com/releases/msrc-cve-2026-485712026-10-18 https://bugrater.com/releases/msrc-cve-2026-491622026-10-18 https://bugrater.com/releases/msrc-cve-2026-491642026-10-18 https://bugrater.com/releases/msrc-cve-2026-491652026-10-18 https://bugrater.com/releases/msrc-cve-2026-491662026-10-18 https://bugrater.com/releases/msrc-cve-2026-491672026-10-18 https://bugrater.com/releases/msrc-cve-2026-491682026-10-18 https://bugrater.com/releases/msrc-cve-2026-491692026-10-18 https://bugrater.com/releases/msrc-cve-2026-491702026-10-18 https://bugrater.com/releases/msrc-cve-2026-491712026-10-18 https://bugrater.com/releases/msrc-cve-2026-491762026-10-18 https://bugrater.com/releases/msrc-cve-2026-491752026-10-18 https://bugrater.com/releases/msrc-cve-2026-491722026-10-18 https://bugrater.com/releases/msrc-cve-2026-491732026-10-18 https://bugrater.com/releases/msrc-cve-2026-491742026-10-18 https://bugrater.com/releases/msrc-cve-2026-491772026-10-01 https://bugrater.com/releases/msrc-cve-2026-497842026-10-18 https://bugrater.com/releases/msrc-cve-2026-505062026-10-18 https://bugrater.com/releases/msrc-cve-2026-472822026-10-18 https://bugrater.com/releases/msrc-cve-2026-454962026-10-18 https://bugrater.com/releases/msrc-cve-2026-506632026-10-18 https://bugrater.com/releases/msrc-cve-2026-549832026-10-18 https://bugrater.com/releases/msrc-cve-2026-506952026-10-18 https://bugrater.com/releases/msrc-cve-2026-541292026-10-18 https://bugrater.com/releases/msrc-cve-2026-549892026-10-18 https://bugrater.com/releases/msrc-cve-2026-549872026-10-18 https://bugrater.com/releases/msrc-cve-2026-506962026-10-18 https://bugrater.com/releases/msrc-cve-2026-549902026-10-18 https://bugrater.com/releases/msrc-cve-2026-506972026-10-18 https://bugrater.com/releases/msrc-cve-2026-550002026-10-18 https://bugrater.com/releases/msrc-cve-2026-541112026-10-18 https://bugrater.com/releases/msrc-cve-2026-549912026-10-18 https://bugrater.com/releases/msrc-cve-2026-541322026-10-18 https://bugrater.com/releases/msrc-cve-2026-541072026-10-18 https://bugrater.com/releases/msrc-cve-2026-549862026-10-18 https://bugrater.com/releases/msrc-cve-2026-549932026-10-18 https://bugrater.com/releases/msrc-cve-2026-550012026-10-18 https://bugrater.com/releases/msrc-cve-2026-541122026-10-18 https://bugrater.com/releases/msrc-cve-2026-550042026-10-18 https://bugrater.com/releases/msrc-cve-2026-549922026-10-18 https://bugrater.com/releases/msrc-cve-2026-541092026-10-18 https://bugrater.com/releases/msrc-cve-2026-549822026-10-18 https://bugrater.com/releases/msrc-cve-2026-541142026-10-18 https://bugrater.com/releases/msrc-cve-2026-549962026-10-18 https://bugrater.com/releases/msrc-cve-2026-541192026-10-18 https://bugrater.com/releases/msrc-cve-2026-549972026-10-18 https://bugrater.com/releases/msrc-cve-2026-549992026-10-18 https://bugrater.com/releases/msrc-cve-2026-550032026-10-18 https://bugrater.com/releases/msrc-cve-2026-541222026-10-18 https://bugrater.com/releases/msrc-cve-2026-550052026-10-18 https://bugrater.com/releases/msrc-cve-2026-550062026-10-18 https://bugrater.com/releases/msrc-cve-2026-550082026-10-18 https://bugrater.com/releases/msrc-cve-2026-550092026-10-18 https://bugrater.com/releases/msrc-cve-2026-503382026-10-18 https://bugrater.com/releases/msrc-cve-2026-550112026-10-18 https://bugrater.com/releases/msrc-cve-2026-550122026-10-18 https://bugrater.com/releases/msrc-cve-2026-505242026-10-18 https://bugrater.com/releases/msrc-cve-2026-541172026-10-18 https://bugrater.com/releases/msrc-cve-2026-541182026-10-18 https://bugrater.com/releases/msrc-cve-2026-550022026-10-18 https://bugrater.com/releases/msrc-cve-2026-551442026-10-18 https://bugrater.com/releases/msrc-cve-2026-505202026-10-18 https://bugrater.com/releases/msrc-cve-2026-541082026-10-18 https://bugrater.com/releases/msrc-cve-2026-506752026-10-18 https://bugrater.com/releases/msrc-cve-2026-506782026-10-18 https://bugrater.com/releases/msrc-cve-2026-549882026-10-18 https://bugrater.com/releases/msrc-cve-2026-558992026-10-18 https://bugrater.com/releases/msrc-cve-2026-559452026-10-18 https://bugrater.com/releases/msrc-cve-2026-559482026-10-18 https://bugrater.com/releases/msrc-cve-2026-561552026-10-18 https://bugrater.com/releases/msrc-cve-2026-561642026-10-18 https://bugrater.com/releases/msrc-cve-2026-561692026-10-18 https://bugrater.com/releases/msrc-cve-2026-561702026-10-18 https://bugrater.com/releases/msrc-cve-2026-541272026-10-18 https://bugrater.com/releases/msrc-cve-2026-561932026-10-18 https://bugrater.com/releases/msrc-cve-2026-561852026-10-18 https://bugrater.com/releases/msrc-cve-2026-570972026-10-18 https://bugrater.com/releases/msrc-cve-2026-571072026-10-18 https://bugrater.com/releases/msrc-cve-2026-579692026-10-18 https://bugrater.com/releases/msrc-cve-2026-579762026-10-18 https://bugrater.com/releases/msrc-cve-2026-579792026-10-18 https://bugrater.com/releases/msrc-cve-2026-579812026-10-18 https://bugrater.com/releases/msrc-cve-2026-579832026-10-18 https://bugrater.com/releases/msrc-cve-2026-579842026-10-18 https://bugrater.com/releases/msrc-cve-2026-579852026-10-18 https://bugrater.com/releases/msrc-cve-2026-579862026-10-18 https://bugrater.com/releases/msrc-cve-2026-579872026-10-18 https://bugrater.com/releases/msrc-cve-2026-579882026-10-18 https://bugrater.com/releases/msrc-cve-2026-550142026-10-18 https://bugrater.com/releases/msrc-cve-2026-579912026-10-18 https://bugrater.com/releases/msrc-cve-2026-579922026-10-18 https://bugrater.com/releases/msrc-cve-2026-582762026-10-18 https://bugrater.com/releases/msrc-cve-2026-582782026-10-18 https://bugrater.com/releases/msrc-cve-2026-582792026-10-18 https://bugrater.com/releases/msrc-cve-2026-585262026-10-18 https://bugrater.com/releases/msrc-cve-2026-585952026-10-18 https://bugrater.com/releases/msrc-cve-2026-505222026-10-18 https://bugrater.com/releases/msrc-cve-2026-566452026-10-18 https://bugrater.com/releases/msrc-cve-2026-566462026-10-18 https://bugrater.com/releases/msrc-cve-2026-586012026-10-18 https://bugrater.com/releases/msrc-cve-2026-586022026-10-18 https://bugrater.com/releases/msrc-cve-2026-586082026-10-18 https://bugrater.com/releases/msrc-cve-2026-586092026-10-18 https://bugrater.com/releases/msrc-cve-2026-586102026-10-18 https://bugrater.com/releases/msrc-cve-2026-586142026-10-18 https://bugrater.com/releases/msrc-cve-2026-473012026-10-18 https://bugrater.com/releases/msrc-cve-2026-586182026-10-18 https://bugrater.com/releases/msrc-cve-2026-586312026-10-18 https://bugrater.com/releases/msrc-cve-2026-586352026-10-18 https://bugrater.com/releases/msrc-cve-2026-586362026-10-18 https://bugrater.com/releases/msrc-cve-2026-586402026-10-18 https://bugrater.com/releases/msrc-cve-2026-586472026-10-18 https://bugrater.com/releases/msrc-cve-2026-506522026-10-18 https://bugrater.com/releases/msrc-cve-2026-506532026-10-18 https://bugrater.com/releases/msrc-cve-2026-338422026-10-18 https://bugrater.com/releases/msrc-cve-2026-343282026-10-18 https://bugrater.com/releases/msrc-cve-2026-404222026-10-18 https://bugrater.com/releases/msrc-cve-2026-410872026-10-18 https://bugrater.com/releases/msrc-cve-2026-404002026-10-01 https://bugrater.com/releases/msrc-cve-2026-343482026-10-18 https://bugrater.com/releases/msrc-cve-2026-448062026-10-18 https://bugrater.com/releases/msrc-cve-2026-403782026-10-18 https://bugrater.com/releases/msrc-cve-2026-473042026-10-18 https://bugrater.com/releases/msrc-cve-2026-448002026-10-18 https://bugrater.com/releases/msrc-cve-2026-476322026-10-18 https://bugrater.com/releases/msrc-cve-2026-485642026-10-18 https://bugrater.com/releases/msrc-cve-2026-485812026-10-18 https://bugrater.com/releases/msrc-cve-2026-456462026-10-18 https://bugrater.com/releases/msrc-cve-2026-491782026-10-18 https://bugrater.com/releases/msrc-cve-2026-491802026-10-18 https://bugrater.com/releases/msrc-cve-2026-491812026-10-18 https://bugrater.com/releases/msrc-cve-2026-491842026-10-01 https://bugrater.com/releases/msrc-cve-2026-491832026-10-01 https://bugrater.com/releases/msrc-cve-2026-497832026-10-18 https://bugrater.com/releases/msrc-cve-2026-497872026-10-18 https://bugrater.com/releases/msrc-cve-2026-497882026-10-18 https://bugrater.com/releases/msrc-cve-2026-497892026-10-18 https://bugrater.com/releases/msrc-cve-2026-497902026-10-18 https://bugrater.com/releases/msrc-cve-2026-497912026-10-18 https://bugrater.com/releases/msrc-cve-2026-497922026-10-18 https://bugrater.com/releases/msrc-cve-2026-497932026-10-18 https://bugrater.com/releases/msrc-cve-2026-497942026-10-18 https://bugrater.com/releases/msrc-cve-2026-497962026-10-18 https://bugrater.com/releases/msrc-cve-2026-497952026-10-18 https://bugrater.com/releases/msrc-cve-2026-497972026-10-18 https://bugrater.com/releases/msrc-cve-2026-497982026-10-01 https://bugrater.com/releases/msrc-cve-2026-502992026-10-18 https://bugrater.com/releases/msrc-cve-2026-498002026-10-01 https://bugrater.com/releases/msrc-cve-2026-497992026-10-18 https://bugrater.com/releases/msrc-cve-2026-503082026-10-18 https://bugrater.com/releases/msrc-cve-2026-503112026-10-18 https://bugrater.com/releases/msrc-cve-2026-498042026-10-18 https://bugrater.com/releases/msrc-cve-2026-502942026-10-18 https://bugrater.com/releases/msrc-cve-2026-503332026-10-01 https://bugrater.com/releases/msrc-cve-2026-498012026-10-18 https://bugrater.com/releases/msrc-cve-2026-498022026-10-18 https://bugrater.com/releases/msrc-cve-2026-498062026-10-18 https://bugrater.com/releases/msrc-cve-2026-498052026-10-18 https://bugrater.com/releases/msrc-cve-2026-498032026-10-18 https://bugrater.com/releases/msrc-cve-2026-503232026-10-18 https://bugrater.com/releases/msrc-cve-2026-503182026-10-01 https://bugrater.com/releases/msrc-cve-2026-503512026-10-01 https://bugrater.com/releases/msrc-cve-2026-498072026-10-18 https://bugrater.com/releases/msrc-cve-2026-503422026-10-18 https://bugrater.com/releases/msrc-cve-2026-502982026-10-18 https://bugrater.com/releases/msrc-cve-2026-498082026-10-18 https://bugrater.com/releases/msrc-cve-2026-502932026-10-18 https://bugrater.com/releases/msrc-cve-2026-503162026-10-18 https://bugrater.com/releases/msrc-cve-2026-503542026-10-18 https://bugrater.com/releases/msrc-cve-2026-502962026-10-18 https://bugrater.com/releases/msrc-cve-2026-502972026-10-18 https://bugrater.com/releases/msrc-cve-2026-503252026-10-18 https://bugrater.com/releases/msrc-cve-2026-503562026-10-18 https://bugrater.com/releases/msrc-cve-2026-503842026-10-01 https://bugrater.com/releases/msrc-cve-2026-502952026-10-18 https://bugrater.com/releases/msrc-cve-2026-503502026-10-18 https://bugrater.com/releases/msrc-cve-2026-503812026-10-18 https://bugrater.com/releases/msrc-cve-2026-503002026-10-18 https://bugrater.com/releases/msrc-cve-2026-503032026-10-18 https://bugrater.com/releases/msrc-cve-2026-503642026-10-18 https://bugrater.com/releases/msrc-cve-2026-503022026-10-18 https://bugrater.com/releases/msrc-cve-2026-503322026-10-18 https://bugrater.com/releases/msrc-cve-2026-503722026-10-18 https://bugrater.com/releases/msrc-cve-2026-503052026-10-18 https://bugrater.com/releases/msrc-cve-2026-503292026-10-18 https://bugrater.com/releases/msrc-cve-2026-503632026-10-18 https://bugrater.com/releases/msrc-cve-2026-503922026-10-18 https://bugrater.com/releases/msrc-cve-2026-503042026-10-18 https://bugrater.com/releases/msrc-cve-2026-503282026-10-18 https://bugrater.com/releases/msrc-cve-2026-503062026-10-18 https://bugrater.com/releases/msrc-cve-2026-503602026-10-18 https://bugrater.com/releases/msrc-cve-2026-503932026-10-18 https://bugrater.com/releases/msrc-cve-2026-504122026-10-01 https://bugrater.com/releases/msrc-cve-2026-503372026-10-18 https://bugrater.com/releases/msrc-cve-2026-503862026-10-01 https://bugrater.com/releases/msrc-cve-2026-504002026-10-18 https://bugrater.com/releases/msrc-cve-2026-503092026-10-18 https://bugrater.com/releases/msrc-cve-2026-504192026-10-18 https://bugrater.com/releases/msrc-cve-2026-503682026-10-18 https://bugrater.com/releases/msrc-cve-2026-503072026-10-18 https://bugrater.com/releases/msrc-cve-2026-503262026-10-18 https://bugrater.com/releases/msrc-cve-2026-503132026-10-18 https://bugrater.com/releases/msrc-cve-2026-504402026-10-18 https://bugrater.com/releases/msrc-cve-2026-503802026-10-18 https://bugrater.com/releases/msrc-cve-2026-503272026-10-18 https://bugrater.com/releases/msrc-cve-2026-503412026-10-01 https://bugrater.com/releases/msrc-cve-2026-504072026-10-01 https://bugrater.com/releases/msrc-cve-2026-503312026-10-18 https://bugrater.com/releases/msrc-cve-2026-503432026-10-01 https://bugrater.com/releases/msrc-cve-2026-503962026-10-18 https://bugrater.com/releases/msrc-cve-2026-503702026-10-18 https://bugrater.com/releases/msrc-cve-2026-503472026-10-18 https://bugrater.com/releases/msrc-cve-2026-503212026-10-18 https://bugrater.com/releases/msrc-cve-2026-504252026-10-18 https://bugrater.com/releases/msrc-cve-2026-503152026-10-18 https://bugrater.com/releases/msrc-cve-2026-504342026-10-18 https://bugrater.com/releases/msrc-cve-2026-503392026-10-18 https://bugrater.com/releases/msrc-cve-2026-504302026-10-18 https://bugrater.com/releases/msrc-cve-2026-503102026-10-18 https://bugrater.com/releases/msrc-cve-2026-503242026-10-18 https://bugrater.com/releases/msrc-cve-2026-503122026-10-18 https://bugrater.com/releases/msrc-cve-2026-503302026-10-18 https://bugrater.com/releases/msrc-cve-2026-503572026-10-18 https://bugrater.com/releases/msrc-cve-2026-503772026-10-18 https://bugrater.com/releases/msrc-cve-2026-503902026-10-18 https://bugrater.com/releases/msrc-cve-2026-504522026-10-18 https://bugrater.com/releases/msrc-cve-2026-503482026-10-18 https://bugrater.com/releases/msrc-cve-2026-503452026-10-18 https://bugrater.com/releases/msrc-cve-2026-503222026-10-18 https://bugrater.com/releases/msrc-cve-2026-503352026-10-18 https://bugrater.com/releases/msrc-cve-2026-503752026-10-01 https://bugrater.com/releases/msrc-cve-2026-503612026-10-18 https://bugrater.com/releases/msrc-cve-2026-503172026-10-18 https://bugrater.com/releases/msrc-cve-2026-503402026-10-18 https://bugrater.com/releases/msrc-cve-2026-504042026-10-18 https://bugrater.com/releases/msrc-cve-2026-503662026-10-18 https://bugrater.com/releases/msrc-cve-2026-504162026-10-01 https://bugrater.com/releases/msrc-cve-2026-503582026-10-18 https://bugrater.com/releases/msrc-cve-2026-503552026-10-18 https://bugrater.com/releases/msrc-cve-2026-504282026-10-18 https://bugrater.com/releases/msrc-cve-2026-503732026-10-18 https://bugrater.com/releases/msrc-cve-2026-503532026-10-18 https://bugrater.com/releases/msrc-cve-2026-503882026-10-18 https://bugrater.com/releases/msrc-cve-2026-504102026-10-18 https://bugrater.com/releases/msrc-cve-2026-504492026-10-18 https://bugrater.com/releases/msrc-cve-2026-503712026-10-18 https://bugrater.com/releases/msrc-cve-2026-503362026-10-18 https://bugrater.com/releases/msrc-cve-2026-503982026-10-18 https://bugrater.com/releases/msrc-cve-2026-504142026-10-18 https://bugrater.com/releases/msrc-cve-2026-503792026-10-18 https://bugrater.com/releases/msrc-cve-2026-504632026-10-18 https://bugrater.com/releases/msrc-cve-2026-504602026-10-18 https://bugrater.com/releases/msrc-cve-2026-504032026-10-18 https://bugrater.com/releases/msrc-cve-2026-504332026-10-18 https://bugrater.com/releases/msrc-cve-2026-503912026-10-18 https://bugrater.com/releases/msrc-cve-2026-504182026-10-18 https://bugrater.com/releases/msrc-cve-2026-504232026-10-18 https://bugrater.com/releases/msrc-cve-2026-503782026-10-18 https://bugrater.com/releases/msrc-cve-2026-504012026-10-18 https://bugrater.com/releases/msrc-cve-2026-503462026-10-18 https://bugrater.com/releases/msrc-cve-2026-503762026-10-18 https://bugrater.com/releases/msrc-cve-2026-503972026-10-18 https://bugrater.com/releases/msrc-cve-2026-504052026-10-18 https://bugrater.com/releases/msrc-cve-2026-504482026-10-01 https://bugrater.com/releases/msrc-cve-2026-503872026-10-18 https://bugrater.com/releases/msrc-cve-2026-503342026-10-18 https://bugrater.com/releases/msrc-cve-2026-504452026-10-18 https://bugrater.com/releases/msrc-cve-2026-503442026-10-18 https://bugrater.com/releases/msrc-cve-2026-503522026-10-18 https://bugrater.com/releases/msrc-cve-2026-503822026-10-18 https://bugrater.com/releases/msrc-cve-2026-504362026-10-18 https://bugrater.com/releases/msrc-cve-2026-504372026-10-18 https://bugrater.com/releases/msrc-cve-2026-504712026-10-18 https://bugrater.com/releases/msrc-cve-2026-503692026-10-18 https://bugrater.com/releases/msrc-cve-2026-504692026-10-18 https://bugrater.com/releases/msrc-cve-2026-504542026-10-01 https://bugrater.com/releases/msrc-cve-2026-503652026-10-18 https://bugrater.com/releases/msrc-cve-2026-504262026-10-18 https://bugrater.com/releases/msrc-cve-2026-503852026-10-18 https://bugrater.com/releases/msrc-cve-2026-504132026-10-18 https://bugrater.com/releases/msrc-cve-2026-504272026-10-18 https://bugrater.com/releases/msrc-cve-2026-504222026-10-18 https://bugrater.com/releases/msrc-cve-2026-504212026-10-18 https://bugrater.com/releases/msrc-cve-2026-503742026-10-18 https://bugrater.com/releases/msrc-cve-2026-503672026-10-18 https://bugrater.com/releases/msrc-cve-2026-503832026-10-18 https://bugrater.com/releases/msrc-cve-2026-504512026-10-18 https://bugrater.com/releases/msrc-cve-2026-504552026-10-18 https://bugrater.com/releases/msrc-cve-2026-504662026-10-18 https://bugrater.com/releases/msrc-cve-2026-504022026-10-18 https://bugrater.com/releases/msrc-cve-2026-504352026-10-18 https://bugrater.com/releases/msrc-cve-2026-504092026-10-18 https://bugrater.com/releases/msrc-cve-2026-504412026-10-18 https://bugrater.com/releases/msrc-cve-2026-504652026-10-18 https://bugrater.com/releases/msrc-cve-2026-504392026-10-18 https://bugrater.com/releases/msrc-cve-2026-504622026-10-18 https://bugrater.com/releases/msrc-cve-2026-504572026-10-18 https://bugrater.com/releases/msrc-cve-2026-504732026-10-18 https://bugrater.com/releases/msrc-cve-2026-504422026-10-18 https://bugrater.com/releases/msrc-cve-2026-503892026-10-18 https://bugrater.com/releases/msrc-cve-2026-504562026-10-18 https://bugrater.com/releases/msrc-cve-2026-504322026-10-18 https://bugrater.com/releases/msrc-cve-2026-503992026-10-18 https://bugrater.com/releases/msrc-cve-2026-504612026-10-18 https://bugrater.com/releases/msrc-cve-2026-504312026-10-18 https://bugrater.com/releases/msrc-cve-2026-504532026-10-18 https://bugrater.com/releases/msrc-cve-2026-504172026-10-01 https://bugrater.com/releases/msrc-cve-2026-504472026-10-18 https://bugrater.com/releases/msrc-cve-2026-504382026-10-18 https://bugrater.com/releases/msrc-cve-2026-504202026-10-18 https://bugrater.com/releases/msrc-cve-2026-503622026-10-18 https://bugrater.com/releases/msrc-cve-2026-504742026-10-18 https://bugrater.com/releases/msrc-cve-2026-504112026-10-18 https://bugrater.com/releases/msrc-cve-2026-504442026-10-18 https://bugrater.com/releases/msrc-cve-2026-503942026-10-18 https://bugrater.com/releases/msrc-cve-2026-504152026-10-18 https://bugrater.com/releases/msrc-cve-2026-504582026-10-18 https://bugrater.com/releases/msrc-cve-2026-504752026-10-18 https://bugrater.com/releases/msrc-cve-2026-504762026-10-18 https://bugrater.com/releases/msrc-cve-2026-504292026-10-18 https://bugrater.com/releases/msrc-cve-2026-504502026-10-18 https://bugrater.com/releases/msrc-cve-2026-504242026-10-18 https://bugrater.com/releases/msrc-cve-2026-504062026-10-18 https://bugrater.com/releases/msrc-cve-2026-504702026-10-18 https://bugrater.com/releases/msrc-cve-2026-504592026-10-18 https://bugrater.com/releases/msrc-cve-2026-504772026-10-18 https://bugrater.com/releases/msrc-cve-2026-504782026-10-18 https://bugrater.com/releases/msrc-cve-2026-504792026-10-18 https://bugrater.com/releases/msrc-cve-2026-504802026-10-18 https://bugrater.com/releases/msrc-cve-2026-504822026-10-18 https://bugrater.com/releases/msrc-cve-2026-504952026-10-18 https://bugrater.com/releases/msrc-cve-2026-504832026-10-18 https://bugrater.com/releases/msrc-cve-2026-504842026-10-18 https://bugrater.com/releases/msrc-cve-2026-504932026-10-01 https://bugrater.com/releases/msrc-cve-2026-505022026-10-18 https://bugrater.com/releases/msrc-cve-2026-504852026-10-01 https://bugrater.com/releases/msrc-cve-2026-504862026-10-18 https://bugrater.com/releases/msrc-cve-2026-504872026-10-18 https://bugrater.com/releases/msrc-cve-2026-504882026-10-18 https://bugrater.com/releases/msrc-cve-2026-505002026-10-18 https://bugrater.com/releases/msrc-cve-2026-504992026-10-18 https://bugrater.com/releases/msrc-cve-2026-504892026-10-18 https://bugrater.com/releases/msrc-cve-2026-504942026-10-18 https://bugrater.com/releases/msrc-cve-2026-504902026-10-18 https://bugrater.com/releases/msrc-cve-2026-504982026-10-18 https://bugrater.com/releases/msrc-cve-2026-505052026-10-18 https://bugrater.com/releases/msrc-cve-2026-504912026-10-18 https://bugrater.com/releases/msrc-cve-2026-504922026-10-18 https://bugrater.com/releases/msrc-cve-2026-505012026-10-01 https://bugrater.com/releases/msrc-cve-2026-505032026-10-18 https://bugrater.com/releases/msrc-cve-2026-504972026-10-18 https://bugrater.com/releases/msrc-cve-2026-504962026-10-18 https://bugrater.com/releases/msrc-cve-2026-505042026-10-18 https://bugrater.com/releases/msrc-cve-2026-472952026-10-18 https://bugrater.com/releases/msrc-cve-2026-505092026-10-18 https://bugrater.com/releases/msrc-cve-2026-505102026-10-18 https://bugrater.com/releases/msrc-cve-2026-505182026-10-18 https://bugrater.com/releases/msrc-cve-2026-505252026-10-18 https://bugrater.com/releases/msrc-cve-2026-505262026-10-18 https://bugrater.com/releases/msrc-cve-2026-505272026-10-18 https://bugrater.com/releases/msrc-cve-2026-505282026-10-18 https://bugrater.com/releases/msrc-cve-2026-506462026-10-18 https://bugrater.com/releases/msrc-cve-2026-506472026-10-18 https://bugrater.com/releases/msrc-cve-2026-506482026-10-18 https://bugrater.com/releases/msrc-cve-2026-506492026-10-18 https://bugrater.com/releases/msrc-cve-2026-506502026-10-18 https://bugrater.com/releases/msrc-cve-2026-506512026-10-18 https://bugrater.com/releases/msrc-cve-2026-506552026-10-18 https://bugrater.com/releases/msrc-cve-2026-506572026-10-18 https://bugrater.com/releases/msrc-cve-2026-506582026-10-18 https://bugrater.com/releases/msrc-cve-2026-506592026-10-18 https://bugrater.com/releases/msrc-cve-2026-506612026-10-18 https://bugrater.com/releases/msrc-cve-2026-506662026-10-18 https://bugrater.com/releases/msrc-cve-2026-506672026-10-18 https://bugrater.com/releases/msrc-cve-2026-506682026-10-18 https://bugrater.com/releases/msrc-cve-2026-506692026-10-18 https://bugrater.com/releases/msrc-cve-2026-506702026-10-18 https://bugrater.com/releases/msrc-cve-2026-506722026-10-18 https://bugrater.com/releases/msrc-cve-2026-506732026-10-18 https://bugrater.com/releases/msrc-cve-2026-506742026-10-18 https://bugrater.com/releases/msrc-cve-2026-506762026-10-18 https://bugrater.com/releases/msrc-cve-2026-506772026-10-18 https://bugrater.com/releases/msrc-cve-2026-541152026-10-18 https://bugrater.com/releases/msrc-cve-2026-506842026-10-18 https://bugrater.com/releases/msrc-cve-2026-506792026-10-01 https://bugrater.com/releases/msrc-cve-2026-506882026-10-18 https://bugrater.com/releases/msrc-cve-2026-506802026-10-18 https://bugrater.com/releases/msrc-cve-2026-506812026-10-18 https://bugrater.com/releases/msrc-cve-2026-541212026-10-18 https://bugrater.com/releases/msrc-cve-2026-506822026-10-18 https://bugrater.com/releases/msrc-cve-2026-506852026-10-18 https://bugrater.com/releases/msrc-cve-2026-506832026-10-18 https://bugrater.com/releases/msrc-cve-2026-506872026-10-18 https://bugrater.com/releases/msrc-cve-2026-506862026-10-18 https://bugrater.com/releases/msrc-cve-2026-506892026-10-18 https://bugrater.com/releases/msrc-cve-2026-541252026-10-18 https://bugrater.com/releases/msrc-cve-2026-506902026-10-18 https://bugrater.com/releases/msrc-cve-2026-506922026-10-18 https://bugrater.com/releases/msrc-cve-2026-541282026-10-18 https://bugrater.com/releases/msrc-cve-2026-541262026-10-18 https://bugrater.com/releases/msrc-cve-2026-550102026-10-18 https://bugrater.com/releases/msrc-cve-2026-472902026-10-18 https://bugrater.com/releases/msrc-cve-2026-476422026-10-18 https://bugrater.com/releases/msrc-cve-2026-485802026-10-18 https://bugrater.com/releases/msrc-cve-2026-503012026-10-18 https://bugrater.com/releases/msrc-cve-2026-503142026-10-18 https://bugrater.com/releases/msrc-cve-2026-504672026-10-18 https://bugrater.com/releases/msrc-cve-2026-550172026-10-18 https://bugrater.com/releases/msrc-cve-2026-550162026-10-18 https://bugrater.com/releases/msrc-cve-2026-550242026-10-18 https://bugrater.com/releases/msrc-cve-2026-504082026-10-18 https://bugrater.com/releases/msrc-cve-2026-550192026-10-18 https://bugrater.com/releases/msrc-cve-2026-550182026-10-18 https://bugrater.com/releases/msrc-cve-2026-550462026-10-18 https://bugrater.com/releases/msrc-cve-2026-550202026-10-18 https://bugrater.com/releases/msrc-cve-2026-550212026-10-18 https://bugrater.com/releases/msrc-cve-2026-550222026-10-18 https://bugrater.com/releases/msrc-cve-2026-550232026-10-18 https://bugrater.com/releases/msrc-cve-2026-550252026-10-18 https://bugrater.com/releases/msrc-cve-2026-550302026-10-18 https://bugrater.com/releases/msrc-cve-2026-551252026-10-18 https://bugrater.com/releases/msrc-cve-2026-550312026-10-18 https://bugrater.com/releases/msrc-cve-2026-550262026-10-18 https://bugrater.com/releases/msrc-cve-2026-550482026-10-18 https://bugrater.com/releases/msrc-cve-2026-550342026-10-18 https://bugrater.com/releases/msrc-cve-2026-550272026-10-18 https://bugrater.com/releases/msrc-cve-2026-550292026-10-18 https://bugrater.com/releases/msrc-cve-2026-550282026-10-18 https://bugrater.com/releases/msrc-cve-2026-550472026-10-18 https://bugrater.com/releases/msrc-cve-2026-550392026-10-18 https://bugrater.com/releases/msrc-cve-2026-550452026-10-18 https://bugrater.com/releases/msrc-cve-2026-550502026-10-18 https://bugrater.com/releases/msrc-cve-2026-550492026-10-18 https://bugrater.com/releases/msrc-cve-2026-550322026-10-18 https://bugrater.com/releases/msrc-cve-2026-550332026-10-01 https://bugrater.com/releases/msrc-cve-2026-550412026-10-18 https://bugrater.com/releases/msrc-cve-2026-551382026-10-18 https://bugrater.com/releases/msrc-cve-2026-551242026-10-18 https://bugrater.com/releases/msrc-cve-2026-551272026-10-18 https://bugrater.com/releases/msrc-cve-2026-551362026-10-18 https://bugrater.com/releases/msrc-cve-2026-551412026-10-18 https://bugrater.com/releases/msrc-cve-2026-551292026-10-18 https://bugrater.com/releases/msrc-cve-2026-550352026-10-18 https://bugrater.com/releases/msrc-cve-2026-550362026-10-18 https://bugrater.com/releases/msrc-cve-2026-550442026-10-18 https://bugrater.com/releases/msrc-cve-2026-550552026-10-18 https://bugrater.com/releases/msrc-cve-2026-550542026-10-18 https://bugrater.com/releases/msrc-cve-2026-550372026-10-18 https://bugrater.com/releases/msrc-cve-2026-550582026-10-18 https://bugrater.com/releases/msrc-cve-2026-550382026-10-18 https://bugrater.com/releases/msrc-cve-2026-551322026-10-18 https://bugrater.com/releases/msrc-cve-2026-551372026-10-18 https://bugrater.com/releases/msrc-cve-2026-550532026-10-18 https://bugrater.com/releases/msrc-cve-2026-551222026-10-18 https://bugrater.com/releases/msrc-cve-2026-550572026-10-18 https://bugrater.com/releases/msrc-cve-2026-551312026-10-18 https://bugrater.com/releases/msrc-cve-2026-551262026-10-18 https://bugrater.com/releases/msrc-cve-2026-550512026-10-18 https://bugrater.com/releases/msrc-cve-2026-551342026-10-18 https://bugrater.com/releases/msrc-cve-2026-550562026-10-18 https://bugrater.com/releases/msrc-cve-2026-550402026-10-18 https://bugrater.com/releases/msrc-cve-2026-551422026-10-18 https://bugrater.com/releases/msrc-cve-2026-551402026-10-18 https://bugrater.com/releases/msrc-cve-2026-551282026-10-18 https://bugrater.com/releases/msrc-cve-2026-551302026-10-18 https://bugrater.com/releases/msrc-cve-2026-550422026-10-18 https://bugrater.com/releases/msrc-cve-2026-551392026-10-18 https://bugrater.com/releases/msrc-cve-2026-550432026-10-18 https://bugrater.com/releases/msrc-cve-2026-551332026-10-18 https://bugrater.com/releases/msrc-cve-2026-551232026-10-18 https://bugrater.com/releases/msrc-cve-2026-550522026-10-18 https://bugrater.com/releases/msrc-cve-2026-504682026-10-18 https://bugrater.com/releases/msrc-cve-2026-541162026-10-18 https://bugrater.com/releases/msrc-cve-2026-551452026-10-18 https://bugrater.com/releases/msrc-cve-2026-541312026-10-18 https://bugrater.com/releases/msrc-cve-2026-558982026-10-18 https://bugrater.com/releases/msrc-cve-2026-559442026-10-18 https://bugrater.com/releases/msrc-cve-2026-559472026-10-18 https://bugrater.com/releases/msrc-cve-2026-559492026-10-18 https://bugrater.com/releases/msrc-cve-2026-561562026-10-18 https://bugrater.com/releases/msrc-cve-2026-561572026-10-18 https://bugrater.com/releases/msrc-cve-2026-411092026-10-18 https://bugrater.com/releases/msrc-cve-2026-503592026-10-18 https://bugrater.com/releases/msrc-cve-2026-561682026-10-18 https://bugrater.com/releases/msrc-cve-2026-561732026-10-18 https://bugrater.com/releases/msrc-cve-2026-561762026-10-18 https://bugrater.com/releases/msrc-cve-2026-561752026-10-18 https://bugrater.com/releases/msrc-cve-2026-561822026-10-18 https://bugrater.com/releases/msrc-cve-2026-561832026-10-18 https://bugrater.com/releases/msrc-cve-2026-561902026-10-18 https://bugrater.com/releases/msrc-cve-2026-561842026-10-18 https://bugrater.com/releases/msrc-cve-2026-561872026-10-18 https://bugrater.com/releases/msrc-cve-2026-561862026-10-18 https://bugrater.com/releases/msrc-cve-2026-561892026-10-18 https://bugrater.com/releases/msrc-cve-2026-506652026-10-18 https://bugrater.com/releases/msrc-cve-2026-561922026-10-18 https://bugrater.com/releases/msrc-cve-2026-561952026-10-18 https://bugrater.com/releases/msrc-cve-2026-561962026-10-18 https://bugrater.com/releases/msrc-cve-2026-561972026-10-18 https://bugrater.com/releases/msrc-cve-2026-561782026-10-18 https://bugrater.com/releases/msrc-cve-2026-566422026-10-18 https://bugrater.com/releases/msrc-cve-2026-566432026-10-18 https://bugrater.com/releases/msrc-cve-2026-566442026-10-18 https://bugrater.com/releases/msrc-cve-2026-541242026-10-18 https://bugrater.com/releases/msrc-cve-2026-561942026-10-18 https://bugrater.com/releases/msrc-cve-2026-566472026-10-18 https://bugrater.com/releases/msrc-cve-2026-566482026-10-18 https://bugrater.com/releases/msrc-cve-2026-566492026-10-18 https://bugrater.com/releases/msrc-cve-2026-570832026-10-18 https://bugrater.com/releases/msrc-cve-2026-570842026-10-18 https://bugrater.com/releases/msrc-cve-2026-566502026-10-18 https://bugrater.com/releases/msrc-cve-2026-570952026-10-18 https://bugrater.com/releases/msrc-cve-2026-570902026-10-18 https://bugrater.com/releases/msrc-cve-2026-570942026-10-18 https://bugrater.com/releases/msrc-cve-2026-570912026-10-18 https://bugrater.com/releases/msrc-cve-2026-570892026-10-18 https://bugrater.com/releases/msrc-cve-2026-570852026-10-18 https://bugrater.com/releases/msrc-cve-2026-570922026-10-18 https://bugrater.com/releases/msrc-cve-2026-570872026-10-18 https://bugrater.com/releases/msrc-cve-2026-570882026-10-18 https://bugrater.com/releases/msrc-cve-2026-570932026-10-18 https://bugrater.com/releases/msrc-cve-2026-570962026-10-18 https://bugrater.com/releases/msrc-cve-2026-571012026-10-18 https://bugrater.com/releases/msrc-cve-2026-571022026-10-18 https://bugrater.com/releases/msrc-cve-2026-571082026-10-18 https://bugrater.com/releases/msrc-cve-2026-579682026-10-18 https://bugrater.com/releases/msrc-cve-2026-579732026-10-18 https://bugrater.com/releases/msrc-cve-2026-579742026-10-18 https://bugrater.com/releases/msrc-cve-2026-579752026-10-18 https://bugrater.com/releases/msrc-cve-2026-579772026-10-18 https://bugrater.com/releases/msrc-cve-2026-579822026-10-18 https://bugrater.com/releases/msrc-cve-2026-579932026-10-18 https://bugrater.com/releases/msrc-cve-2026-582772026-10-18 https://bugrater.com/releases/msrc-cve-2026-582812026-10-18 https://bugrater.com/releases/msrc-cve-2026-582822026-10-18 https://bugrater.com/releases/msrc-cve-2026-582832026-10-18 https://bugrater.com/releases/msrc-cve-2026-582842026-10-18 https://bugrater.com/releases/msrc-cve-2026-582852026-10-18 https://bugrater.com/releases/msrc-cve-2026-582862026-10-18 https://bugrater.com/releases/msrc-cve-2026-582872026-10-18 https://bugrater.com/releases/msrc-cve-2026-582882026-10-18 https://bugrater.com/releases/msrc-cve-2026-582892026-10-18 https://bugrater.com/releases/msrc-cve-2026-582902026-10-18 https://bugrater.com/releases/msrc-cve-2026-582912026-10-18 https://bugrater.com/releases/msrc-cve-2026-582922026-10-18 https://bugrater.com/releases/msrc-cve-2026-582932026-10-18 https://bugrater.com/releases/msrc-cve-2026-582942026-10-18 https://bugrater.com/releases/msrc-cve-2026-582952026-10-18 https://bugrater.com/releases/msrc-cve-2026-582962026-10-18 https://bugrater.com/releases/msrc-cve-2026-582972026-10-18 https://bugrater.com/releases/msrc-cve-2026-582982026-10-18 https://bugrater.com/releases/msrc-cve-2026-582992026-10-18 https://bugrater.com/releases/msrc-cve-2026-583002026-10-18 https://bugrater.com/releases/msrc-cve-2026-585222026-10-18 https://bugrater.com/releases/msrc-cve-2026-585232026-10-18 https://bugrater.com/releases/msrc-cve-2026-585242026-10-18 https://bugrater.com/releases/msrc-cve-2026-585252026-10-18 https://bugrater.com/releases/msrc-cve-2026-585272026-10-18 https://bugrater.com/releases/msrc-cve-2026-585282026-10-18 https://bugrater.com/releases/msrc-cve-2026-585302026-10-18 https://bugrater.com/releases/msrc-cve-2026-585382026-10-18 https://bugrater.com/releases/msrc-cve-2026-585332026-10-18 https://bugrater.com/releases/msrc-cve-2026-585352026-10-18 https://bugrater.com/releases/msrc-cve-2026-585462026-10-18 https://bugrater.com/releases/msrc-cve-2026-585392026-10-18 https://bugrater.com/releases/msrc-cve-2026-585402026-10-18 https://bugrater.com/releases/msrc-cve-2026-585312026-10-18 https://bugrater.com/releases/msrc-cve-2026-585322026-10-18 https://bugrater.com/releases/msrc-cve-2026-585372026-10-18 https://bugrater.com/releases/msrc-cve-2026-585342026-10-18 https://bugrater.com/releases/msrc-cve-2026-585362026-10-18 https://bugrater.com/releases/msrc-cve-2026-585452026-10-18 https://bugrater.com/releases/msrc-cve-2026-585442026-10-18 https://bugrater.com/releases/msrc-cve-2026-585422026-10-18 https://bugrater.com/releases/msrc-cve-2026-585432026-10-18 https://bugrater.com/releases/msrc-cve-2026-585412026-10-18 https://bugrater.com/releases/msrc-cve-2026-585942026-10-18 https://bugrater.com/releases/msrc-cve-2026-585962026-10-18 https://bugrater.com/releases/msrc-cve-2026-585972026-10-18 https://bugrater.com/releases/msrc-cve-2026-473052026-10-18 https://bugrater.com/releases/msrc-cve-2026-586132026-10-18 https://bugrater.com/releases/msrc-cve-2026-586172026-10-18 https://bugrater.com/releases/msrc-cve-2026-586192026-10-18 https://bugrater.com/releases/msrc-cve-2026-586262026-10-18 https://bugrater.com/releases/msrc-cve-2026-586272026-10-18 https://bugrater.com/releases/msrc-cve-2026-586282026-10-18 https://bugrater.com/releases/msrc-cve-2026-586292026-10-18 https://bugrater.com/releases/msrc-cve-2026-586322026-10-18 https://bugrater.com/releases/msrc-cve-2026-586332026-10-18 https://bugrater.com/releases/msrc-cve-2026-586342026-10-18 https://bugrater.com/releases/msrc-cve-2026-586372026-10-18 https://bugrater.com/releases/msrc-cve-2026-586382026-10-18 https://bugrater.com/releases/msrc-cve-2026-561812026-10-18 https://bugrater.com/releases/msrc-cve-2026-551212026-10-18 https://bugrater.com/releases/msrc-cve-2026-585292026-10-18 https://bugrater.com/releases/msrc-cve-2026-591172026-10-18 https://bugrater.com/releases/msrc-cve-2026-586432026-10-18 https://bugrater.com/releases/msrc-cve-2026-585982026-10-18 https://bugrater.com/releases/msrc-cve-2026-628262026-10-18 https://bugrater.com/releases/msrc-cve-2026-561712026-10-18 https://bugrater.com/releases/msrc-cve-2026-579802026-10-18 https://bugrater.com/releases/msrc-cve-2026-561592026-10-18 https://bugrater.com/releases/msrc-cve-2026-561672026-10-18 https://bugrater.com/releases/msrc-cve-2026-561632026-10-18 https://bugrater.com/releases/msrc-cve-2026-561652026-10-18 https://bugrater.com/releases/msrc-cve-2026-541202026-10-18 https://bugrater.com/releases/msrc-cve-2026-561602026-10-18 https://bugrater.com/releases/msrc-cve-2026-354252026-10-18 https://bugrater.com/releases/msrc-cve-2026-491592026-10-18 https://bugrater.com/releases/msrc-cve-2026-505172026-10-18 https://bugrater.com/releases/msrc-cve-2026-561912026-10-18 https://bugrater.com/releases/msrc-cve-2026-571062026-10-18 https://bugrater.com/releases/msrc-cve-2026-628252026-10-18 https://bugrater.com/releases/msrc-cve-2026-586302026-10-18 https://bugrater.com/releases/msrc-cve-2026-582752026-10-18 https://bugrater.com/releases/msrc-cve-2026-628352026-10-18 https://bugrater.com/releases/msrc-cve-2026-579782026-10-18 https://bugrater.com/releases/msrc-cve-2026-579902026-10-18 https://bugrater.com/releases/msrc-cve-2026-579892026-10-18 https://bugrater.com/releases/msrc-cve-2026-628282026-10-18 https://bugrater.com/releases/msrc-cve-2026-668032026-10-18 https://bugrater.com/releases/msrc-cve-2026-663182026-10-18 https://bugrater.com/releases/msrc-cve-2026-663212026-10-18 https://bugrater.com/releases/msrc-cve-2026-663102026-10-18 https://bugrater.com/releases/msrc-cve-2026-663122026-10-18 https://bugrater.com/releases/msrc-cve-2026-663132026-10-18 https://bugrater.com/releases/msrc-cve-2026-663142026-10-18 https://bugrater.com/releases/msrc-cve-2026-663152026-10-18 https://bugrater.com/releases/msrc-cve-2026-663162026-10-18 https://bugrater.com/releases/msrc-cve-2026-658022026-10-18 https://bugrater.com/releases/msrc-cve-2026-658042026-10-18 https://bugrater.com/releases/msrc-cve-2026-663112026-10-18 https://bugrater.com/releases/msrc-cve-2026-663172026-10-18 https://bugrater.com/releases/msrc-cve-2026-663222026-10-18 https://bugrater.com/releases/msrc-cve-2026-663252026-10-18 https://bugrater.com/releases/msrc-cve-2026-663262026-10-18 https://bugrater.com/releases/msrc-cve-2026-628702026-10-18 https://bugrater.com/releases/msrc-cve-2026-561882026-10-18 https://bugrater.com/releases/msrc-cve-2026-585472026-10-18 https://bugrater.com/releases/msrc-cve-2026-504722026-10-18 https://bugrater.com/releases/msrc-cve-2026-561742026-10-18 https://bugrater.com/releases/msrc-cve-2026-586502026-10-18 https://bugrater.com/releases/msrc-cve-2026-657682026-10-18 https://bugrater.com/releases/msrc-cve-2026-571052026-10-18 https://bugrater.com/releases/msrc-cve-2026-628292026-10-18 https://bugrater.com/releases/msrc-cve-2026-628272026-10-18 https://bugrater.com/releases/msrc-cve-2026-628372026-10-18 https://bugrater.com/releases/msrc-cve-2026-635142026-10-18 https://bugrater.com/releases/msrc-cve-2026-635122026-10-18 https://bugrater.com/releases/msrc-cve-2026-635162026-10-18 https://bugrater.com/releases/msrc-cve-2026-635202026-10-18 https://bugrater.com/releases/msrc-cve-2026-628962026-10-18 https://bugrater.com/releases/msrc-cve-2026-628362026-10-18 https://bugrater.com/releases/msrc-cve-2026-656682026-10-18 https://bugrater.com/releases/msrc-cve-2026-505152026-10-18 https://bugrater.com/releases/msrc-cve-2026-591152026-10-18 https://bugrater.com/releases/msrc-cve-2026-629182026-10-18 https://bugrater.com/releases/msrc-cve-2026-504812026-10-18 https://bugrater.com/releases/msrc-cve-2026-635082026-10-18 https://bugrater.com/releases/msrc-cve-2026-403752026-10-18 https://bugrater.com/releases/msrc-cve-2026-541132026-10-18 https://bugrater.com/releases/msrc-cve-2026-549842026-10-18 https://bugrater.com/releases/msrc-cve-2026-491792026-10-18 https://bugrater.com/releases/msrc-cve-2026-586122026-10-01 https://bugrater.com/releases/msrc-cve-2026-613552026-10-18 https://bugrater.com/releases/msrc-cve-2026-613642026-10-18 https://bugrater.com/releases/msrc-cve-2026-613652026-10-18 https://bugrater.com/releases/msrc-cve-2026-613572026-10-18 https://bugrater.com/releases/msrc-cve-2026-613582026-10-18 https://bugrater.com/releases/msrc-cve-2026-613602026-10-18 https://bugrater.com/releases/msrc-cve-2026-619202026-10-18 https://bugrater.com/releases/msrc-cve-2026-619262026-10-18 https://bugrater.com/releases/msrc-cve-2026-591132026-10-18 https://bugrater.com/releases/msrc-cve-2026-472992026-10-18 https://bugrater.com/releases/msrc-cve-2026-619182026-10-18 https://bugrater.com/releases/msrc-cve-2026-472852026-10-18 https://bugrater.com/releases/msrc-cve-2026-619212026-10-18 https://bugrater.com/releases/msrc-cve-2026-619292026-10-18 https://bugrater.com/releases/msrc-cve-2026-591242026-10-18 https://bugrater.com/releases/msrc-cve-2026-626982026-10-18 https://bugrater.com/releases/msrc-cve-2026-626922026-10-18 https://bugrater.com/releases/msrc-cve-2026-591272026-10-18 https://bugrater.com/releases/msrc-cve-2026-619322026-10-18 https://bugrater.com/releases/msrc-cve-2026-591282026-10-18 https://bugrater.com/releases/msrc-cve-2026-627002026-10-18 https://bugrater.com/releases/msrc-cve-2026-591332026-10-18 https://bugrater.com/releases/msrc-cve-2026-619332026-10-18 https://bugrater.com/releases/msrc-cve-2026-591302026-10-18 https://bugrater.com/releases/msrc-cve-2026-619342026-10-18 https://bugrater.com/releases/msrc-cve-2026-591322026-10-18 https://bugrater.com/releases/msrc-cve-2026-619362026-10-18 https://bugrater.com/releases/msrc-cve-2026-627012026-10-18 https://bugrater.com/releases/msrc-cve-2026-627082026-10-18 https://bugrater.com/releases/msrc-cve-2026-591352026-10-18 https://bugrater.com/releases/msrc-cve-2026-619392026-10-18 https://bugrater.com/releases/msrc-cve-2026-627092026-10-18 https://bugrater.com/releases/msrc-cve-2026-591342026-10-18 https://bugrater.com/releases/msrc-cve-2026-627102026-10-18 https://bugrater.com/releases/msrc-cve-2026-626952026-10-01 https://bugrater.com/releases/msrc-cve-2026-591362026-10-18 https://bugrater.com/releases/msrc-cve-2026-591372026-10-18 https://bugrater.com/releases/msrc-cve-2026-627112026-10-18 https://bugrater.com/releases/msrc-cve-2026-591382026-10-18 https://bugrater.com/releases/msrc-cve-2026-627202026-10-18 https://bugrater.com/releases/msrc-cve-2026-613452026-10-18 https://bugrater.com/releases/msrc-cve-2026-627142026-10-18 https://bugrater.com/releases/msrc-cve-2026-613462026-10-18 https://bugrater.com/releases/msrc-cve-2026-627172026-10-18 https://bugrater.com/releases/msrc-cve-2026-626882026-10-01 https://bugrater.com/releases/msrc-cve-2026-627252026-10-18 https://bugrater.com/releases/msrc-cve-2026-628192026-10-18 https://bugrater.com/releases/msrc-cve-2026-627262026-10-18 https://bugrater.com/releases/msrc-cve-2026-628202026-10-18 https://bugrater.com/releases/msrc-cve-2026-626902026-10-18 https://bugrater.com/releases/msrc-cve-2026-627282026-10-18 https://bugrater.com/releases/msrc-cve-2026-613532026-10-18 https://bugrater.com/releases/msrc-cve-2026-626932026-10-18 https://bugrater.com/releases/msrc-cve-2026-688102026-10-18 https://bugrater.com/releases/msrc-cve-2026-613472026-10-18 https://bugrater.com/releases/msrc-cve-2026-626962026-10-18 https://bugrater.com/releases/msrc-cve-2026-688112026-10-18 https://bugrater.com/releases/msrc-cve-2026-613612026-10-18 https://bugrater.com/releases/msrc-cve-2026-628762026-10-18 https://bugrater.com/releases/msrc-cve-2026-627332026-10-18 https://bugrater.com/releases/msrc-cve-2026-688132026-10-18 https://bugrater.com/releases/msrc-cve-2026-613482026-10-18 https://bugrater.com/releases/msrc-cve-2026-627432026-10-18 https://bugrater.com/releases/msrc-cve-2026-613502026-10-18 https://bugrater.com/releases/msrc-cve-2026-628772026-10-18 https://bugrater.com/releases/msrc-cve-2026-627302026-10-18 https://bugrater.com/releases/msrc-cve-2026-688152026-10-18 https://bugrater.com/releases/msrc-cve-2026-627022026-10-18 https://bugrater.com/releases/msrc-cve-2026-627322026-10-18 https://bugrater.com/releases/msrc-cve-2026-613562026-10-18 https://bugrater.com/releases/msrc-cve-2026-626992026-10-18 https://bugrater.com/releases/msrc-cve-2026-627342026-10-18 https://bugrater.com/releases/msrc-cve-2026-613672026-10-18 https://bugrater.com/releases/msrc-cve-2026-627362026-10-18 https://bugrater.com/releases/msrc-cve-2026-627032026-10-18 https://bugrater.com/releases/msrc-cve-2026-628902026-10-18 https://bugrater.com/releases/msrc-cve-2026-619232026-10-18 https://bugrater.com/releases/msrc-cve-2026-627572026-10-18 https://bugrater.com/releases/msrc-cve-2026-627052026-10-18 https://bugrater.com/releases/msrc-cve-2026-688162026-10-18 https://bugrater.com/releases/msrc-cve-2026-613662026-10-01 https://bugrater.com/releases/msrc-cve-2026-627412026-10-10 https://bugrater.com/releases/msrc-cve-2026-627072026-10-18 https://bugrater.com/releases/msrc-cve-2026-628922026-10-18 https://bugrater.com/releases/msrc-cve-2026-627132026-10-18 https://bugrater.com/releases/msrc-cve-2026-688192026-10-18 https://bugrater.com/releases/msrc-cve-2026-628932026-10-18 https://bugrater.com/releases/msrc-cve-2026-627122026-10-18 https://bugrater.com/releases/msrc-cve-2026-688202026-10-18 https://bugrater.com/releases/msrc-cve-2026-628942026-10-18 https://bugrater.com/releases/msrc-cve-2026-627182026-10-18 https://bugrater.com/releases/msrc-cve-2026-628972026-10-18 https://bugrater.com/releases/msrc-cve-2026-627492026-10-18 https://bugrater.com/releases/msrc-cve-2026-627152026-10-18 https://bugrater.com/releases/msrc-cve-2026-693202026-10-18 https://bugrater.com/releases/msrc-cve-2026-627512026-10-18 https://bugrater.com/releases/msrc-cve-2026-627162026-10-18 https://bugrater.com/releases/msrc-cve-2026-613682026-10-18 https://bugrater.com/releases/msrc-cve-2026-628992026-10-18 https://bugrater.com/releases/msrc-cve-2026-692782026-10-18 https://bugrater.com/releases/msrc-cve-2026-627192026-10-18 https://bugrater.com/releases/msrc-cve-2026-629002026-10-18 https://bugrater.com/releases/msrc-cve-2026-693062026-10-18 https://bugrater.com/releases/msrc-cve-2026-619242026-10-18 https://bugrater.com/releases/msrc-cve-2026-629012026-10-18 https://bugrater.com/releases/msrc-cve-2026-703072026-10-18 https://bugrater.com/releases/msrc-cve-2026-627222026-10-18 https://bugrater.com/releases/msrc-cve-2026-627522026-10-18 https://bugrater.com/releases/msrc-cve-2026-619252026-10-18 https://bugrater.com/releases/msrc-cve-2026-657692026-10-18 https://bugrater.com/releases/msrc-cve-2026-619272026-10-18 https://bugrater.com/releases/msrc-cve-2026-663012026-10-18 https://bugrater.com/releases/msrc-cve-2026-629022026-10-18 https://bugrater.com/releases/msrc-cve-2026-627692026-10-18 https://bugrater.com/releases/msrc-cve-2026-619282026-10-18 https://bugrater.com/releases/msrc-cve-2026-703122026-10-18 https://bugrater.com/releases/msrc-cve-2026-627712026-10-18 https://bugrater.com/releases/msrc-cve-2026-629082026-10-18 https://bugrater.com/releases/msrc-cve-2026-627232026-10-18 https://bugrater.com/releases/msrc-cve-2026-703112026-10-18 https://bugrater.com/releases/msrc-cve-2026-629092026-10-18 https://bugrater.com/releases/msrc-cve-2026-627242026-10-18 https://bugrater.com/releases/msrc-cve-2026-703132026-10-18 https://bugrater.com/releases/msrc-cve-2026-629102026-10-18 https://bugrater.com/releases/msrc-cve-2026-619302026-10-18 https://bugrater.com/releases/msrc-cve-2026-627482026-10-18 https://bugrater.com/releases/msrc-cve-2026-703102026-10-18 https://bugrater.com/releases/msrc-cve-2026-629122026-10-18 https://bugrater.com/releases/msrc-cve-2026-627292026-10-18 https://bugrater.com/releases/msrc-cve-2026-703162026-10-18 https://bugrater.com/releases/msrc-cve-2026-619372026-10-01 https://bugrater.com/releases/msrc-cve-2026-627462026-10-18 https://bugrater.com/releases/msrc-cve-2026-627612026-10-18 https://bugrater.com/releases/msrc-cve-2026-703152026-10-18 https://bugrater.com/releases/msrc-cve-2026-627682026-10-18 https://bugrater.com/releases/msrc-cve-2026-703212026-10-18 https://bugrater.com/releases/msrc-cve-2026-629132026-10-18 https://bugrater.com/releases/msrc-cve-2026-627702026-10-18 https://bugrater.com/releases/msrc-cve-2026-627402026-10-18 https://bugrater.com/releases/msrc-cve-2026-703182026-10-18 https://bugrater.com/releases/msrc-cve-2026-627752026-10-18 https://bugrater.com/releases/msrc-cve-2026-629142026-10-18 https://bugrater.com/releases/msrc-cve-2026-627532026-10-18 https://bugrater.com/releases/msrc-cve-2026-627992026-10-18 https://bugrater.com/releases/msrc-cve-2026-703142026-10-18 https://bugrater.com/releases/msrc-cve-2026-629152026-10-18 https://bugrater.com/releases/msrc-cve-2026-627352026-10-01 https://bugrater.com/releases/msrc-cve-2026-703172026-10-18 https://bugrater.com/releases/msrc-cve-2026-541232026-10-18 https://bugrater.com/releases/msrc-cve-2026-627782026-10-18 https://bugrater.com/releases/msrc-cve-2026-703252026-10-18 https://bugrater.com/releases/msrc-cve-2026-635132026-10-01 https://bugrater.com/releases/msrc-cve-2026-703192026-10-18 https://bugrater.com/releases/msrc-cve-2026-627802026-10-18 https://bugrater.com/releases/msrc-cve-2026-703202026-10-18 https://bugrater.com/releases/msrc-cve-2026-635152026-10-01 https://bugrater.com/releases/msrc-cve-2026-703232026-10-18 https://bugrater.com/releases/msrc-cve-2026-703222026-10-18 https://bugrater.com/releases/msrc-cve-2026-627372026-10-18 https://bugrater.com/releases/msrc-cve-2026-703242026-10-18 https://bugrater.com/releases/msrc-cve-2026-628002026-10-18 https://bugrater.com/releases/msrc-cve-2026-703272026-10-18 https://bugrater.com/releases/msrc-cve-2026-703282026-10-18 https://bugrater.com/releases/msrc-cve-2026-627862026-10-18 https://bugrater.com/releases/msrc-cve-2026-703292026-10-18 https://bugrater.com/releases/msrc-cve-2026-627882026-10-18 https://bugrater.com/releases/msrc-cve-2026-703042026-10-18 https://bugrater.com/releases/msrc-cve-2026-627392026-10-18 https://bugrater.com/releases/msrc-cve-2026-635172026-10-18 https://bugrater.com/releases/msrc-cve-2026-703302026-10-18 https://bugrater.com/releases/msrc-cve-2026-627902026-10-18 https://bugrater.com/releases/msrc-cve-2026-703352026-10-18 https://bugrater.com/releases/msrc-cve-2026-635182026-10-18 https://bugrater.com/releases/msrc-cve-2026-627422026-10-18 https://bugrater.com/releases/msrc-cve-2026-627932026-10-18 https://bugrater.com/releases/msrc-cve-2026-703362026-10-18 https://bugrater.com/releases/msrc-cve-2026-627452026-10-18 https://bugrater.com/releases/msrc-cve-2026-571042026-10-18 https://bugrater.com/releases/msrc-cve-2026-635212026-10-18 https://bugrater.com/releases/msrc-cve-2026-627472026-10-01 https://bugrater.com/releases/msrc-cve-2026-628032026-10-18 https://bugrater.com/releases/msrc-cve-2026-635192026-10-18 https://bugrater.com/releases/msrc-cve-2026-703402026-10-18 https://bugrater.com/releases/msrc-cve-2026-658062026-10-18 https://bugrater.com/releases/msrc-cve-2026-628072026-10-18 https://bugrater.com/releases/msrc-cve-2026-613522026-10-18 https://bugrater.com/releases/msrc-cve-2026-628112026-10-18 https://bugrater.com/releases/msrc-cve-2026-649222026-10-18 https://bugrater.com/releases/msrc-cve-2026-628142026-10-18 https://bugrater.com/releases/msrc-cve-2026-657832026-10-18 https://bugrater.com/releases/msrc-cve-2026-656572026-10-18 https://bugrater.com/releases/msrc-cve-2026-628232026-10-18 https://bugrater.com/releases/msrc-cve-2026-627502026-10-18 https://bugrater.com/releases/msrc-cve-2026-668042026-10-01 https://bugrater.com/releases/msrc-cve-2026-627542026-10-18 https://bugrater.com/releases/msrc-cve-2026-628242026-10-18 https://bugrater.com/releases/msrc-cve-2026-656562026-10-18 https://bugrater.com/releases/msrc-cve-2026-628222026-10-18 https://bugrater.com/releases/msrc-cve-2026-627832026-10-18 https://bugrater.com/releases/msrc-cve-2026-627552026-10-01 https://bugrater.com/releases/msrc-cve-2026-628322026-10-18 https://bugrater.com/releases/msrc-cve-2026-656582026-10-18 https://bugrater.com/releases/msrc-cve-2026-628712026-10-18 https://bugrater.com/releases/msrc-cve-2026-656612026-10-18 https://bugrater.com/releases/msrc-cve-2026-628722026-10-18 https://bugrater.com/releases/msrc-cve-2026-656632026-10-18 https://bugrater.com/releases/msrc-cve-2026-627582026-10-18 https://bugrater.com/releases/msrc-cve-2026-656602026-10-18 https://bugrater.com/releases/msrc-cve-2026-656642026-10-18 https://bugrater.com/releases/msrc-cve-2026-627662026-10-18 https://bugrater.com/releases/msrc-cve-2026-656652026-10-18 https://bugrater.com/releases/msrc-cve-2026-627732026-10-18 https://bugrater.com/releases/msrc-cve-2026-703442026-10-18 https://bugrater.com/releases/msrc-cve-2026-656622026-10-18 https://bugrater.com/releases/msrc-cve-2026-703452026-10-18 https://bugrater.com/releases/msrc-cve-2026-628802026-10-18 https://bugrater.com/releases/msrc-cve-2026-656712026-10-18 https://bugrater.com/releases/msrc-cve-2026-627722026-10-18 https://bugrater.com/releases/msrc-cve-2026-703462026-10-18 https://bugrater.com/releases/msrc-cve-2026-656722026-10-18 https://bugrater.com/releases/msrc-cve-2026-627742026-10-18 https://bugrater.com/releases/msrc-cve-2026-703472026-10-18 https://bugrater.com/releases/msrc-cve-2026-628812026-10-18 https://bugrater.com/releases/msrc-cve-2026-656752026-10-18 https://bugrater.com/releases/msrc-cve-2026-628832026-10-18 https://bugrater.com/releases/msrc-cve-2026-627772026-10-01 https://bugrater.com/releases/msrc-cve-2026-703552026-10-01 https://bugrater.com/releases/msrc-cve-2026-628852026-10-18 https://bugrater.com/releases/msrc-cve-2026-656782026-10-18 https://bugrater.com/releases/msrc-cve-2026-628862026-10-17 https://bugrater.com/releases/msrc-cve-2026-657852026-10-18 https://bugrater.com/releases/msrc-cve-2026-657842026-10-18 https://bugrater.com/releases/msrc-cve-2026-657862026-10-18 https://bugrater.com/releases/msrc-cve-2026-628872026-10-18 https://bugrater.com/releases/msrc-cve-2026-657892026-10-18 https://bugrater.com/releases/msrc-cve-2026-628882026-10-18 https://bugrater.com/releases/msrc-cve-2026-627842026-10-18 https://bugrater.com/releases/msrc-cve-2026-629112026-10-18 https://bugrater.com/releases/msrc-cve-2026-729712026-10-18 https://bugrater.com/releases/msrc-cve-2026-657882026-10-18 https://bugrater.com/releases/msrc-cve-2026-429762026-10-18 https://bugrater.com/releases/msrc-cve-2026-658072026-10-18 https://bugrater.com/releases/msrc-cve-2026-549812026-10-18 https://bugrater.com/releases/msrc-cve-2026-627982026-10-18 https://bugrater.com/releases/msrc-cve-2026-628422026-10-18 https://bugrater.com/releases/msrc-cve-2026-658112026-10-18 https://bugrater.com/releases/msrc-cve-2026-67262026-10-18 https://bugrater.com/releases/msrc-cve-2026-635242026-10-18 https://bugrater.com/releases/msrc-cve-2026-658132026-10-18 https://bugrater.com/releases/msrc-cve-2026-586412026-10-18 https://bugrater.com/releases/msrc-cve-2026-635252026-10-18 https://bugrater.com/releases/msrc-cve-2026-627962026-10-18 https://bugrater.com/releases/msrc-cve-2026-658142026-10-18 https://bugrater.com/releases/msrc-cve-2026-586512026-10-18 https://bugrater.com/releases/msrc-cve-2026-658152026-10-18 https://bugrater.com/releases/msrc-cve-2026-591192026-10-18 https://bugrater.com/releases/msrc-cve-2026-667992026-10-18 https://bugrater.com/releases/msrc-cve-2026-635262026-10-18 https://bugrater.com/releases/msrc-cve-2026-591222026-10-18 https://bugrater.com/releases/msrc-cve-2026-627972026-10-18 https://bugrater.com/releases/msrc-cve-2026-635282026-10-18 https://bugrater.com/releases/msrc-cve-2026-591252026-10-18 https://bugrater.com/releases/msrc-cve-2026-628122026-10-18 https://bugrater.com/releases/msrc-cve-2026-635272026-10-18 https://bugrater.com/releases/msrc-cve-2026-591262026-10-18 https://bugrater.com/releases/msrc-cve-2026-687922026-10-18 https://bugrater.com/releases/msrc-cve-2026-635292026-10-18 https://bugrater.com/releases/msrc-cve-2026-628152026-10-18 https://bugrater.com/releases/msrc-cve-2026-591312026-10-18 https://bugrater.com/releases/msrc-cve-2026-687932026-10-18 https://bugrater.com/releases/msrc-cve-2026-635302026-10-18 https://bugrater.com/releases/msrc-cve-2026-613492026-10-01 https://bugrater.com/releases/msrc-cve-2026-687942026-10-18 https://bugrater.com/releases/msrc-cve-2026-635312026-10-18 https://bugrater.com/releases/msrc-cve-2026-628162026-10-18 https://bugrater.com/releases/msrc-cve-2026-635322026-10-18 https://bugrater.com/releases/msrc-cve-2026-687952026-10-18 https://bugrater.com/releases/msrc-cve-2026-635332026-10-18 https://bugrater.com/releases/msrc-cve-2026-613632026-10-18 https://bugrater.com/releases/msrc-cve-2026-648972026-10-18 https://bugrater.com/releases/msrc-cve-2026-687962026-10-18 https://bugrater.com/releases/msrc-cve-2026-613592026-10-01 https://bugrater.com/releases/msrc-cve-2026-688002026-10-18 https://bugrater.com/releases/msrc-cve-2026-648982026-10-18 https://bugrater.com/releases/msrc-cve-2026-688022026-10-18 https://bugrater.com/releases/msrc-cve-2026-688072026-10-18 https://bugrater.com/releases/msrc-cve-2026-649022026-10-18 https://bugrater.com/releases/msrc-cve-2026-648992026-10-18 https://bugrater.com/releases/msrc-cve-2026-649032026-10-18 https://bugrater.com/releases/msrc-cve-2026-688062026-10-18 https://bugrater.com/releases/msrc-cve-2026-649012026-10-18 https://bugrater.com/releases/msrc-cve-2026-688082026-10-18 https://bugrater.com/releases/msrc-cve-2026-688092026-10-18 https://bugrater.com/releases/msrc-cve-2026-649042026-10-18 https://bugrater.com/releases/msrc-cve-2026-649052026-10-18 https://bugrater.com/releases/msrc-cve-2026-649072026-10-18 https://bugrater.com/releases/msrc-cve-2026-649062026-10-18 https://bugrater.com/releases/msrc-cve-2026-649092026-10-18 https://bugrater.com/releases/msrc-cve-2026-649102026-10-18 https://bugrater.com/releases/msrc-cve-2026-649122026-10-18 https://bugrater.com/releases/msrc-cve-2026-649112026-10-18 https://bugrater.com/releases/msrc-cve-2026-649082026-10-18 https://bugrater.com/releases/msrc-cve-2026-649142026-10-18 https://bugrater.com/releases/msrc-cve-2026-649152026-10-18 https://bugrater.com/releases/msrc-cve-2026-649162026-10-18 https://bugrater.com/releases/msrc-cve-2026-649202026-10-18 https://bugrater.com/releases/msrc-cve-2026-649172026-10-18 https://bugrater.com/releases/msrc-cve-2026-649192026-10-18 https://bugrater.com/releases/msrc-cve-2026-649212026-10-18 https://bugrater.com/releases/msrc-cve-2026-628822026-10-18 https://bugrater.com/releases/msrc-cve-2026-656732026-10-18 https://bugrater.com/releases/msrc-cve-2026-656812026-10-18 https://bugrater.com/releases/msrc-cve-2026-656802026-10-18 https://bugrater.com/releases/msrc-cve-2026-656792026-10-18 https://bugrater.com/releases/msrc-cve-2026-657732026-10-18 https://bugrater.com/releases/msrc-cve-2026-657742026-10-18 https://bugrater.com/releases/msrc-cve-2026-657752026-10-17 https://bugrater.com/releases/msrc-cve-2026-657762026-10-18 https://bugrater.com/releases/msrc-cve-2026-657772026-10-18 https://bugrater.com/releases/msrc-cve-2026-657792026-10-18 https://bugrater.com/releases/msrc-cve-2026-657802026-10-18 https://bugrater.com/releases/msrc-cve-2026-657782026-10-18 https://bugrater.com/releases/msrc-cve-2026-657822026-10-18 https://bugrater.com/releases/msrc-cve-2026-657812026-10-18 https://bugrater.com/releases/msrc-cve-2026-657902026-10-18 https://bugrater.com/releases/msrc-cve-2026-657952026-10-18 https://bugrater.com/releases/msrc-cve-2026-657942026-10-18 https://bugrater.com/releases/msrc-cve-2026-657972026-10-18 https://bugrater.com/releases/msrc-cve-2026-657992026-10-18 https://bugrater.com/releases/msrc-cve-2026-657982026-10-18 https://bugrater.com/releases/msrc-cve-2026-657962026-10-18 https://bugrater.com/releases/msrc-cve-2026-658102026-10-18 https://bugrater.com/releases/msrc-cve-2026-668022026-10-18 https://bugrater.com/releases/msrc-cve-2026-668052026-10-18 https://bugrater.com/releases/msrc-cve-2026-668062026-10-18 https://bugrater.com/releases/msrc-cve-2026-668072026-10-18 https://bugrater.com/releases/msrc-cve-2026-668082026-10-18 https://bugrater.com/releases/msrc-cve-2026-668102026-10-18 https://bugrater.com/releases/msrc-cve-2026-668092026-10-18 https://bugrater.com/releases/msrc-cve-2026-687972026-10-18 https://bugrater.com/releases/msrc-cve-2026-687982026-10-17 https://bugrater.com/releases/msrc-cve-2026-687992026-10-18 https://bugrater.com/releases/msrc-cve-2026-688012026-10-18 https://bugrater.com/releases/msrc-cve-2026-688032026-10-18 https://bugrater.com/releases/msrc-cve-2026-688042026-10-01 https://bugrater.com/releases/msrc-cve-2026-688052026-10-18 https://bugrater.com/releases/msrc-cve-2026-688122026-10-18 https://bugrater.com/releases/msrc-cve-2026-688142026-10-18 https://bugrater.com/releases/msrc-cve-2026-688172026-10-18 https://bugrater.com/releases/msrc-cve-2026-561792026-10-18 https://bugrater.com/releases/msrc-cve-2026-701302026-10-18 https://bugrater.com/releases/msrc-cve-2026-703062026-10-18 https://bugrater.com/releases/msrc-cve-2026-703262026-10-18 https://bugrater.com/releases/msrc-cve-2026-703382026-10-01 https://bugrater.com/releases/msrc-cve-2026-703372026-10-01 https://bugrater.com/releases/msrc-cve-2026-703322026-10-18 https://bugrater.com/releases/msrc-cve-2026-635222026-10-18 https://bugrater.com/releases/msrc-cve-2026-703542026-10-18 https://bugrater.com/releases/msrc-cve-2026-713312026-10-18 https://bugrater.com/releases/msrc-cve-2026-627382026-10-18 https://bugrater.com/releases/msrc-cve-2026-628982026-10-18 https://bugrater.com/releases/msrc-cve-2026-657672026-10-18 https://bugrater.com/releases/msrc-cve-2026-586392026-10-18 https://bugrater.com/releases/msrc-cve-2026-628392026-10-18 https://bugrater.com/releases/msrc-cve-2026-629172026-10-18 https://bugrater.com/releases/msrc-cve-2026-628302026-10-18 https://bugrater.com/releases/msrc-cve-2026-561612026-10-18 https://bugrater.com/releases/msrc-cve-2026-591182026-10-18 https://bugrater.com/releases/msrc-cve-2026-505162026-10-18 https://bugrater.com/releases/msrc-cve-2026-561622026-10-18 https://bugrater.com/releases/msrc-cve-2026-656672026-10-18 https://bugrater.com/releases/msrc-cve-2026-491632026-10-18 https://bugrater.com/releases/msrc-cve-2026-688232026-10-18 https://bugrater.com/releases/msrc-cve-2026-628692026-10-18 https://bugrater.com/releases/msrc-cve-2026-703392026-10-18 https://bugrater.com/releases/msrc-cve-2026-703482026-10-18 https://bugrater.com/releases/msrc-cve-2026-729702026-10-18 https://bugrater.com/releases/msrc-cve-2026-505232026-10-01 https://bugrater.com/releases/msrc-cve-2026-694142026-10-18 https://bugrater.com/releases/msrc-cve-2026-627212026-10-18 https://bugrater.com/releases/msrc-cve-2026-243012026-10-18 https://bugrater.com/releases/msrc-cve-2026-619382026-10-18 https://bugrater.com/releases/msrc-cve-2026-657912026-10-18 https://bugrater.com/releases/msrc-cve-2026-627272026-10-18 https://bugrater.com/releases/msrc-cve-2026-695502026-10-18 https://bugrater.com/releases/msrc-cve-2026-698512026-10-18 https://bugrater.com/releases/msrc-cve-2026-695192026-10-18 https://bugrater.com/releases/msrc-cve-2026-550152026-10-18 https://bugrater.com/releases/msrc-cve-2026-687892026-10-18 https://bugrater.com/releases/msrc-cve-2026-550132026-10-18 https://bugrater.com/releases/msrc-cve-2026-658012026-10-18 https://bugrater.com/releases/msrc-cve-2026-628342026-10-18 https://bugrater.com/releases/msrc-cve-2026-657702026-10-18 https://bugrater.com/releases/msrc-cve-2026-635092026-10-18 https://bugrater.com/releases/msrc-cve-2026-658162026-10-18 https://bugrater.com/releases/msrc-cve-2026-663092026-10-18 https://bugrater.com/releases/msrc-cve-2026-668002026-10-18 https://bugrater.com/releases/msrc-cve-2026-687822026-10-18 https://bugrater.com/releases/msrc-cve-2026-694192026-10-18 https://bugrater.com/releases/msrc-cve-2026-695022026-10-18 https://bugrater.com/releases/msrc-cve-2026-694002026-10-18 https://bugrater.com/releases/msrc-cve-2026-695552026-10-18 https://bugrater.com/releases/msrc-cve-2026-695582026-10-18 https://bugrater.com/releases/msrc-cve-2026-698552026-10-18 https://bugrater.com/releases/msrc-cve-2026-698362026-10-18 https://bugrater.com/releases/msrc-cve-2026-657872026-10-18 https://bugrater.com/releases/msrc-cve-2026-703312026-10-18 https://bugrater.com/releases/msrc-cve-2026-586162026-10-18 https://bugrater.com/releases/msrc-cve-2026-629042026-10-18 https://bugrater.com/releases/msrc-cve-2026-694462026-09-30 https://bugrater.com/releases/msrc-cve-2026-663232026-10-18 https://bugrater.com/releases/msrc-cve-2026-663242026-10-18 https://bugrater.com/releases/msrc-cve-2026-667982026-10-18 https://bugrater.com/releases/msrc-cve-2026-703412026-10-18 https://bugrater.com/releases/msrc-cve-2026-729842026-10-18 https://bugrater.com/releases/msrc-cve-2026-703092026-10-18 https://bugrater.com/releases/msrc-cve-2026-688212026-10-18 https://bugrater.com/releases/msrc-cve-2026-701052026-10-18 https://bugrater.com/releases/msrc-cve-2026-627062026-10-18 https://bugrater.com/releases/msrc-cve-2026-626942026-10-18 https://bugrater.com/releases/msrc-cve-2026-627442026-10-18 https://bugrater.com/releases/msrc-cve-2026-663042026-10-18 https://bugrater.com/releases/msrc-cve-2026-663022026-10-18 https://bugrater.com/releases/msrc-cve-2026-663062026-10-18 https://bugrater.com/releases/msrc-cve-2026-663082026-10-18 https://bugrater.com/releases/msrc-cve-2026-628952026-10-18 https://bugrater.com/releases/msrc-cve-2026-693412026-10-18 https://bugrater.com/releases/msrc-cve-2026-695222026-10-18 https://bugrater.com/releases/msrc-cve-2026-697822026-10-18 https://bugrater.com/releases/msrc-cve-2026-629162026-10-18 https://bugrater.com/releases/msrc-cve-2026-658182026-10-18 https://bugrater.com/releases/msrc-cve-2026-698572026-10-18 https://bugrater.com/releases/msrc-cve-2026-701782026-10-18 https://bugrater.com/releases/msrc-cve-2026-839412026-10-18 https://bugrater.com/releases/msrc-cve-2026-853602026-10-18 https://bugrater.com/releases/msrc-cve-2026-774822026-10-18 https://bugrater.com/releases/msrc-cve-2026-570982026-10-18 https://bugrater.com/releases/msrc-cve-2026-628012026-10-01 https://bugrater.com/releases/msrc-cve-2026-550072026-10-18 https://bugrater.com/releases/msrc-cve-2026-503492026-10-18 https://bugrater.com/releases/msrc-cve-2026-673682026-10-18 https://bugrater.com/releases/msrc-cve-2026-673702026-10-18 https://bugrater.com/releases/msrc-cve-2026-673732026-10-01 https://bugrater.com/releases/msrc-cve-2026-676292026-10-18 https://bugrater.com/releases/msrc-cve-2026-676302026-10-18 https://bugrater.com/releases/msrc-cve-2026-676312026-10-18 https://bugrater.com/releases/msrc-cve-2026-676332026-10-18 https://bugrater.com/releases/msrc-cve-2026-687812026-10-18 https://bugrater.com/releases/msrc-cve-2026-687842026-10-18 https://bugrater.com/releases/msrc-cve-2026-687852026-10-18 https://bugrater.com/releases/msrc-cve-2026-687872026-10-18 https://bugrater.com/releases/msrc-cve-2026-688242026-10-18 https://bugrater.com/releases/msrc-cve-2026-688302026-10-18 https://bugrater.com/releases/msrc-cve-2026-688322026-10-18 https://bugrater.com/releases/msrc-cve-2026-688332026-10-01 https://bugrater.com/releases/msrc-cve-2026-688352026-10-18 https://bugrater.com/releases/msrc-cve-2026-688412026-10-01 https://bugrater.com/releases/msrc-cve-2026-688472026-10-18 https://bugrater.com/releases/msrc-cve-2026-688492026-10-18 https://bugrater.com/releases/msrc-cve-2026-688452026-10-18 https://bugrater.com/releases/msrc-cve-2026-688462026-10-18 https://bugrater.com/releases/msrc-cve-2026-688512026-10-18 https://bugrater.com/releases/msrc-cve-2026-688752026-10-18 https://bugrater.com/releases/msrc-cve-2026-688972026-10-18 https://bugrater.com/releases/msrc-cve-2026-688782026-10-18 https://bugrater.com/releases/msrc-cve-2026-688842026-10-18 https://bugrater.com/releases/msrc-cve-2026-688812026-10-18 https://bugrater.com/releases/msrc-cve-2026-688902026-10-18 https://bugrater.com/releases/msrc-cve-2026-692712026-10-18 https://bugrater.com/releases/msrc-cve-2026-688922026-10-18 https://bugrater.com/releases/msrc-cve-2026-688932026-10-18 https://bugrater.com/releases/msrc-cve-2026-692812026-10-18 https://bugrater.com/releases/msrc-cve-2026-692672026-10-18 https://bugrater.com/releases/msrc-cve-2026-692762026-10-18 https://bugrater.com/releases/msrc-cve-2026-692922026-10-18 https://bugrater.com/releases/msrc-cve-2026-693072026-10-18 https://bugrater.com/releases/msrc-cve-2026-692792026-10-18 https://bugrater.com/releases/msrc-cve-2026-692962026-10-18 https://bugrater.com/releases/msrc-cve-2026-693252026-10-18 https://bugrater.com/releases/msrc-cve-2026-693362026-10-18 https://bugrater.com/releases/msrc-cve-2026-693102026-10-18 https://bugrater.com/releases/msrc-cve-2026-693662026-10-18 https://bugrater.com/releases/msrc-cve-2026-693372026-10-18 https://bugrater.com/releases/msrc-cve-2026-693332026-10-18 https://bugrater.com/releases/msrc-cve-2026-693392026-10-18 https://bugrater.com/releases/msrc-cve-2026-693382026-10-01 https://bugrater.com/releases/msrc-cve-2026-693472026-10-18 https://bugrater.com/releases/msrc-cve-2026-693452026-10-18 https://bugrater.com/releases/msrc-cve-2026-693772026-10-18 https://bugrater.com/releases/msrc-cve-2026-693492026-10-18 https://bugrater.com/releases/msrc-cve-2026-693622026-10-18 https://bugrater.com/releases/msrc-cve-2026-693592026-10-18 https://bugrater.com/releases/msrc-cve-2026-693672026-10-18 https://bugrater.com/releases/msrc-cve-2026-693892026-10-18 https://bugrater.com/releases/msrc-cve-2026-693682026-10-18 https://bugrater.com/releases/msrc-cve-2026-693712026-10-18 https://bugrater.com/releases/msrc-cve-2026-693792026-10-18 https://bugrater.com/releases/msrc-cve-2026-693912026-10-18 https://bugrater.com/releases/msrc-cve-2026-694042026-10-18 https://bugrater.com/releases/msrc-cve-2026-693902026-10-18 https://bugrater.com/releases/msrc-cve-2026-694062026-10-18 https://bugrater.com/releases/msrc-cve-2026-694012026-10-18 https://bugrater.com/releases/msrc-cve-2026-694132026-10-18 https://bugrater.com/releases/msrc-cve-2026-694182026-10-18 https://bugrater.com/releases/msrc-cve-2026-694082026-10-18 https://bugrater.com/releases/msrc-cve-2026-694572026-10-18 https://bugrater.com/releases/msrc-cve-2026-694122026-10-18 https://bugrater.com/releases/msrc-cve-2026-694152026-10-18 https://bugrater.com/releases/msrc-cve-2026-694202026-10-18 https://bugrater.com/releases/msrc-cve-2026-694362026-10-18 https://bugrater.com/releases/msrc-cve-2026-694292026-10-18 https://bugrater.com/releases/msrc-cve-2026-694482026-10-18 https://bugrater.com/releases/msrc-cve-2026-694582026-10-18 https://bugrater.com/releases/msrc-cve-2026-694912026-10-18 https://bugrater.com/releases/msrc-cve-2026-694322026-10-18 https://bugrater.com/releases/msrc-cve-2026-694312026-10-18 https://bugrater.com/releases/msrc-cve-2026-694552026-10-18 https://bugrater.com/releases/msrc-cve-2026-695132026-10-18 https://bugrater.com/releases/msrc-cve-2026-695322026-10-01 https://bugrater.com/releases/msrc-cve-2026-694512026-10-01 https://bugrater.com/releases/msrc-cve-2026-694852026-10-18 https://bugrater.com/releases/msrc-cve-2026-694502026-10-18 https://bugrater.com/releases/msrc-cve-2026-694612026-10-18 https://bugrater.com/releases/msrc-cve-2026-694632026-10-18 https://bugrater.com/releases/msrc-cve-2026-694682026-10-18 https://bugrater.com/releases/msrc-cve-2026-694702026-10-18 https://bugrater.com/releases/msrc-cve-2026-694722026-10-18 https://bugrater.com/releases/msrc-cve-2026-694792026-10-18 https://bugrater.com/releases/msrc-cve-2026-694732026-10-18 https://bugrater.com/releases/msrc-cve-2026-694812026-10-18 https://bugrater.com/releases/msrc-cve-2026-694942026-10-18 https://bugrater.com/releases/msrc-cve-2026-694952026-10-18 https://bugrater.com/releases/msrc-cve-2026-694962026-10-18 https://bugrater.com/releases/msrc-cve-2026-695172026-10-18 https://bugrater.com/releases/msrc-cve-2026-695312026-10-18 https://bugrater.com/releases/msrc-cve-2026-695002026-10-18 https://bugrater.com/releases/msrc-cve-2026-695042026-10-18 https://bugrater.com/releases/msrc-cve-2026-695052026-10-18 https://bugrater.com/releases/msrc-cve-2026-695072026-10-18 https://bugrater.com/releases/msrc-cve-2026-695512026-10-18 https://bugrater.com/releases/msrc-cve-2026-695162026-10-18 https://bugrater.com/releases/msrc-cve-2026-696212026-10-18 https://bugrater.com/releases/msrc-cve-2026-695272026-10-18 https://bugrater.com/releases/msrc-cve-2026-695822026-10-18 https://bugrater.com/releases/msrc-cve-2026-695342026-10-18 https://bugrater.com/releases/msrc-cve-2026-695282026-10-18 https://bugrater.com/releases/msrc-cve-2026-695742026-10-18 https://bugrater.com/releases/msrc-cve-2026-695402026-10-18 https://bugrater.com/releases/msrc-cve-2026-695492026-10-18 https://bugrater.com/releases/msrc-cve-2026-695412026-10-18 https://bugrater.com/releases/msrc-cve-2026-695632026-10-18 https://bugrater.com/releases/msrc-cve-2026-695532026-10-18 https://bugrater.com/releases/msrc-cve-2026-694232026-10-18 https://bugrater.com/releases/msrc-cve-2026-695522026-10-18 https://bugrater.com/releases/msrc-cve-2026-695542026-10-18 https://bugrater.com/releases/msrc-cve-2026-695722026-10-18 https://bugrater.com/releases/msrc-cve-2026-696082026-10-18 https://bugrater.com/releases/msrc-cve-2026-695852026-10-18 https://bugrater.com/releases/msrc-cve-2026-696092026-10-18 https://bugrater.com/releases/msrc-cve-2026-696052026-10-01 https://bugrater.com/releases/msrc-cve-2026-695942026-10-18 https://bugrater.com/releases/msrc-cve-2026-696452026-10-18 https://bugrater.com/releases/msrc-cve-2026-696482026-10-18 https://bugrater.com/releases/msrc-cve-2026-696842026-10-18 https://bugrater.com/releases/msrc-cve-2026-696232026-10-18 https://bugrater.com/releases/msrc-cve-2026-696892026-10-18 https://bugrater.com/releases/msrc-cve-2026-696282026-10-18 https://bugrater.com/releases/msrc-cve-2026-697902026-10-18 https://bugrater.com/releases/msrc-cve-2026-696382026-10-18 https://bugrater.com/releases/msrc-cve-2026-698592026-10-18 https://bugrater.com/releases/msrc-cve-2026-696932026-10-18 https://bugrater.com/releases/msrc-cve-2026-697292026-10-18 https://bugrater.com/releases/msrc-cve-2026-697172026-10-18 https://bugrater.com/releases/msrc-cve-2026-697112026-10-18 https://bugrater.com/releases/msrc-cve-2026-696942026-10-18 https://bugrater.com/releases/msrc-cve-2026-698752026-10-18 https://bugrater.com/releases/msrc-cve-2026-697232026-10-18 https://bugrater.com/releases/msrc-cve-2026-698892026-10-18 https://bugrater.com/releases/msrc-cve-2026-697572026-10-18 https://bugrater.com/releases/msrc-cve-2026-696812026-10-18 https://bugrater.com/releases/msrc-cve-2026-698962026-10-18 https://bugrater.com/releases/msrc-cve-2026-697352026-10-18 https://bugrater.com/releases/msrc-cve-2026-697622026-10-18 https://bugrater.com/releases/msrc-cve-2026-697412026-10-18 https://bugrater.com/releases/msrc-cve-2026-698622026-10-18 https://bugrater.com/releases/msrc-cve-2026-698322026-10-18 https://bugrater.com/releases/msrc-cve-2026-698382026-10-18 https://bugrater.com/releases/msrc-cve-2026-696912026-10-18 https://bugrater.com/releases/msrc-cve-2026-698082026-10-18 https://bugrater.com/releases/msrc-cve-2026-698392026-10-18 https://bugrater.com/releases/msrc-cve-2026-697722026-10-18 https://bugrater.com/releases/msrc-cve-2026-697752026-10-18 https://bugrater.com/releases/msrc-cve-2026-697582026-10-18 https://bugrater.com/releases/msrc-cve-2026-698222026-10-18 https://bugrater.com/releases/msrc-cve-2026-697122026-10-18 https://bugrater.com/releases/msrc-cve-2026-697302026-10-18 https://bugrater.com/releases/msrc-cve-2026-697712026-10-18 https://bugrater.com/releases/msrc-cve-2026-698602026-10-18 https://bugrater.com/releases/msrc-cve-2026-697702026-10-18 https://bugrater.com/releases/msrc-cve-2026-697322026-10-18 https://bugrater.com/releases/msrc-cve-2026-696762026-10-18 https://bugrater.com/releases/msrc-cve-2026-697402026-10-18 https://bugrater.com/releases/msrc-cve-2026-635232026-10-18 https://bugrater.com/releases/msrc-cve-2026-698902026-10-18 https://bugrater.com/releases/msrc-cve-2026-663052026-10-18 https://bugrater.com/releases/msrc-cve-2026-703342026-10-18 https://bugrater.com/releases/msrc-cve-2026-703422026-10-18 https://bugrater.com/releases/msrc-cve-2026-702892026-10-18 https://bugrater.com/releases/msrc-cve-2026-586002026-10-18 https://bugrater.com/releases/msrc-cve-2026-703512026-10-18 https://bugrater.com/releases/msrc-cve-2026-705622026-10-18 https://bugrater.com/releases/msrc-cve-2026-705632026-10-18 https://bugrater.com/releases/msrc-cve-2026-705822026-10-18 https://bugrater.com/releases/msrc-cve-2026-705642026-10-18 https://bugrater.com/releases/msrc-cve-2026-705842026-10-18 https://bugrater.com/releases/msrc-cve-2026-705852026-10-18 https://bugrater.com/releases/msrc-cve-2026-705862026-10-18 https://bugrater.com/releases/msrc-cve-2026-713292026-10-18 https://bugrater.com/releases/msrc-cve-2026-705872026-10-18 https://bugrater.com/releases/msrc-cve-2026-713362026-10-18 https://bugrater.com/releases/msrc-cve-2026-713302026-10-18 https://bugrater.com/releases/msrc-cve-2026-713332026-10-18 https://bugrater.com/releases/msrc-cve-2026-713322026-10-18 https://bugrater.com/releases/msrc-cve-2026-713372026-10-18 https://bugrater.com/releases/msrc-cve-2026-713342026-10-18 https://bugrater.com/releases/msrc-cve-2026-713382026-10-18 https://bugrater.com/releases/msrc-cve-2026-713402026-10-18 https://bugrater.com/releases/msrc-cve-2026-713392026-10-18 https://bugrater.com/releases/msrc-cve-2026-713502026-10-18 https://bugrater.com/releases/msrc-cve-2026-713482026-10-18 https://bugrater.com/releases/msrc-cve-2026-713432026-10-18 https://bugrater.com/releases/msrc-cve-2026-729262026-10-18 https://bugrater.com/releases/msrc-cve-2026-713412026-10-18 https://bugrater.com/releases/msrc-cve-2026-713532026-10-18 https://bugrater.com/releases/msrc-cve-2026-713452026-10-18 https://bugrater.com/releases/msrc-cve-2026-713512026-10-18 https://bugrater.com/releases/msrc-cve-2026-729292026-10-18 https://bugrater.com/releases/msrc-cve-2026-729352026-10-18 https://bugrater.com/releases/msrc-cve-2026-729442026-10-18 https://bugrater.com/releases/msrc-cve-2026-729462026-10-18 https://bugrater.com/releases/msrc-cve-2026-729432026-10-18 https://bugrater.com/releases/msrc-cve-2026-729452026-10-18 https://bugrater.com/releases/msrc-cve-2026-729582026-10-18 https://bugrater.com/releases/msrc-cve-2026-729632026-10-18 https://bugrater.com/releases/msrc-cve-2026-729622026-10-18 https://bugrater.com/releases/msrc-cve-2026-688252026-10-18 https://bugrater.com/releases/msrc-cve-2026-688372026-10-18 https://bugrater.com/releases/msrc-cve-2026-688442026-10-18 https://bugrater.com/releases/msrc-cve-2026-688772026-10-18 https://bugrater.com/releases/msrc-cve-2026-688872026-10-18 https://bugrater.com/releases/msrc-cve-2026-692932026-10-18 https://bugrater.com/releases/msrc-cve-2026-693562026-10-18 https://bugrater.com/releases/msrc-cve-2026-693552026-10-18 https://bugrater.com/releases/msrc-cve-2026-729482026-10-18 https://bugrater.com/releases/msrc-cve-2026-693782026-10-18 https://bugrater.com/releases/msrc-cve-2026-693612026-10-18 https://bugrater.com/releases/msrc-cve-2026-693802026-10-01 https://bugrater.com/releases/msrc-cve-2026-693822026-10-18 https://bugrater.com/releases/msrc-cve-2026-693942026-10-18 https://bugrater.com/releases/msrc-cve-2026-693832026-10-18 https://bugrater.com/releases/msrc-cve-2026-694432026-10-18 https://bugrater.com/releases/msrc-cve-2026-694692026-10-18 https://bugrater.com/releases/msrc-cve-2026-695182026-10-18 https://bugrater.com/releases/msrc-cve-2026-695012026-10-18 https://bugrater.com/releases/msrc-cve-2026-695482026-10-18 https://bugrater.com/releases/msrc-cve-2026-695442026-10-18 https://bugrater.com/releases/msrc-cve-2026-695562026-10-18 https://bugrater.com/releases/msrc-cve-2026-695832026-10-18 https://bugrater.com/releases/msrc-cve-2026-695892026-10-18 https://bugrater.com/releases/msrc-cve-2026-695802026-10-18 https://bugrater.com/releases/msrc-cve-2026-695762026-10-18 https://bugrater.com/releases/msrc-cve-2026-696042026-10-18 https://bugrater.com/releases/msrc-cve-2026-696412026-10-18 https://bugrater.com/releases/msrc-cve-2026-696422026-10-18 https://bugrater.com/releases/msrc-cve-2026-696462026-10-18 https://bugrater.com/releases/msrc-cve-2026-696492026-10-18 https://bugrater.com/releases/msrc-cve-2026-696712026-10-18 https://bugrater.com/releases/msrc-cve-2026-696782026-10-18 https://bugrater.com/releases/msrc-cve-2026-696862026-10-18 https://bugrater.com/releases/msrc-cve-2026-697222026-10-18 https://bugrater.com/releases/msrc-cve-2026-697162026-10-18 https://bugrater.com/releases/msrc-cve-2026-697342026-10-18 https://bugrater.com/releases/msrc-cve-2026-697422026-10-18 https://bugrater.com/releases/msrc-cve-2026-697242026-10-18 https://bugrater.com/releases/msrc-cve-2026-697192026-10-18 https://bugrater.com/releases/msrc-cve-2026-696902026-10-18 https://bugrater.com/releases/msrc-cve-2026-697392026-10-18 https://bugrater.com/releases/msrc-cve-2026-696832026-10-18 https://bugrater.com/releases/msrc-cve-2026-695292026-10-18 https://bugrater.com/releases/msrc-cve-2026-697592026-10-18 https://bugrater.com/releases/msrc-cve-2026-697642026-10-18 https://bugrater.com/releases/msrc-cve-2026-697782026-10-18 https://bugrater.com/releases/msrc-cve-2026-697972026-10-18 https://bugrater.com/releases/msrc-cve-2026-697672026-10-18 https://bugrater.com/releases/msrc-cve-2026-698042026-10-18 https://bugrater.com/releases/msrc-cve-2026-698462026-10-18 https://bugrater.com/releases/msrc-cve-2026-699292026-10-18 https://bugrater.com/releases/msrc-cve-2026-699302026-10-18 https://bugrater.com/releases/msrc-cve-2026-702832026-10-18 https://bugrater.com/releases/msrc-cve-2026-701242026-10-18 https://bugrater.com/releases/msrc-cve-2026-729782026-10-18 https://bugrater.com/releases/msrc-cve-2026-774952026-10-18 https://bugrater.com/releases/msrc-cve-2026-729792026-10-18 https://bugrater.com/releases/msrc-cve-2026-693752026-10-18 https://bugrater.com/releases/msrc-cve-2026-729802026-10-18 https://bugrater.com/releases/msrc-cve-2026-729832026-10-18 https://bugrater.com/releases/msrc-cve-2026-729862026-10-18 https://bugrater.com/releases/msrc-cve-2026-697872026-10-18 https://bugrater.com/releases/msrc-cve-2026-729822026-10-18 https://bugrater.com/releases/msrc-cve-2026-729812026-10-18 https://bugrater.com/releases/msrc-cve-2026-694762026-10-18 https://bugrater.com/releases/msrc-cve-2026-774912026-10-18 https://bugrater.com/releases/msrc-cve-2026-774922026-10-18 https://bugrater.com/releases/msrc-cve-2026-695792026-10-18 https://bugrater.com/releases/msrc-cve-2026-774892026-10-18 https://bugrater.com/releases/msrc-cve-2026-774932026-10-01 https://bugrater.com/releases/msrc-cve-2026-774942026-10-18 https://bugrater.com/releases/msrc-cve-2026-775002026-10-18 https://bugrater.com/releases/msrc-cve-2026-774982026-10-18 https://bugrater.com/releases/msrc-cve-2026-774992026-10-18 https://bugrater.com/releases/msrc-cve-2026-775012026-10-18 https://bugrater.com/releases/msrc-cve-2026-775032026-10-18 https://bugrater.com/releases/msrc-cve-2026-775022026-10-18 https://bugrater.com/releases/msrc-cve-2026-778872026-10-18 https://bugrater.com/releases/msrc-cve-2026-775042026-10-01 https://bugrater.com/releases/msrc-cve-2026-775052026-10-18 https://bugrater.com/releases/msrc-cve-2026-778882026-10-18 https://bugrater.com/releases/msrc-cve-2026-778862026-10-18 https://bugrater.com/releases/msrc-cve-2026-778892026-10-18 https://bugrater.com/releases/msrc-cve-2026-778912026-10-18 https://bugrater.com/releases/msrc-cve-2026-778902026-10-18 https://bugrater.com/releases/msrc-cve-2026-778932026-10-18 https://bugrater.com/releases/msrc-cve-2026-778922026-10-18 https://bugrater.com/releases/msrc-cve-2026-778942026-10-18 https://bugrater.com/releases/msrc-cve-2026-778952026-10-18 https://bugrater.com/releases/msrc-cve-2026-692682026-10-18 https://bugrater.com/releases/msrc-cve-2026-692852026-10-18 https://bugrater.com/releases/msrc-cve-2026-778962026-10-18 https://bugrater.com/releases/msrc-cve-2026-692732026-10-18 https://bugrater.com/releases/msrc-cve-2026-778982026-10-18 https://bugrater.com/releases/msrc-cve-2026-692822026-10-18 https://bugrater.com/releases/msrc-cve-2026-778992026-10-18 https://bugrater.com/releases/msrc-cve-2026-779042026-10-18 https://bugrater.com/releases/msrc-cve-2026-779072026-10-18 https://bugrater.com/releases/msrc-cve-2026-779082026-10-18 https://bugrater.com/releases/msrc-cve-2026-779092026-10-18 https://bugrater.com/releases/msrc-cve-2026-784612026-10-18 https://bugrater.com/releases/msrc-cve-2026-673782026-10-18 https://bugrater.com/releases/msrc-cve-2026-784632026-10-18 https://bugrater.com/releases/msrc-cve-2026-673762026-10-18 https://bugrater.com/releases/msrc-cve-2026-673832026-10-18 https://bugrater.com/releases/msrc-cve-2026-673842026-10-18 https://bugrater.com/releases/msrc-cve-2026-785112026-10-18 https://bugrater.com/releases/msrc-cve-2026-785022026-10-18 https://bugrater.com/releases/msrc-cve-2026-785152026-10-18 https://bugrater.com/releases/msrc-cve-2026-785052026-10-18 https://bugrater.com/releases/msrc-cve-2026-673792026-10-18 https://bugrater.com/releases/msrc-cve-2026-785082026-10-18 https://bugrater.com/releases/msrc-cve-2026-785102026-10-18 https://bugrater.com/releases/msrc-cve-2026-785132026-10-18 https://bugrater.com/releases/msrc-cve-2026-785172026-10-18 https://bugrater.com/releases/msrc-cve-2026-785042026-10-18 https://bugrater.com/releases/msrc-cve-2026-785092026-10-18 https://bugrater.com/releases/msrc-cve-2026-673892026-10-18 https://bugrater.com/releases/msrc-cve-2026-676362026-10-18 https://bugrater.com/releases/msrc-cve-2026-785182026-10-18 https://bugrater.com/releases/msrc-cve-2026-676432026-10-18 https://bugrater.com/releases/msrc-cve-2026-730292026-10-18 https://bugrater.com/releases/msrc-cve-2026-687862026-10-18 https://bugrater.com/releases/msrc-cve-2026-656692026-10-18 https://bugrater.com/releases/msrc-cve-2026-800742026-10-18 https://bugrater.com/releases/msrc-cve-2026-800772026-10-18 https://bugrater.com/releases/msrc-cve-2026-800752026-10-18 https://bugrater.com/releases/msrc-cve-2026-800932026-10-18 https://bugrater.com/releases/msrc-cve-2026-813552026-10-18 https://bugrater.com/releases/msrc-cve-2026-800972026-10-18 https://bugrater.com/releases/msrc-cve-2026-813572026-10-18 https://bugrater.com/releases/msrc-cve-2026-813762026-10-01 https://bugrater.com/releases/msrc-cve-2026-813772026-10-18 https://bugrater.com/releases/msrc-cve-2026-813782026-10-18 https://bugrater.com/releases/msrc-cve-2026-813792026-10-18 https://bugrater.com/releases/msrc-cve-2026-813812026-10-18 https://bugrater.com/releases/msrc-cve-2026-813802026-10-18 https://bugrater.com/releases/msrc-cve-2026-700652026-10-18 https://bugrater.com/releases/msrc-cve-2026-839422026-10-18 https://bugrater.com/releases/msrc-cve-2026-839522026-10-18 https://bugrater.com/releases/msrc-cve-2026-698272026-10-18 https://bugrater.com/releases/msrc-cve-2026-729492026-10-18 https://bugrater.com/releases/msrc-cve-2026-729472026-10-18 https://bugrater.com/releases/msrc-cve-2026-700192026-10-18 https://bugrater.com/releases/msrc-cve-2026-695732026-10-18 https://bugrater.com/releases/msrc-cve-2026-729402026-10-18 https://bugrater.com/releases/msrc-cve-2026-729372026-10-18 https://bugrater.com/releases/msrc-cve-2026-694922026-10-18 https://bugrater.com/releases/msrc-cve-2026-839552026-10-18 https://bugrater.com/releases/msrc-cve-2026-839862026-10-18 https://bugrater.com/releases/msrc-cve-2026-839692026-10-18 https://bugrater.com/releases/msrc-cve-2026-839882026-10-18 https://bugrater.com/releases/msrc-cve-2026-839792026-10-18 https://bugrater.com/releases/msrc-cve-2026-839742026-10-18 https://bugrater.com/releases/msrc-cve-2026-839752026-10-18 https://bugrater.com/releases/msrc-cve-2026-839762026-10-18 https://bugrater.com/releases/msrc-cve-2026-702902026-10-18 https://bugrater.com/releases/msrc-cve-2026-839962026-10-18 https://bugrater.com/releases/msrc-cve-2026-839912026-10-18 https://bugrater.com/releases/msrc-cve-2026-839982026-10-18 https://bugrater.com/releases/msrc-cve-2026-839992026-10-18 https://bugrater.com/releases/msrc-cve-2026-813492026-10-18 https://bugrater.com/releases/msrc-cve-2026-858772026-10-18 https://bugrater.com/releases/msrc-cve-2026-813562026-10-18 https://bugrater.com/releases/msrc-cve-2026-858802026-10-18 https://bugrater.com/releases/msrc-cve-2026-561772026-10-18 https://bugrater.com/releases/msrc-cve-2026-561982026-10-18 https://bugrater.com/releases/msrc-cve-2026-586112026-10-18 https://bugrater.com/releases/msrc-cve-2026-627592026-10-18 https://bugrater.com/releases/msrc-cve-2026-627622026-10-18 https://bugrater.com/releases/msrc-cve-2026-626972026-10-13 https://bugrater.com/releases/msrc-cve-2026-561722026-10-01 https://bugrater.com/releases/msrc-cve-2026-668142026-10-18 https://bugrater.com/releases/msrc-cve-2026-668162026-10-18 https://bugrater.com/releases/msrc-cve-2026-668182026-10-18 https://bugrater.com/releases/msrc-cve-2026-668202026-10-18 https://bugrater.com/releases/msrc-cve-2026-673802026-10-18 https://bugrater.com/releases/msrc-cve-2026-673812026-10-18 https://bugrater.com/releases/msrc-cve-2026-673852026-10-18 https://bugrater.com/releases/msrc-cve-2026-673882026-10-18 https://bugrater.com/releases/msrc-cve-2026-673932026-10-18 https://bugrater.com/releases/msrc-cve-2026-673862026-10-18 https://bugrater.com/releases/msrc-cve-2026-673902026-10-18 https://bugrater.com/releases/msrc-cve-2026-676382026-10-18 https://bugrater.com/releases/msrc-cve-2026-676392026-10-18 https://bugrater.com/releases/msrc-cve-2026-676412026-10-18 https://bugrater.com/releases/msrc-cve-2026-676422026-10-18 https://bugrater.com/releases/msrc-cve-2026-676482026-10-18 https://bugrater.com/releases/msrc-cve-2026-687752026-10-18 https://bugrater.com/releases/msrc-cve-2026-687762026-10-18 https://bugrater.com/releases/msrc-cve-2026-687772026-10-18 https://bugrater.com/releases/msrc-cve-2026-687792026-10-18 https://bugrater.com/releases/msrc-cve-2026-687782026-10-18 https://bugrater.com/releases/msrc-cve-2026-687802026-10-18 https://bugrater.com/releases/msrc-cve-2026-688282026-10-18 https://bugrater.com/releases/msrc-cve-2026-688312026-10-18 https://bugrater.com/releases/msrc-cve-2026-688272026-10-18 https://bugrater.com/releases/msrc-cve-2026-688342026-10-01 https://bugrater.com/releases/msrc-cve-2026-688432026-10-18 https://bugrater.com/releases/msrc-cve-2026-688382026-10-18 https://bugrater.com/releases/msrc-cve-2026-688392026-10-18 https://bugrater.com/releases/msrc-cve-2026-688402026-10-18 https://bugrater.com/releases/msrc-cve-2026-688482026-10-18 https://bugrater.com/releases/msrc-cve-2026-688422026-10-18 https://bugrater.com/releases/msrc-cve-2026-688802026-10-18 https://bugrater.com/releases/msrc-cve-2026-688742026-10-18 https://bugrater.com/releases/msrc-cve-2026-688762026-10-18 https://bugrater.com/releases/msrc-cve-2026-688522026-10-18 https://bugrater.com/releases/msrc-cve-2026-688502026-10-18 https://bugrater.com/releases/msrc-cve-2026-692652026-10-07 https://bugrater.com/releases/msrc-cve-2026-688732026-10-18 https://bugrater.com/releases/msrc-cve-2026-688852026-10-18 https://bugrater.com/releases/msrc-cve-2026-688982026-10-18 https://bugrater.com/releases/msrc-cve-2026-688862026-10-18 https://bugrater.com/releases/msrc-cve-2026-688882026-10-18 https://bugrater.com/releases/msrc-cve-2026-688892026-10-18 https://bugrater.com/releases/msrc-cve-2026-688912026-10-18 https://bugrater.com/releases/msrc-cve-2026-692722026-10-18 https://bugrater.com/releases/msrc-cve-2026-692742026-10-18 https://bugrater.com/releases/msrc-cve-2026-692882026-10-18 https://bugrater.com/releases/msrc-cve-2026-692662026-10-18 https://bugrater.com/releases/msrc-cve-2026-688942026-10-01 https://bugrater.com/releases/msrc-cve-2026-688952026-10-18 https://bugrater.com/releases/msrc-cve-2026-692802026-10-18 https://bugrater.com/releases/msrc-cve-2026-692692026-10-18 https://bugrater.com/releases/msrc-cve-2026-692702026-10-18 https://bugrater.com/releases/msrc-cve-2026-692772026-10-18 https://bugrater.com/releases/msrc-cve-2026-692862026-10-18 https://bugrater.com/releases/msrc-cve-2026-693052026-10-18 https://bugrater.com/releases/msrc-cve-2026-692842026-10-18 https://bugrater.com/releases/msrc-cve-2026-692752026-10-18 https://bugrater.com/releases/msrc-cve-2026-692992026-10-18 https://bugrater.com/releases/msrc-cve-2026-692952026-10-18 https://bugrater.com/releases/msrc-cve-2026-692832026-10-01 https://bugrater.com/releases/msrc-cve-2026-692972026-10-18 https://bugrater.com/releases/msrc-cve-2026-692892026-10-18 https://bugrater.com/releases/msrc-cve-2026-692942026-10-18 https://bugrater.com/releases/msrc-cve-2026-693142026-10-10 https://bugrater.com/releases/msrc-cve-2026-693002026-10-18 https://bugrater.com/releases/msrc-cve-2026-693212026-10-18 https://bugrater.com/releases/msrc-cve-2026-693012026-10-18 https://bugrater.com/releases/msrc-cve-2026-693032026-10-18 https://bugrater.com/releases/msrc-cve-2026-693152026-10-18 https://bugrater.com/releases/msrc-cve-2026-693132026-10-18 https://bugrater.com/releases/msrc-cve-2026-693122026-10-18 https://bugrater.com/releases/msrc-cve-2026-693082026-10-18 https://bugrater.com/releases/msrc-cve-2026-693182026-10-18 https://bugrater.com/releases/msrc-cve-2026-693222026-10-18 https://bugrater.com/releases/msrc-cve-2026-693172026-10-18 https://bugrater.com/releases/msrc-cve-2026-693192026-10-18 https://bugrater.com/releases/msrc-cve-2026-693242026-10-18 https://bugrater.com/releases/msrc-cve-2026-693512026-10-18 https://bugrater.com/releases/msrc-cve-2026-693292026-10-18 https://bugrater.com/releases/msrc-cve-2026-693282026-10-18 https://bugrater.com/releases/msrc-cve-2026-693312026-10-18 https://bugrater.com/releases/msrc-cve-2026-693322026-10-18 https://bugrater.com/releases/msrc-cve-2026-693402026-10-18 https://bugrater.com/releases/msrc-cve-2026-693352026-10-18 https://bugrater.com/releases/msrc-cve-2026-693442026-10-18 https://bugrater.com/releases/msrc-cve-2026-693462026-10-18 https://bugrater.com/releases/msrc-cve-2026-693482026-10-18 https://bugrater.com/releases/msrc-cve-2026-693502026-10-18 https://bugrater.com/releases/msrc-cve-2026-693532026-10-18 https://bugrater.com/releases/msrc-cve-2026-693582026-10-18 https://bugrater.com/releases/msrc-cve-2026-693762026-10-18 https://bugrater.com/releases/msrc-cve-2026-693572026-10-18 https://bugrater.com/releases/msrc-cve-2026-693842026-10-18 https://bugrater.com/releases/msrc-cve-2026-693722026-10-18 https://bugrater.com/releases/msrc-cve-2026-693602026-10-18 https://bugrater.com/releases/msrc-cve-2026-693652026-10-18 https://bugrater.com/releases/msrc-cve-2026-693642026-10-18 https://bugrater.com/releases/msrc-cve-2026-693692026-10-18 https://bugrater.com/releases/msrc-cve-2026-694032026-10-18 https://bugrater.com/releases/msrc-cve-2026-693732026-10-18 https://bugrater.com/releases/msrc-cve-2026-693852026-10-18 https://bugrater.com/releases/msrc-cve-2026-693862026-10-18 https://bugrater.com/releases/msrc-cve-2026-693882026-10-18 https://bugrater.com/releases/msrc-cve-2026-693932026-10-18 https://bugrater.com/releases/msrc-cve-2026-693962026-10-18 https://bugrater.com/releases/msrc-cve-2026-694102026-10-18 https://bugrater.com/releases/msrc-cve-2026-693982026-10-18 https://bugrater.com/releases/msrc-cve-2026-694212026-10-18 https://bugrater.com/releases/msrc-cve-2026-694072026-10-18 https://bugrater.com/releases/msrc-cve-2026-694162026-10-18 https://bugrater.com/releases/msrc-cve-2026-694242026-10-18 https://bugrater.com/releases/msrc-cve-2026-694382026-10-18 https://bugrater.com/releases/msrc-cve-2026-694222026-10-18 https://bugrater.com/releases/msrc-cve-2026-694252026-10-18 https://bugrater.com/releases/msrc-cve-2026-694272026-10-18 https://bugrater.com/releases/msrc-cve-2026-694752026-10-18 https://bugrater.com/releases/msrc-cve-2026-693162026-10-18 https://bugrater.com/releases/msrc-(recycled)2026-10-18 https://bugrater.com/releases/msrc-cve-2026-693432026-10-18 https://bugrater.com/releases/msrc-cve-2026-693422026-10-18 https://bugrater.com/releases/msrc-cve-2026-694302026-10-18 https://bugrater.com/releases/msrc-cve-2026-694492026-10-18 https://bugrater.com/releases/msrc-cve-2026-694472026-10-18 https://bugrater.com/releases/msrc-cve-2026-694332026-10-18 https://bugrater.com/releases/msrc-cve-2026-694342026-10-18 https://bugrater.com/releases/msrc-cve-2026-694402026-10-18 https://bugrater.com/releases/msrc-cve-2026-694442026-10-18 https://bugrater.com/releases/msrc-cve-2026-694662026-10-18 https://bugrater.com/releases/msrc-cve-2026-694622026-10-18 https://bugrater.com/releases/msrc-cve-2026-694452026-10-18 https://bugrater.com/releases/msrc-cve-2026-694532026-10-18 https://bugrater.com/releases/msrc-cve-2026-694562026-10-18 https://bugrater.com/releases/msrc-cve-2026-694592026-10-18 https://bugrater.com/releases/msrc-cve-2026-694602026-10-18 https://bugrater.com/releases/msrc-cve-2026-694672026-10-18 https://bugrater.com/releases/msrc-cve-2026-694822026-10-18 https://bugrater.com/releases/msrc-cve-2026-694782026-10-18 https://bugrater.com/releases/msrc-cve-2026-694742026-10-18 https://bugrater.com/releases/msrc-cve-2026-695612026-10-18 https://bugrater.com/releases/msrc-cve-2026-694802026-10-18 https://bugrater.com/releases/msrc-cve-2026-694832026-10-18 https://bugrater.com/releases/msrc-cve-2026-695782026-10-18 https://bugrater.com/releases/msrc-cve-2026-694882026-10-18 https://bugrater.com/releases/msrc-cve-2026-694932026-10-18 https://bugrater.com/releases/msrc-cve-2026-695112026-10-18 https://bugrater.com/releases/msrc-cve-2026-694972026-10-18 https://bugrater.com/releases/msrc-cve-2026-695122026-10-18 https://bugrater.com/releases/msrc-cve-2026-694982026-10-18 https://bugrater.com/releases/msrc-cve-2026-695082026-10-18 https://bugrater.com/releases/msrc-cve-2026-695032026-10-18 https://bugrater.com/releases/msrc-cve-2026-695092026-10-18 https://bugrater.com/releases/msrc-cve-2026-695712026-10-18 https://bugrater.com/releases/msrc-cve-2026-695352026-10-18 https://bugrater.com/releases/msrc-cve-2026-695382026-10-18 https://bugrater.com/releases/msrc-cve-2026-695912026-10-18 https://bugrater.com/releases/msrc-cve-2026-695422026-10-18 https://bugrater.com/releases/msrc-cve-2026-695692026-10-18 https://bugrater.com/releases/msrc-cve-2026-695812026-10-18 https://bugrater.com/releases/msrc-cve-2026-695862026-10-18 https://bugrater.com/releases/msrc-cve-2026-696122026-10-18 https://bugrater.com/releases/msrc-cve-2026-695672026-10-18 https://bugrater.com/releases/msrc-cve-2026-695662026-10-18 https://bugrater.com/releases/msrc-cve-2026-695922026-10-18 https://bugrater.com/releases/msrc-cve-2026-695842026-10-18 https://bugrater.com/releases/msrc-cve-2026-696002026-10-18 https://bugrater.com/releases/msrc-cve-2026-696062026-10-18 https://bugrater.com/releases/msrc-cve-2026-696252026-10-18 https://bugrater.com/releases/msrc-cve-2026-696022026-10-18 https://bugrater.com/releases/msrc-cve-2026-696112026-10-18 https://bugrater.com/releases/msrc-cve-2026-696162026-10-18 https://bugrater.com/releases/msrc-cve-2026-696302026-10-18 https://bugrater.com/releases/msrc-cve-2026-696102026-10-18 https://bugrater.com/releases/msrc-cve-2026-696692026-10-18 https://bugrater.com/releases/msrc-cve-2026-696132026-10-18 https://bugrater.com/releases/msrc-cve-2026-696172026-10-18 https://bugrater.com/releases/msrc-cve-2026-698172026-10-18 https://bugrater.com/releases/msrc-cve-2026-696192026-10-01 https://bugrater.com/releases/msrc-cve-2026-696202026-10-18 https://bugrater.com/releases/msrc-cve-2026-697202026-10-18 https://bugrater.com/releases/msrc-cve-2026-697152026-10-18 https://bugrater.com/releases/msrc-cve-2026-696822026-10-18 https://bugrater.com/releases/msrc-cve-2026-696372026-10-01 https://bugrater.com/releases/msrc-cve-2026-696852026-10-18 https://bugrater.com/releases/msrc-cve-2026-698032026-10-18 https://bugrater.com/releases/msrc-cve-2026-696432026-10-18 https://bugrater.com/releases/msrc-cve-2026-696872026-10-18 https://bugrater.com/releases/msrc-cve-2026-697912026-10-18 https://bugrater.com/releases/msrc-cve-2026-696522026-10-18 https://bugrater.com/releases/msrc-cve-2026-697072026-10-18 https://bugrater.com/releases/msrc-cve-2026-698342026-10-18 https://bugrater.com/releases/msrc-cve-2026-696542026-10-18 https://bugrater.com/releases/msrc-cve-2026-698162026-10-18 https://bugrater.com/releases/msrc-cve-2026-697142026-10-18 https://bugrater.com/releases/msrc-cve-2026-697092026-10-18 https://bugrater.com/releases/msrc-cve-2026-698442026-10-18 https://bugrater.com/releases/msrc-cve-2026-696792026-10-18 https://bugrater.com/releases/msrc-cve-2026-696742026-10-18 https://bugrater.com/releases/msrc-cve-2026-698662026-10-18 https://bugrater.com/releases/msrc-cve-2026-698262026-10-18 https://bugrater.com/releases/msrc-cve-2026-698412026-10-18 https://bugrater.com/releases/msrc-cve-2026-697272026-10-18 https://bugrater.com/releases/msrc-cve-2026-696882026-10-18 https://bugrater.com/releases/msrc-cve-2026-697382026-10-18 https://bugrater.com/releases/msrc-cve-2026-696922026-10-18 https://bugrater.com/releases/msrc-cve-2026-698142026-10-18 https://bugrater.com/releases/msrc-cve-2026-698012026-10-18 https://bugrater.com/releases/msrc-cve-2026-697312026-10-18 https://bugrater.com/releases/msrc-cve-2026-697942026-10-18 https://bugrater.com/releases/msrc-cve-2026-697732026-10-18 https://bugrater.com/releases/msrc-cve-2026-697132026-10-18 https://bugrater.com/releases/msrc-cve-2026-697062026-10-18 https://bugrater.com/releases/msrc-cve-2026-697682026-10-18 https://bugrater.com/releases/msrc-cve-2026-699212026-10-18 https://bugrater.com/releases/msrc-cve-2026-697922026-10-18 https://bugrater.com/releases/msrc-cve-2026-698532026-10-18 https://bugrater.com/releases/msrc-cve-2026-698952026-10-18 https://bugrater.com/releases/msrc-cve-2026-697792026-10-18 https://bugrater.com/releases/msrc-cve-2026-697612026-10-18 https://bugrater.com/releases/msrc-cve-2026-697082026-10-18 https://bugrater.com/releases/msrc-cve-2026-698782026-10-18 https://bugrater.com/releases/msrc-cve-2026-697852026-10-18 https://bugrater.com/releases/msrc-cve-2026-699002026-10-18 https://bugrater.com/releases/msrc-cve-2026-698182026-10-18 https://bugrater.com/releases/msrc-cve-2026-699072026-10-18 https://bugrater.com/releases/msrc-cve-2026-698472026-10-18 https://bugrater.com/releases/msrc-cve-2026-698912026-10-18 https://bugrater.com/releases/msrc-cve-2026-699112026-10-18 https://bugrater.com/releases/msrc-cve-2026-698242026-10-18 https://bugrater.com/releases/msrc-cve-2026-697812026-10-18 https://bugrater.com/releases/msrc-cve-2026-698762026-10-18 https://bugrater.com/releases/msrc-cve-2026-698452026-10-18 https://bugrater.com/releases/msrc-cve-2026-698292026-10-18 https://bugrater.com/releases/msrc-cve-2026-697692026-10-18 https://bugrater.com/releases/msrc-cve-2026-698522026-10-18 https://bugrater.com/releases/msrc-cve-2026-697862026-10-01 https://bugrater.com/releases/msrc-cve-2026-697992026-10-18 https://bugrater.com/releases/msrc-cve-2026-698132026-10-18 https://bugrater.com/releases/msrc-cve-2026-697102026-10-18 https://bugrater.com/releases/msrc-cve-2026-698582026-10-18 https://bugrater.com/releases/msrc-cve-2026-698742026-10-18 https://bugrater.com/releases/msrc-cve-2026-697252026-10-18 https://bugrater.com/releases/msrc-cve-2026-698642026-10-18 https://bugrater.com/releases/msrc-cve-2026-698202026-10-18 https://bugrater.com/releases/msrc-cve-2026-697842026-10-18 https://bugrater.com/releases/msrc-cve-2026-585992026-10-18 https://bugrater.com/releases/msrc-cve-2026-649182026-10-18 https://bugrater.com/releases/msrc-cve-2026-472972026-10-18 https://bugrater.com/releases/msrc-cve-2026-705652026-10-18 https://bugrater.com/releases/msrc-cve-2026-705742026-10-18 https://bugrater.com/releases/msrc-cve-2026-705672026-10-18 https://bugrater.com/releases/msrc-cve-2026-705682026-10-18 https://bugrater.com/releases/msrc-cve-2026-705692026-10-18 https://bugrater.com/releases/msrc-cve-2026-705732026-10-18 https://bugrater.com/releases/msrc-cve-2026-705722026-10-18 https://bugrater.com/releases/msrc-cve-2026-705752026-10-18 https://bugrater.com/releases/msrc-cve-2026-705812026-10-18 https://bugrater.com/releases/msrc-cve-2026-705772026-10-18 https://bugrater.com/releases/msrc-cve-2026-705782026-10-18 https://bugrater.com/releases/msrc-cve-2026-705792026-10-18 https://bugrater.com/releases/msrc-cve-2026-705832026-10-18 https://bugrater.com/releases/msrc-cve-2026-713492026-10-18 https://bugrater.com/releases/msrc-cve-2026-713422026-10-18 https://bugrater.com/releases/msrc-cve-2026-713522026-10-18 https://bugrater.com/releases/msrc-cve-2026-729272026-10-18 https://bugrater.com/releases/msrc-cve-2026-729282026-10-18 https://bugrater.com/releases/msrc-cve-2026-729332026-10-18 https://bugrater.com/releases/msrc-cve-2026-729322026-10-18 https://bugrater.com/releases/msrc-cve-2026-729522026-10-18 https://bugrater.com/releases/msrc-cve-2026-729532026-10-18 https://bugrater.com/releases/msrc-cve-2026-729412026-10-18 https://bugrater.com/releases/msrc-cve-2026-729422026-10-18 https://bugrater.com/releases/msrc-cve-2026-729572026-10-18 https://bugrater.com/releases/msrc-cve-2026-729502026-10-18 https://bugrater.com/releases/msrc-cve-2026-729592026-10-18 https://bugrater.com/releases/msrc-cve-2026-729542026-10-18 https://bugrater.com/releases/msrc-cve-2026-697772026-10-18 https://bugrater.com/releases/msrc-cve-2026-729642026-10-18 https://bugrater.com/releases/msrc-cve-2026-729662026-10-18 https://bugrater.com/releases/msrc-cve-2026-729602026-10-18 https://bugrater.com/releases/msrc-cve-2026-729612026-10-18 https://bugrater.com/releases/msrc-cve-2026-729672026-10-18 https://bugrater.com/releases/msrc-cve-2026-688962026-10-18 https://bugrater.com/releases/msrc-cve-2026-692872026-10-18 https://bugrater.com/releases/msrc-cve-2026-693092026-10-18 https://bugrater.com/releases/msrc-cve-2026-692902026-10-18 https://bugrater.com/releases/msrc-cve-2026-692912026-10-18 https://bugrater.com/releases/msrc-cve-2026-693342026-10-18 https://bugrater.com/releases/msrc-cve-2026-693232026-10-18 https://bugrater.com/releases/msrc-cve-2026-692982026-10-18 https://bugrater.com/releases/msrc-cve-2026-693112026-10-18 https://bugrater.com/releases/msrc-cve-2026-699102026-10-18 https://bugrater.com/releases/msrc-cve-2026-693522026-10-18 https://bugrater.com/releases/msrc-cve-2026-693922026-10-18 https://bugrater.com/releases/msrc-cve-2026-694022026-10-18 https://bugrater.com/releases/msrc-cve-2026-694092026-10-18 https://bugrater.com/releases/msrc-cve-2026-694172026-10-18 https://bugrater.com/releases/msrc-cve-2026-694262026-10-18 https://bugrater.com/releases/msrc-cve-2026-694892026-10-18 https://bugrater.com/releases/msrc-cve-2026-694902026-10-18 https://bugrater.com/releases/msrc-cve-2026-694992026-10-18 https://bugrater.com/releases/msrc-cve-2026-695102026-10-18 https://bugrater.com/releases/msrc-cve-2026-695602026-10-18 https://bugrater.com/releases/msrc-cve-2026-695592026-10-18 https://bugrater.com/releases/msrc-cve-2026-695642026-10-18 https://bugrater.com/releases/msrc-cve-2026-695932026-10-18 https://bugrater.com/releases/msrc-cve-2026-695682026-10-18 https://bugrater.com/releases/msrc-cve-2026-695752026-10-18 https://bugrater.com/releases/msrc-cve-2026-696072026-10-18 https://bugrater.com/releases/msrc-cve-2026-695902026-10-18 https://bugrater.com/releases/msrc-cve-2026-696012026-10-18 https://bugrater.com/releases/msrc-cve-2026-694422026-10-18 https://bugrater.com/releases/msrc-cve-2026-696152026-10-18 https://bugrater.com/releases/msrc-cve-2026-694642026-10-18 https://bugrater.com/releases/msrc-cve-2026-696142026-10-18 https://bugrater.com/releases/msrc-cve-2026-696362026-10-18 https://bugrater.com/releases/msrc-cve-2026-696292026-10-18 https://bugrater.com/releases/msrc-cve-2026-694772026-10-18 https://bugrater.com/releases/msrc-cve-2026-696262026-10-18 https://bugrater.com/releases/msrc-cve-2026-696322026-10-18 https://bugrater.com/releases/msrc-cve-2026-694392026-10-18 https://bugrater.com/releases/msrc-cve-2026-698052026-10-18 https://bugrater.com/releases/msrc-cve-2026-586492026-10-18 https://bugrater.com/releases/msrc-cve-2026-694412026-10-18 https://bugrater.com/releases/msrc-cve-2026-699042026-10-01 https://bugrater.com/releases/msrc-cve-2026-699062026-10-18 https://bugrater.com/releases/msrc-cve-2026-702032026-10-18 https://bugrater.com/releases/msrc-cve-2026-702962026-10-18 https://bugrater.com/releases/msrc-cve-2026-729562026-10-18 https://bugrater.com/releases/msrc-cve-2026-729722026-10-18 https://bugrater.com/releases/msrc-cve-2026-729382026-10-18 https://bugrater.com/releases/msrc-cve-2026-729732026-10-18 https://bugrater.com/releases/msrc-cve-2026-729742026-10-18 https://bugrater.com/releases/msrc-cve-2026-729772026-10-18 https://bugrater.com/releases/msrc-cve-2026-729752026-10-18 https://bugrater.com/releases/msrc-cve-2026-729762026-10-18 https://bugrater.com/releases/msrc-cve-2026-729852026-10-18 https://bugrater.com/releases/msrc-cve-2026-657722026-10-18 https://bugrater.com/releases/msrc-cve-2026-658122026-10-18 https://bugrater.com/releases/msrc-cve-2026-694652026-10-18 https://bugrater.com/releases/msrc-cve-2026-693042026-10-18 https://bugrater.com/releases/msrc-cve-2026-729872026-10-18 https://bugrater.com/releases/msrc-cve-2026-729892026-10-18 https://bugrater.com/releases/msrc-cve-2026-729882026-10-18 https://bugrater.com/releases/msrc-cve-2026-729902026-10-18 https://bugrater.com/releases/msrc-cve-2026-729952026-10-18 https://bugrater.com/releases/msrc-cve-2026-729912026-10-18 https://bugrater.com/releases/msrc-cve-2026-729922026-10-18 https://bugrater.com/releases/msrc-cve-2026-729932026-10-18 https://bugrater.com/releases/msrc-cve-2026-729942026-10-18 https://bugrater.com/releases/msrc-cve-2026-729972026-10-18 https://bugrater.com/releases/msrc-cve-2026-730182026-10-18 https://bugrater.com/releases/msrc-cve-2026-730192026-10-18 https://bugrater.com/releases/msrc-cve-2026-729962026-10-18 https://bugrater.com/releases/msrc-cve-2026-729992026-10-18 https://bugrater.com/releases/msrc-cve-2026-730202026-10-18 https://bugrater.com/releases/msrc-cve-2026-730002026-10-18 https://bugrater.com/releases/msrc-cve-2026-730212026-10-18 https://bugrater.com/releases/msrc-cve-2026-730012026-10-18 https://bugrater.com/releases/msrc-cve-2026-730152026-10-18 https://bugrater.com/releases/msrc-cve-2026-730032026-10-18 https://bugrater.com/releases/msrc-cve-2026-730222026-10-18 https://bugrater.com/releases/msrc-cve-2026-730112026-10-18 https://bugrater.com/releases/msrc-cve-2026-730022026-10-18 https://bugrater.com/releases/msrc-cve-2026-730142026-10-18 https://bugrater.com/releases/msrc-cve-2026-730082026-10-18 https://bugrater.com/releases/msrc-cve-2026-730242026-10-18 https://bugrater.com/releases/msrc-cve-2026-730052026-10-18 https://bugrater.com/releases/msrc-cve-2026-730072026-10-18 https://bugrater.com/releases/msrc-cve-2026-730262026-10-18 https://bugrater.com/releases/msrc-cve-2026-730042026-10-18 https://bugrater.com/releases/msrc-cve-2026-730122026-10-18 https://bugrater.com/releases/msrc-cve-2026-730092026-10-18 https://bugrater.com/releases/msrc-cve-2026-730062026-10-10 https://bugrater.com/releases/msrc-cve-2026-730102026-10-18 https://bugrater.com/releases/msrc-cve-2026-730232026-10-18 https://bugrater.com/releases/msrc-cve-2026-730252026-10-18 https://bugrater.com/releases/msrc-cve-2026-730162026-10-18 https://bugrater.com/releases/msrc-cve-2026-713282026-10-18 https://bugrater.com/releases/msrc-cve-2026-730172026-10-18 https://bugrater.com/releases/msrc-cve-2026-730282026-10-18 https://bugrater.com/releases/msrc-cve-2026-774802026-10-18 https://bugrater.com/releases/msrc-cve-2026-774832026-10-18 https://bugrater.com/releases/msrc-cve-2026-774842026-10-18 https://bugrater.com/releases/msrc-cve-2026-774852026-10-18 https://bugrater.com/releases/msrc-cve-2026-774862026-10-18 https://bugrater.com/releases/msrc-cve-2026-774882026-10-18 https://bugrater.com/releases/msrc-cve-2026-779112026-10-18 https://bugrater.com/releases/msrc-cve-2026-779012026-10-18 https://bugrater.com/releases/msrc-cve-2026-779052026-10-18 https://bugrater.com/releases/msrc-cve-2026-698542026-10-18 https://bugrater.com/releases/msrc-cve-2026-695622026-10-18 https://bugrater.com/releases/msrc-cve-2026-784412026-10-18 https://bugrater.com/releases/msrc-cve-2026-784422026-10-18 https://bugrater.com/releases/msrc-cve-2026-784452026-10-18 https://bugrater.com/releases/msrc-cve-2026-784462026-10-18 https://bugrater.com/releases/msrc-cve-2026-784442026-10-18 https://bugrater.com/releases/msrc-cve-2026-784492026-10-18 https://bugrater.com/releases/msrc-cve-2026-784472026-10-18 https://bugrater.com/releases/msrc-cve-2026-784502026-10-18 https://bugrater.com/releases/msrc-cve-2026-784482026-10-18 https://bugrater.com/releases/msrc-cve-2026-784512026-10-18 https://bugrater.com/releases/msrc-cve-2026-784532026-10-10 https://bugrater.com/releases/msrc-cve-2026-784552026-10-18 https://bugrater.com/releases/msrc-cve-2026-784522026-10-18 https://bugrater.com/releases/msrc-cve-2026-784542026-10-18 https://bugrater.com/releases/msrc-cve-2026-784572026-10-18 https://bugrater.com/releases/msrc-cve-2026-784562026-10-18 https://bugrater.com/releases/msrc-cve-2026-695952026-10-18 https://bugrater.com/releases/msrc-cve-2026-784622026-10-18 https://bugrater.com/releases/msrc-cve-2026-784642026-10-18 https://bugrater.com/releases/msrc-cve-2026-668192026-10-18 https://bugrater.com/releases/msrc-cve-2026-673692026-10-18 https://bugrater.com/releases/msrc-cve-2026-785072026-10-18 https://bugrater.com/releases/msrc-cve-2026-785062026-10-18 https://bugrater.com/releases/msrc-cve-2026-785122026-10-18 https://bugrater.com/releases/msrc-cve-2026-785142026-10-18 https://bugrater.com/releases/msrc-cve-2026-785032026-10-18 https://bugrater.com/releases/msrc-cve-2026-785162026-10-18 https://bugrater.com/releases/msrc-cve-2026-676452026-10-18 https://bugrater.com/releases/msrc-cve-2026-676242026-10-18 https://bugrater.com/releases/msrc-cve-2026-774812026-10-18 https://bugrater.com/releases/msrc-cve-2026-800792026-10-18 https://bugrater.com/releases/msrc-cve-2026-785212026-10-18 https://bugrater.com/releases/msrc-cve-2026-785192026-10-18 https://bugrater.com/releases/msrc-cve-2026-800732026-10-18 https://bugrater.com/releases/msrc-cve-2026-785222026-10-18 https://bugrater.com/releases/msrc-cve-2026-800782026-10-18 https://bugrater.com/releases/msrc-cve-2026-785202026-10-18 https://bugrater.com/releases/msrc-cve-2026-785242026-10-18 https://bugrater.com/releases/msrc-cve-2026-785262026-10-18 https://bugrater.com/releases/msrc-cve-2026-800762026-10-18 https://bugrater.com/releases/msrc-cve-2026-800842026-10-18 https://bugrater.com/releases/msrc-cve-2026-785252026-10-18 https://bugrater.com/releases/msrc-cve-2026-800802026-10-18 https://bugrater.com/releases/msrc-cve-2026-800862026-10-18 https://bugrater.com/releases/msrc-cve-2026-800872026-10-18 https://bugrater.com/releases/msrc-cve-2026-800852026-10-18 https://bugrater.com/releases/msrc-cve-2026-774872026-10-18 https://bugrater.com/releases/msrc-cve-2026-800882026-10-18 https://bugrater.com/releases/msrc-cve-2026-800902026-10-18 https://bugrater.com/releases/msrc-cve-2026-800892026-10-18 https://bugrater.com/releases/msrc-cve-2026-800912026-10-18 https://bugrater.com/releases/msrc-cve-2026-800812026-10-18 https://bugrater.com/releases/msrc-cve-2026-800822026-10-18 https://bugrater.com/releases/msrc-cve-2026-800962026-10-18 https://bugrater.com/releases/msrc-cve-2026-813522026-10-18 https://bugrater.com/releases/msrc-cve-2026-813542026-10-18 https://bugrater.com/releases/msrc-cve-2026-813532026-10-18 https://bugrater.com/releases/msrc-cve-2026-813832026-10-18 https://bugrater.com/releases/msrc-cve-2026-813982026-10-18 https://bugrater.com/releases/msrc-cve-2026-813862026-10-18 https://bugrater.com/releases/msrc-cve-2026-813852026-10-18 https://bugrater.com/releases/msrc-cve-2026-819472026-10-18 https://bugrater.com/releases/msrc-cve-2026-813872026-10-18 https://bugrater.com/releases/msrc-cve-2026-819542026-10-18 https://bugrater.com/releases/msrc-cve-2026-813902026-10-18 https://bugrater.com/releases/msrc-cve-2026-813992026-10-18 https://bugrater.com/releases/msrc-cve-2026-813912026-10-18 https://bugrater.com/releases/msrc-cve-2026-814012026-10-18 https://bugrater.com/releases/msrc-cve-2026-819582026-10-18 https://bugrater.com/releases/msrc-cve-2026-813962026-10-18 https://bugrater.com/releases/msrc-cve-2026-813922026-10-18 https://bugrater.com/releases/msrc-cve-2026-813972026-10-18 https://bugrater.com/releases/msrc-cve-2026-819562026-10-18 https://bugrater.com/releases/msrc-cve-2026-813932026-10-18 https://bugrater.com/releases/msrc-cve-2026-814002026-10-18 https://bugrater.com/releases/msrc-cve-2026-813892026-10-18 https://bugrater.com/releases/msrc-cve-2026-813942026-10-18 https://bugrater.com/releases/msrc-cve-2026-819602026-10-18 https://bugrater.com/releases/msrc-cve-2026-813952026-10-18 https://bugrater.com/releases/msrc-cve-2026-813882026-10-18 https://bugrater.com/releases/msrc-cve-2026-819552026-10-18 https://bugrater.com/releases/msrc-cve-2026-819512026-10-18 https://bugrater.com/releases/msrc-cve-2026-819572026-10-18 https://bugrater.com/releases/msrc-cve-2026-819522026-10-18 https://bugrater.com/releases/msrc-cve-2026-819592026-10-18 https://bugrater.com/releases/msrc-cve-2026-819532026-10-18 https://bugrater.com/releases/msrc-cve-2026-819492026-10-18 https://bugrater.com/releases/msrc-cve-2026-819482026-10-18 https://bugrater.com/releases/msrc-cve-2026-819502026-10-18 https://bugrater.com/releases/msrc-cve-2026-779062026-10-18 https://bugrater.com/releases/msrc-cve-2026-839402026-10-18 https://bugrater.com/releases/msrc-cve-2026-839392026-10-18 https://bugrater.com/releases/msrc-cve-2026-778972026-10-18 https://bugrater.com/releases/msrc-cve-2026-570992026-10-18 https://bugrater.com/releases/msrc-cve-2026-839482026-10-18 https://bugrater.com/releases/msrc-cve-2026-819632026-10-18 https://bugrater.com/releases/msrc-cve-2026-839512026-10-18 https://bugrater.com/releases/msrc-cve-2026-695302026-10-18 https://bugrater.com/releases/msrc-cve-2026-839492026-10-18 https://bugrater.com/releases/msrc-cve-2026-693812026-10-18 https://bugrater.com/releases/msrc-cve-2026-695982026-10-10 https://bugrater.com/releases/msrc-cve-2026-839712026-10-18 https://bugrater.com/releases/msrc-cve-2026-729652026-10-18 https://bugrater.com/releases/msrc-cve-2026-839542026-10-18 https://bugrater.com/releases/msrc-cve-2026-839672026-10-18 https://bugrater.com/releases/msrc-cve-2026-839682026-10-18 https://bugrater.com/releases/msrc-cve-2026-839722026-10-18 https://bugrater.com/releases/msrc-cve-2026-839702026-10-18 https://bugrater.com/releases/msrc-cve-2026-701452026-10-18 https://bugrater.com/releases/msrc-cve-2026-839732026-10-18 https://bugrater.com/releases/msrc-cve-2026-839812026-10-18 https://bugrater.com/releases/msrc-cve-2026-839822026-10-18 https://bugrater.com/releases/msrc-cve-2026-839782026-10-18 https://bugrater.com/releases/msrc-cve-2026-839772026-10-18 https://bugrater.com/releases/msrc-cve-2026-839802026-10-18 https://bugrater.com/releases/msrc-cve-2026-839872026-10-18 https://bugrater.com/releases/msrc-cve-2026-839832026-10-18 https://bugrater.com/releases/msrc-cve-2026-839892026-10-18 https://bugrater.com/releases/msrc-cve-2026-839852026-10-18 https://bugrater.com/releases/msrc-cve-2026-839902026-10-18 https://bugrater.com/releases/msrc-cve-2026-839922026-10-18 https://bugrater.com/releases/msrc-cve-2026-839952026-10-18 https://bugrater.com/releases/msrc-cve-2026-840002026-10-18 https://bugrater.com/releases/msrc-cve-2026-698062026-10-18 https://bugrater.com/releases/msrc-cve-2026-835012026-10-18 https://bugrater.com/releases/msrc-cve-2026-834982026-10-18 https://bugrater.com/releases/msrc-cve-2026-858752026-10-18 https://bugrater.com/releases/msrc-cve-2026-663032026-10-18 https://bugrater.com/releases/msrc-cve-2026-663072026-10-18 https://bugrater.com/releases/msrc-cve-2026-628042026-10-18 https://bugrater.com/releases/msrc-cve-2026-629062026-10-18 https://bugrater.com/releases/msrc-cve-2026-703522026-10-18 https://bugrater.com/releases/msrc-cve-2026-837112026-10-18 https://bugrater.com/releases/msrc-cve-2026-341822026-10-18 https://bugrater.com/releases/msrc-cve-2026-774902026-10-18 https://bugrater.com/releases/msrc-cve-2026-858922026-10-18 https://bugrater.com/releases/msrc-cve-2026-694862026-10-18 https://bugrater.com/releases/msrc-cve-2026-858932026-10-18 https://bugrater.com/releases/msrc-cve-2026-696032026-10-18 https://bugrater.com/releases/msrc-cve-2026-700092026-10-18 https://bugrater.com/releases/msrc-cve-2026-698652026-10-18 https://bugrater.com/releases/msrc-cve-2026-779032026-10-18 https://bugrater.com/releases/msrc-cve-2026-693992026-10-18 https://bugrater.com/releases/msrc-cve-2026-687912026-10-18 https://bugrater.com/releases/msrc-cve-2026-858852026-10-18 https://bugrater.com/releases/msrc-cve-2026-839442026-10-18 https://bugrater.com/releases/msrc-cve-2026-877012026-10-18 https://bugrater.com/releases/msrc-cve-2026-702002026-10-18 https://bugrater.com/releases/msrc-cve-2026-858892026-10-18 https://bugrater.com/releases/msrc-cve-2026-859172026-10-18 https://bugrater.com/releases/msrc-cve-2026-628742026-10-18 https://bugrater.com/releases/msrc-cve-2026-858782026-10-18 https://bugrater.com/releases/msrc-cve-2026-698432026-10-18 https://bugrater.com/releases/msrc-cve-2026-839462026-10-18 https://bugrater.com/releases/msrc-cve-2026-858872026-10-18 https://bugrater.com/releases/msrc-cve-2026-785012026-10-18 https://bugrater.com/releases/msrc-cve-2026-880972026-10-18 https://bugrater.com/releases/msrc-cve-2026-730132026-10-18 https://bugrater.com/releases/msrc-cve-2026-859212026-10-18 https://bugrater.com/releases/jenkins-security-advisory-2019-09-252026-10-19 https://bugrater.com/releases/jenkins-security-advisory-2019-09-122026-10-19 https://bugrater.com/releases/gitlab-critical-patch-release-19-0-9-18-11-122026-10-19 https://bugrater.com/releases/jenkins-security-advisory-2019-08-282026-10-19 https://bugrater.com/releases/jenkins-security-advisory-2019-08-072026-10-19 https://bugrater.com/releases/stable-channel-update-for-desktop-154-0-8037-97-982026-10-19 https://bugrater.com/releases/jenkins-security-advisory-2019-07-312026-10-19 https://bugrater.com/releases/jenkins-security-advisory-2019-07-172026-10-19 https://bugrater.com/releases/msrc-cve-2026-969402026-10-18 https://bugrater.com/releases/jenkins-security-advisory-2019-07-112026-10-19 https://bugrater.com/releases/jenkins-security-advisory-2019-06-112026-10-19 https://bugrater.com/releases/zen-browser-cve-2026-414312026-10-04 https://bugrater.com/releases/tookie-cve-2026-428662026-10-04 https://bugrater.com/releases/open-webui-cve-2026-592242026-10-04 https://bugrater.com/releases/security-vulnerabilities-fixed-in-thunderbird-153-42026-10-19 https://bugrater.com/releases/security-vulnerabilities-fixed-in-thunderbird-140-172026-10-19 https://bugrater.com/releases/security-vulnerabilities-fixed-in-thunderbird-1572026-10-19 https://bugrater.com/releases/jenkins-security-advisory-2019-05-312026-10-19 https://bugrater.com/releases/jenkins-security-advisory-2019-05-212026-10-19 https://bugrater.com/releases/cve-2026-101006-a-flaw-has-been-found-in-frappe-hr-up-to-16-15-0-this-vulnerability-affects-the-function-get-expense-claims-get-shift-requests-get-attendance-requests-of-the-f2026-10-18 https://bugrater.com/releases/jenkins-security-advisory-2019-04-302026-10-19 https://bugrater.com/releases/jenkins-security-advisory-2019-04-172026-10-19 https://bugrater.com/releases/security-vulnerabilities-fixed-in-firefox-esr-153-42026-10-19 https://bugrater.com/releases/security-vulnerabilities-fixed-in-firefox-esr-140-172026-10-19 https://bugrater.com/releases/security-vulnerabilities-fixed-in-firefox-esr-115-422026-10-19 https://bugrater.com/releases/october-2026-early-security-updates2026-10-19 https://bugrater.com/releases/xcode-272026-10-19 https://bugrater.com/releases/visionos-26-6-12026-10-19 https://bugrater.com/releases/stable-channel-update-for-desktop-155-0-8059-39-402026-10-19 https://bugrater.com/releases/jenkins-security-advisory-2019-04-102026-10-19 https://bugrater.com/releases/jenkins-security-advisory-2019-04-032026-10-19 https://bugrater.com/releases/security-vulnerabilities-fixed-in-firefox-157-0-12026-10-19 https://bugrater.com/releases/security-vulnerabilities-fixed-in-firefox-1572026-10-19 https://bugrater.com/releases/security-vulnerabilities-fixed-in-thunderbird-153-32026-10-19 https://bugrater.com/releases/cve-2026-103049-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-vulnerability-in-the-wikimedia-foundation-mediawiki-cargo-extension-allow2026-10-18 https://bugrater.com/releases/cve-2026-13046-a-deserialization-of-untrusted-data-vulnerability-in-watchguard-fireware-os-s-saml-single-sign-on-session-handling-samld-allows-an-attacker-who-has-already-ob2026-10-18 https://bugrater.com/releases/cve-2026-18105-an-uncontrolled-resource-consumption-vulnerability-in-fireware-os-s-diagnostic-tasks-feature-allows-a-low-privileged-authenticated-user-to-cause-a-denial-of-se2026-10-18 https://bugrater.com/releases/cve-2026-81433-a-stack-based-buffer-overflow-vulnerability-in-watchguard-fireware-os-s-dhcp-fingerprinting-daemon-fingerd-allows-an-unauthenticated-attacker-with-adjacent-ne2026-10-18 https://bugrater.com/releases/cve-2026-86101-an-improper-authorization-vulnerability-in-watchguard-fireware-os-s-saml-login-process-allows-a-remote-authenticated-saml-user-with-access-only-to-the-access-p2026-10-18 https://bugrater.com/releases/cve-2026-86105-an-improper-authorization-vulnerability-in-fireware-os-s-access-portal-reverse-proxy-allows-an-authenticated-low-privileged-access-portal-user-to-access-other2026-10-18 https://bugrater.com/releases/cve-2026-86128-a-null-pointer-dereference-vulnerability-in-fireware-os-s-netflow-packet-processing-feature-allows-a-remote-unauthenticated-attacker-to-cause-a-denial-of-servi2026-10-18 https://bugrater.com/releases/cve-2026-86131-a-code-injection-vulnerability-in-watchguard-fireware-os-s-bovpn-over-tls-client-configuration-handling-allows-an-attacker-who-controls-the-remote-vpn-server-to2026-10-18 https://bugrater.com/releases/msrc-cve-2026-729362026-10-18 https://bugrater.com/releases/jenkins-security-advisory-2019-03-252026-10-19 https://bugrater.com/releases/jenkins-security-advisory-2019-03-062026-10-19 https://bugrater.com/releases/advanced-filesystem-moderately-critical-cross-site-request-forgery-sa-contrib-2026-2172026-10-19 https://bugrater.com/releases/restrict-route-by-ip-critical-access-bypass-sa-contrib-2026-2162026-10-19 https://bugrater.com/releases/examples-for-developers-less-critical-allocation-of-resources-without-limits-or-throttling-sa-contrib-2026-2152026-10-19 https://bugrater.com/releases/permissions-by-term-moderately-critical-information-disclosure-sa-contrib-2026-2142026-10-19 https://bugrater.com/releases/freelinking-moderately-critical-information-disclosure-sa-contrib-2026-2132026-10-19 https://bugrater.com/releases/easy-breadcrumb-moderately-critical-information-disclosure-sa-contrib-2026-2122026-10-19 https://bugrater.com/releases/country-moderately-critical-cross-site-scripting-sa-contrib-2026-2112026-10-19 https://bugrater.com/releases/smartlinker-ai-moderately-critical-information-disclosure-sa-contrib-2026-2102026-10-19 https://bugrater.com/releases/jenkins-security-advisory-2019-02-192026-10-19 https://bugrater.com/releases/jenkins-security-advisory-2019-01-282026-10-19 https://bugrater.com/releases/menu-link-attributes-moderately-critical-cross-site-scripting-sa-contrib-2026-2092026-10-19 https://bugrater.com/releases/dkan-moderately-critical-access-bypass-sa-contrib-2026-2082026-10-19 https://bugrater.com/releases/two-factor-authentication-tfa-passwordless-login-moderately-critical-information-disclosure-sa-contrib-2026-2072026-10-19 https://bugrater.com/releases/xray-audit-moderately-critical-access-bypass-sa-contrib-2026-2062026-10-19 https://bugrater.com/releases/views-share-moderately-critical-access-bypass-sa-contrib-2026-2052026-10-19 https://bugrater.com/releases/leaflet-moderately-critical-cross-site-scripting-sa-contrib-2026-2042026-10-19 https://bugrater.com/releases/inline-formatter-field-moderately-critical-server-side-template-injection-sa-contrib-2026-2032026-10-19 https://bugrater.com/releases/gutenberg-moderately-critical-access-bypass-sa-contrib-2026-2022026-10-19 https://bugrater.com/releases/security-vulnerabilities-fixed-in-thunderbird-140-162026-10-19 https://bugrater.com/releases/security-vulnerabilities-fixed-in-thunderbird-1562026-10-19 https://bugrater.com/releases/security-vulnerabilities-fixed-in-firefox-esr-153-32026-10-19 https://bugrater.com/releases/msrc-cve-2026-779002026-10-18 https://bugrater.com/releases/msrc-cve-2026-694352026-10-18 https://bugrater.com/releases/msrc-cve-2026-881312026-10-18 https://bugrater.com/releases/msrc-cve-2026-839432026-10-18 https://bugrater.com/releases/msrc-cve-2026-839472026-10-18 https://bugrater.com/releases/msrc-cve-2026-945102026-10-18 https://bugrater.com/releases/msrc-cve-2026-962072026-10-18 https://bugrater.com/releases/jenkins-security-advisory-2019-01-162026-10-19 https://bugrater.com/releases/jenkins-security-advisory-2019-01-082026-10-19 https://bugrater.com/releases/authenticator-login-plus-2fa-moderately-critical-improper-authentication-sa-contrib-2026-2012026-10-19 https://bugrater.com/releases/linked-field-moderately-critical-server-side-template-injection-sa-contrib-2026-2002026-10-19 https://bugrater.com/releases/inline-entity-form-dialog-moderately-critical-access-bypass-sa-contrib-2026-1992026-10-19 https://bugrater.com/releases/actstream-critical-access-bypass-sa-contrib-2026-1982026-10-19 https://bugrater.com/releases/authenticator-login-plus-2fa-critical-improper-authentication-sa-contrib-2026-1972026-10-19 https://bugrater.com/releases/orphans-media-critical-unsupported-sa-contrib-2026-1962026-10-19 https://bugrater.com/releases/mathjax-latex-for-drupal-critical-cross-site-scripting-sa-contrib-2026-1952026-10-19 https://bugrater.com/releases/entity-reference-manager-merge-entities-critical-access-bypass-sa-contrib-2026-1942026-10-19 https://bugrater.com/releases/jenkins-security-advisory-2018-12-052026-10-19 https://bugrater.com/releases/jenkins-security-advisory-2018-10-292026-10-19 https://bugrater.com/releases/eca-helper-critical-unsupported-sa-contrib-2026-1932026-10-19 https://bugrater.com/releases/block-ajax-highly-critical-php-object-injection-sa-contrib-2026-1922026-10-19 https://bugrater.com/releases/jenkins-security-advisory-2018-10-102026-10-19 https://bugrater.com/releases/jenkins-security-advisory-2018-09-252026-10-19 https://bugrater.com/releases/jenkins-security-advisory-2018-08-152026-10-19 https://bugrater.com/releases/jenkins-security-advisory-2018-07-302026-10-19 https://bugrater.com/releases/gitlab-critical-patch-release-19-4-2-19-3-5-19-2-82026-10-19 https://bugrater.com/releases/stable-channel-update-for-desktop-155-0-8059-79-802026-10-19 https://bugrater.com/releases/jenkins-security-advisory-2018-07-182026-10-19 https://bugrater.com/releases/jenkins-security-advisory-2018-06-252026-10-19 https://bugrater.com/releases/zsb-26022-zoom-clients-improper-certificate-validation2026-10-18 https://bugrater.com/releases/zsb-26021-zoom-clients-for-windows-improper-certificate-validation2026-10-18 https://bugrater.com/releases/security-vulnerabilities-fixed-in-thunderbird-153-52026-10-19 https://bugrater.com/releases/security-vulnerabilities-fixed-in-thunderbird-1582026-10-19 https://bugrater.com/releases/security-vulnerabilities-fixed-in-firefox-esr-153-52026-10-19 https://bugrater.com/releases/cve-2026-106583-in-ssh-in-openssh-before-10-6-a-or-character-can-occur-in-a-command-line-username-leading-to-injection2026-10-19 https://bugrater.com/releases/msrc-adv2600012026-10-18 https://bugrater.com/releases/msrc-cve-2026-1055952026-10-18 https://bugrater.com/releases/msrc-cve-2026-1022382026-10-18 https://bugrater.com/releases/msrc-cve-2026-1084002026-10-18 https://bugrater.com/releases/msrc-cve-2026-1028602026-10-18 https://bugrater.com/releases/msrc-cve-2026-1028492026-10-18 https://bugrater.com/releases/msrc-cve-2026-1055962026-10-18 https://bugrater.com/releases/msrc-cve-2026-945062026-10-18 https://bugrater.com/releases/msrc-cve-2026-1022342026-10-18 https://bugrater.com/releases/msrc-cve-2026-1022332026-10-18 https://bugrater.com/releases/msrc-cve-2026-1084572026-10-18 https://bugrater.com/releases/msrc-cve-2026-1028502026-10-18 https://bugrater.com/releases/msrc-cve-2026-961832026-10-18 https://bugrater.com/releases/msrc-cve-2026-1028562026-10-18 https://bugrater.com/releases/msrc-cve-2026-1057142026-10-18 https://bugrater.com/releases/msrc-cve-2026-1057132026-10-18 https://bugrater.com/releases/msrc-cve-2026-1084682026-10-18 https://bugrater.com/releases/msrc-cve-2026-1022292026-10-18 https://bugrater.com/releases/msrc-cve-2026-1057252026-10-18 https://bugrater.com/releases/msrc-cve-2026-1057152026-10-18 https://bugrater.com/releases/msrc-cve-2026-1028552026-10-18 https://bugrater.com/releases/msrc-cve-2026-1028632026-10-18 https://bugrater.com/releases/msrc-cve-2026-1028672026-10-18 https://bugrater.com/releases/msrc-cve-2026-1028612026-10-18 https://bugrater.com/releases/msrc-cve-2026-1055982026-10-18 https://bugrater.com/releases/msrc-cve-2026-969562026-10-18 https://bugrater.com/releases/msrc-cve-2026-700982026-10-18 https://bugrater.com/releases/msrc-cve-2026-1028642026-10-18 https://bugrater.com/releases/msrc-cve-2026-1055912026-10-18 https://bugrater.com/releases/msrc-cve-2026-1022272026-10-18 https://bugrater.com/releases/msrc-cve-2026-1028622026-10-18 https://bugrater.com/releases/msrc-cve-2026-1057272026-10-18 https://bugrater.com/releases/msrc-cve-2026-1028572026-10-18 https://bugrater.com/releases/msrc-cve-2026-1035722026-10-18 https://bugrater.com/releases/msrc-cve-2026-1055992026-10-18 https://bugrater.com/releases/msrc-cve-2026-1022352026-10-18 https://bugrater.com/releases/msrc-cve-2026-1057162026-10-18 https://bugrater.com/releases/msrc-cve-2026-1022312026-10-18 https://bugrater.com/releases/msrc-cve-2026-1057202026-10-18 https://bugrater.com/releases/msrc-cve-2026-1022322026-10-18 https://bugrater.com/releases/msrc-cve-2026-978002026-10-18 https://bugrater.com/releases/msrc-cve-2026-1055932026-10-18 https://bugrater.com/releases/msrc-cve-2026-1028662026-10-18 https://bugrater.com/releases/msrc-cve-2026-1055922026-10-18 https://bugrater.com/releases/msrc-cve-2026-1055972026-10-18 https://bugrater.com/releases/msrc-cve-2026-1028652026-10-18 https://bugrater.com/releases/msrc-cve-2026-693702026-10-14 https://bugrater.com/releases/msrc-cve-2026-1084672026-10-18 https://bugrater.com/releases/msrc-cve-2026-1057172026-10-18 https://bugrater.com/releases/msrc-cve-2026-1057182026-10-18 https://bugrater.com/releases/msrc-cve-2026-1057192026-10-18 https://bugrater.com/releases/msrc-cve-2026-1057222026-10-18 https://bugrater.com/releases/msrc-cve-2026-1057232026-10-18 https://bugrater.com/releases/msrc-cve-2026-1057262026-10-18 https://bugrater.com/releases/msrc-cve-2026-702352026-10-18 https://bugrater.com/releases/msrc-cve-2026-1083982026-10-18 https://bugrater.com/releases/msrc-cve-2026-1057312026-10-18 https://bugrater.com/releases/msrc-cve-2026-1057322026-10-18 https://bugrater.com/releases/msrc-cve-2026-1083992026-10-18 https://bugrater.com/releases/msrc-cve-2026-1084642026-10-18 https://bugrater.com/releases/msrc-cve-2026-698982026-10-18 https://bugrater.com/releases/msrc-cve-2026-1084662026-10-18 https://bugrater.com/releases/msrc-cve-2026-1084652026-10-18 https://bugrater.com/releases/msrc-cve-2026-1084602026-10-18 https://bugrater.com/releases/msrc-cve-2026-1084622026-10-18 https://bugrater.com/releases/msrc-cve-2026-693632026-10-18 https://bugrater.com/releases/msrc-cve-2026-497852026-10-18 https://bugrater.com/releases/msrc-cve-2026-729682026-10-18 https://bugrater.com/releases/msrc-cve-2026-1057332026-10-18 https://bugrater.com/releases/msrc-cve-2026-619312026-10-18 https://bugrater.com/releases/msrc-cve-2026-705662026-10-18 https://bugrater.com/releases/msrc-cve-2026-696392026-10-18 https://bugrater.com/releases/msrc-cve-2026-697662026-10-18 https://bugrater.com/releases/msrc-cve-2026-699352026-10-18 https://bugrater.com/releases/msrc-cve-2026-697952026-10-18 https://bugrater.com/releases/msrc-cve-2026-698502026-10-18 https://bugrater.com/releases/msrc-cve-2026-699142026-10-18 https://bugrater.com/releases/msrc-cve-2026-699262026-10-18 https://bugrater.com/releases/msrc-cve-2026-699092026-10-18 https://bugrater.com/releases/msrc-cve-2026-699052026-10-18 https://bugrater.com/releases/msrc-cve-2026-699132026-10-18 https://bugrater.com/releases/msrc-cve-2026-699182026-10-18 https://bugrater.com/releases/msrc-cve-2026-699422026-10-18 https://bugrater.com/releases/msrc-cve-2026-699452026-10-18 https://bugrater.com/releases/msrc-cve-2026-699502026-10-18 https://bugrater.com/releases/msrc-cve-2026-699472026-10-14 https://bugrater.com/releases/msrc-cve-2026-699522026-10-18 https://bugrater.com/releases/msrc-cve-2026-699532026-10-18 https://bugrater.com/releases/msrc-cve-2026-699542026-10-18 https://bugrater.com/releases/msrc-cve-2026-698402026-10-18 https://bugrater.com/releases/msrc-cve-2026-697632026-10-18 https://bugrater.com/releases/msrc-cve-2026-699582026-10-18 https://bugrater.com/releases/msrc-cve-2026-698672026-10-18 https://bugrater.com/releases/msrc-cve-2026-699592026-10-18 https://bugrater.com/releases/msrc-cve-2026-699672026-10-18 https://bugrater.com/releases/msrc-cve-2026-699632026-10-18 https://bugrater.com/releases/msrc-cve-2026-699662026-10-18 https://bugrater.com/releases/msrc-cve-2026-699682026-10-14 https://bugrater.com/releases/msrc-cve-2026-699572026-10-18 https://bugrater.com/releases/msrc-cve-2026-699702026-10-18 https://bugrater.com/releases/msrc-cve-2026-699692026-10-18 https://bugrater.com/releases/msrc-cve-2026-699712026-10-18 https://bugrater.com/releases/msrc-cve-2026-699732026-10-18 https://bugrater.com/releases/msrc-cve-2026-1084612026-10-18 https://bugrater.com/releases/msrc-cve-2026-699642026-10-18 https://bugrater.com/releases/msrc-cve-2026-699742026-10-18 https://bugrater.com/releases/msrc-cve-2026-699782026-10-18 https://bugrater.com/releases/msrc-cve-2026-699792026-10-18 https://bugrater.com/releases/msrc-cve-2026-700102026-10-18 https://bugrater.com/releases/msrc-cve-2026-700172026-10-18 https://bugrater.com/releases/msrc-cve-2026-700212026-10-18 https://bugrater.com/releases/msrc-cve-2026-700262026-10-18 https://bugrater.com/releases/msrc-cve-2026-700272026-10-18 https://bugrater.com/releases/msrc-cve-2026-700562026-10-18 https://bugrater.com/releases/msrc-cve-2026-700602026-10-18 https://bugrater.com/releases/msrc-cve-2026-700592026-10-18 https://bugrater.com/releases/msrc-cve-2026-700632026-10-18 https://bugrater.com/releases/msrc-cve-2026-700622026-10-18 https://bugrater.com/releases/msrc-cve-2026-700762026-10-18 https://bugrater.com/releases/msrc-cve-2026-700772026-10-18 https://bugrater.com/releases/msrc-cve-2026-700822026-10-18 https://bugrater.com/releases/msrc-cve-2026-700972026-10-18 https://bugrater.com/releases/msrc-cve-2026-701042026-10-18 https://bugrater.com/releases/msrc-cve-2026-700952026-10-18 https://bugrater.com/releases/msrc-cve-2026-701032026-10-18 https://bugrater.com/releases/msrc-cve-2026-700932026-10-18 https://bugrater.com/releases/msrc-cve-2026-700962026-10-18 https://bugrater.com/releases/msrc-cve-2026-701062026-10-14 https://bugrater.com/releases/msrc-cve-2026-701212026-10-18 https://bugrater.com/releases/msrc-cve-2026-701082026-10-18 https://bugrater.com/releases/msrc-cve-2026-701172026-10-18 https://bugrater.com/releases/msrc-cve-2026-701272026-10-18 https://bugrater.com/releases/msrc-cve-2026-701142026-10-18 https://bugrater.com/releases/msrc-cve-2026-701232026-10-18 https://bugrater.com/releases/msrc-cve-2026-701402026-10-18 https://bugrater.com/releases/msrc-cve-2026-701152026-10-18 https://bugrater.com/releases/msrc-cve-2026-701392026-10-18 https://bugrater.com/releases/msrc-cve-2026-701182026-10-18 https://bugrater.com/releases/msrc-cve-2026-701322026-10-18 https://bugrater.com/releases/msrc-cve-2026-701262026-10-18 https://bugrater.com/releases/msrc-cve-2026-701352026-10-18 https://bugrater.com/releases/msrc-cve-2026-701362026-10-18 https://bugrater.com/releases/msrc-cve-2026-701382026-10-18 https://bugrater.com/releases/msrc-cve-2026-701192026-10-18 https://bugrater.com/releases/msrc-cve-2026-701332026-10-18 https://bugrater.com/releases/msrc-cve-2026-701412026-10-18 https://bugrater.com/releases/msrc-cve-2026-701732026-10-18 https://bugrater.com/releases/msrc-cve-2026-701422026-10-18 https://bugrater.com/releases/msrc-cve-2026-701982026-10-18 https://bugrater.com/releases/msrc-cve-2026-701692026-10-18 https://bugrater.com/releases/msrc-cve-2026-701762026-10-18 https://bugrater.com/releases/msrc-cve-2026-701562026-10-18 https://bugrater.com/releases/msrc-cve-2026-701502026-10-18 https://bugrater.com/releases/msrc-cve-2026-701682026-10-18 https://bugrater.com/releases/msrc-cve-2026-702452026-10-18 https://bugrater.com/releases/msrc-cve-2026-701952026-10-18 https://bugrater.com/releases/msrc-cve-2026-702332026-10-18 https://bugrater.com/releases/msrc-cve-2026-702182026-10-18 https://bugrater.com/releases/msrc-cve-2026-702472026-10-18 https://bugrater.com/releases/msrc-cve-2026-702052026-10-18 https://bugrater.com/releases/msrc-cve-2026-702252026-10-18 https://bugrater.com/releases/msrc-cve-2026-702342026-10-18 https://bugrater.com/releases/msrc-cve-2026-701772026-10-18 https://bugrater.com/releases/msrc-cve-2026-702492026-10-18 https://bugrater.com/releases/msrc-cve-2026-702532026-10-18 https://bugrater.com/releases/msrc-cve-2026-702722026-10-18 https://bugrater.com/releases/msrc-cve-2026-702712026-10-18 https://bugrater.com/releases/msrc-cve-2026-702732026-10-18 https://bugrater.com/releases/msrc-cve-2026-702742026-10-18 https://bugrater.com/releases/msrc-cve-2026-702782026-10-18 https://bugrater.com/releases/msrc-cve-2026-702802026-10-18 https://bugrater.com/releases/msrc-cve-2026-702842026-10-18 https://bugrater.com/releases/msrc-cve-2026-702852026-10-18 https://bugrater.com/releases/msrc-cve-2026-688362026-10-18 https://bugrater.com/releases/msrc-cve-2026-697052026-10-18 https://bugrater.com/releases/msrc-cve-2026-702522026-10-18 https://bugrater.com/releases/msrc-cve-2026-696342026-10-18 https://bugrater.com/releases/msrc-cve-2026-698832026-10-18 https://bugrater.com/releases/msrc-cve-2026-702232026-10-18 https://bugrater.com/releases/msrc-cve-2026-729552026-10-18 https://bugrater.com/releases/msrc-cve-2026-668222026-10-14 https://bugrater.com/releases/msrc-cve-2026-696512026-10-18 https://bugrater.com/releases/msrc-cve-2026-702552026-10-18 https://bugrater.com/releases/msrc-cve-2026-695212026-10-18 https://bugrater.com/releases/msrc-cve-2026-705802026-10-18 https://bugrater.com/releases/msrc-cve-2026-693542026-10-18 https://bugrater.com/releases/msrc-cve-2026-729342026-10-18 https://bugrater.com/releases/msrc-cve-2026-676252026-10-18 https://bugrater.com/releases/msrc-cve-2026-698302026-10-18 https://bugrater.com/releases/msrc-cve-2026-693872026-10-18 https://bugrater.com/releases/msrc-cve-2026-729692026-10-18 https://bugrater.com/releases/msrc-cve-2026-697432026-10-18 https://bugrater.com/releases/msrc-cve-2026-696332026-10-18 https://bugrater.com/releases/msrc-cve-2026-697182026-10-18 https://bugrater.com/releases/msrc-cve-2026-696732026-10-18 https://bugrater.com/releases/msrc-cve-2026-698822026-10-18 https://bugrater.com/releases/msrc-cve-2026-819642026-10-18 https://bugrater.com/releases/msrc-cve-2026-819692026-10-18 https://bugrater.com/releases/msrc-cve-2026-835042026-10-18 https://bugrater.com/releases/msrc-cve-2026-835002026-10-18 https://bugrater.com/releases/msrc-cve-2026-834992026-10-18 https://bugrater.com/releases/msrc-cve-2026-835102026-10-18 https://bugrater.com/releases/msrc-cve-2026-835182026-10-18 https://bugrater.com/releases/msrc-cve-2026-835752026-10-18 https://bugrater.com/releases/msrc-cve-2026-835712026-10-18 https://bugrater.com/releases/msrc-cve-2026-835782026-10-18 https://bugrater.com/releases/msrc-cve-2026-835802026-10-18 https://bugrater.com/releases/msrc-cve-2026-835842026-10-18 https://bugrater.com/releases/msrc-cve-2026-835832026-10-18 https://bugrater.com/releases/msrc-cve-2026-836352026-10-18 https://bugrater.com/releases/msrc-cve-2026-836412026-10-18 https://bugrater.com/releases/msrc-cve-2026-836442026-10-18 https://bugrater.com/releases/msrc-cve-2026-836422026-10-18 https://bugrater.com/releases/msrc-cve-2026-836502026-10-18 https://bugrater.com/releases/msrc-cve-2026-836522026-10-18 https://bugrater.com/releases/msrc-cve-2026-836542026-10-18 https://bugrater.com/releases/msrc-cve-2026-836552026-10-18 https://bugrater.com/releases/msrc-cve-2026-836572026-10-18 https://bugrater.com/releases/msrc-cve-2026-836582026-10-18 https://bugrater.com/releases/msrc-cve-2026-836712026-10-18 https://bugrater.com/releases/msrc-cve-2026-836752026-10-18 https://bugrater.com/releases/msrc-cve-2026-836692026-10-18 https://bugrater.com/releases/msrc-cve-2026-836782026-10-18 https://bugrater.com/releases/msrc-cve-2026-836812026-10-18 https://bugrater.com/releases/msrc-cve-2026-836872026-10-18 https://bugrater.com/releases/msrc-cve-2026-836912026-10-18 https://bugrater.com/releases/msrc-cve-2026-836902026-10-18 https://bugrater.com/releases/msrc-cve-2026-836922026-10-18 https://bugrater.com/releases/msrc-cve-2026-836882026-10-18 https://bugrater.com/releases/msrc-cve-2026-836942026-10-18 https://bugrater.com/releases/msrc-cve-2026-836992026-10-18 https://bugrater.com/releases/msrc-cve-2026-836932026-10-18 https://bugrater.com/releases/msrc-cve-2026-837002026-10-18 https://bugrater.com/releases/msrc-cve-2026-837042026-10-18 https://bugrater.com/releases/msrc-cve-2026-837052026-10-18 https://bugrater.com/releases/msrc-cve-2026-837062026-10-18 https://bugrater.com/releases/msrc-cve-2026-837082026-10-18 https://bugrater.com/releases/msrc-cve-2026-837072026-10-18 https://bugrater.com/releases/msrc-cve-2026-837122026-10-18 https://bugrater.com/releases/msrc-cve-2026-837132026-10-18 https://bugrater.com/releases/msrc-cve-2026-837152026-10-18 https://bugrater.com/releases/msrc-cve-2026-837192026-10-18 https://bugrater.com/releases/msrc-cve-2026-837222026-10-18 https://bugrater.com/releases/msrc-cve-2026-837272026-10-18 https://bugrater.com/releases/msrc-cve-2026-837332026-10-18 https://bugrater.com/releases/msrc-cve-2026-837382026-10-18 https://bugrater.com/releases/msrc-cve-2026-837402026-10-18 https://bugrater.com/releases/msrc-cve-2026-837482026-10-18 https://bugrater.com/releases/msrc-cve-2026-837492026-10-18 https://bugrater.com/releases/msrc-cve-2026-837542026-10-18 https://bugrater.com/releases/msrc-cve-2026-837612026-10-18 https://bugrater.com/releases/msrc-cve-2026-837602026-10-18 https://bugrater.com/releases/msrc-cve-2026-837582026-10-18 https://bugrater.com/releases/msrc-cve-2026-837592026-10-18 https://bugrater.com/releases/msrc-cve-2026-837682026-10-18 https://bugrater.com/releases/msrc-cve-2026-837752026-10-18 https://bugrater.com/releases/msrc-cve-2026-837762026-10-18 https://bugrater.com/releases/msrc-cve-2026-837792026-10-18 https://bugrater.com/releases/msrc-cve-2026-837822026-10-18 https://bugrater.com/releases/msrc-cve-2026-837802026-10-18 https://bugrater.com/releases/msrc-cve-2026-837872026-10-18 https://bugrater.com/releases/msrc-cve-2026-837842026-10-18 https://bugrater.com/releases/msrc-cve-2026-837932026-10-18 https://bugrater.com/releases/msrc-cve-2026-837982026-10-18 https://bugrater.com/releases/msrc-cve-2026-837962026-10-18 https://bugrater.com/releases/msrc-cve-2026-838262026-10-18 https://bugrater.com/releases/msrc-cve-2026-837232026-10-18 https://bugrater.com/releases/msrc-cve-2026-838322026-10-18 https://bugrater.com/releases/msrc-cve-2026-838282026-10-18 https://bugrater.com/releases/msrc-cve-2026-837532026-10-18 https://bugrater.com/releases/msrc-cve-2026-838272026-10-18 https://bugrater.com/releases/msrc-cve-2026-838342026-10-14 https://bugrater.com/releases/msrc-cve-2026-838362026-10-18 https://bugrater.com/releases/msrc-cve-2026-837262026-10-18 https://bugrater.com/releases/msrc-cve-2026-838392026-10-18 https://bugrater.com/releases/msrc-cve-2026-838382026-10-18 https://bugrater.com/releases/msrc-cve-2026-838332026-10-18 https://bugrater.com/releases/msrc-cve-2026-838422026-10-18 https://bugrater.com/releases/msrc-cve-2026-838432026-10-18 https://bugrater.com/releases/msrc-cve-2026-838442026-10-18 https://bugrater.com/releases/msrc-cve-2026-838492026-10-18 https://bugrater.com/releases/msrc-cve-2026-838472026-10-18 https://bugrater.com/releases/msrc-cve-2026-838462026-10-18 https://bugrater.com/releases/msrc-cve-2026-838482026-10-18 https://bugrater.com/releases/msrc-cve-2026-838522026-10-18 https://bugrater.com/releases/msrc-cve-2026-838512026-10-18 https://bugrater.com/releases/msrc-cve-2026-838532026-10-18 https://bugrater.com/releases/msrc-cve-2026-838642026-10-18 https://bugrater.com/releases/msrc-cve-2026-838552026-10-18 https://bugrater.com/releases/msrc-cve-2026-838542026-10-18 https://bugrater.com/releases/msrc-cve-2026-838622026-10-18 https://bugrater.com/releases/msrc-cve-2026-838652026-10-18 https://bugrater.com/releases/msrc-cve-2026-838752026-10-18 https://bugrater.com/releases/msrc-cve-2026-838722026-10-18 https://bugrater.com/releases/msrc-cve-2026-838692026-10-18 https://bugrater.com/releases/msrc-cve-2026-838762026-10-18 https://bugrater.com/releases/msrc-cve-2026-838822026-10-18 https://bugrater.com/releases/msrc-cve-2026-839012026-10-18 https://bugrater.com/releases/msrc-cve-2026-838792026-10-18 https://bugrater.com/releases/msrc-cve-2026-838682026-10-18 https://bugrater.com/releases/msrc-cve-2026-839022026-10-18 https://bugrater.com/releases/msrc-cve-2026-838672026-10-18 https://bugrater.com/releases/msrc-cve-2026-838852026-10-18 https://bugrater.com/releases/msrc-cve-2026-838922026-10-18 https://bugrater.com/releases/msrc-cve-2026-838932026-10-18 https://bugrater.com/releases/msrc-cve-2026-838962026-10-18 https://bugrater.com/releases/msrc-cve-2026-700862026-10-18 https://bugrater.com/releases/msrc-cve-2026-700892026-10-18 https://bugrater.com/releases/msrc-cve-2026-701282026-10-18 https://bugrater.com/releases/msrc-cve-2026-701632026-10-18 https://bugrater.com/releases/msrc-cve-2026-701512026-10-18 https://bugrater.com/releases/msrc-cve-2026-702222026-10-18 https://bugrater.com/releases/msrc-cve-2026-839092026-10-18 https://bugrater.com/releases/msrc-cve-2026-702752026-10-18 https://bugrater.com/releases/msrc-cve-2026-702862026-10-18 https://bugrater.com/releases/msrc-cve-2026-702482026-10-18 https://bugrater.com/releases/msrc-cve-2026-702432026-10-18 https://bugrater.com/releases/msrc-cve-2026-702992026-10-18 https://bugrater.com/releases/msrc-cve-2026-835692026-10-18 https://bugrater.com/releases/msrc-cve-2026-835862026-10-18 https://bugrater.com/releases/msrc-cve-2026-837412026-10-18 https://bugrater.com/releases/msrc-cve-2026-838862026-10-18 https://bugrater.com/releases/msrc-cve-2026-839122026-10-18 https://bugrater.com/releases/msrc-cve-2026-839062026-10-18 https://bugrater.com/releases/msrc-cve-2026-858412026-10-18 https://bugrater.com/releases/msrc-cve-2026-839112026-10-18 https://bugrater.com/releases/msrc-cve-2026-839142026-10-18 https://bugrater.com/releases/msrc-cve-2026-839162026-10-18 https://bugrater.com/releases/msrc-cve-2026-839172026-10-18 https://bugrater.com/releases/msrc-cve-2026-839222026-10-18 https://bugrater.com/releases/msrc-cve-2026-839262026-10-18 https://bugrater.com/releases/msrc-cve-2026-839192026-10-18 https://bugrater.com/releases/msrc-cve-2026-839202026-10-18 https://bugrater.com/releases/msrc-cve-2026-838712026-10-18 https://bugrater.com/releases/msrc-cve-2026-702412026-10-18 https://bugrater.com/releases/msrc-cve-2026-838662026-10-18 https://bugrater.com/releases/msrc-cve-2026-839212026-10-18 https://bugrater.com/releases/msrc-cve-2026-837692026-10-18 https://bugrater.com/releases/msrc-cve-2026-839272026-10-18 https://bugrater.com/releases/msrc-cve-2026-839322026-10-18 https://bugrater.com/releases/msrc-cve-2026-839292026-10-18 https://bugrater.com/releases/msrc-cve-2026-698862026-10-18 https://bugrater.com/releases/msrc-cve-2026-840092026-10-18 https://bugrater.com/releases/msrc-cve-2026-840072026-10-18 https://bugrater.com/releases/msrc-cve-2026-840132026-10-18 https://bugrater.com/releases/msrc-cve-2026-840152026-10-18 https://bugrater.com/releases/msrc-cve-2026-840142026-10-18 https://bugrater.com/releases/msrc-cve-2026-840182026-10-18 https://bugrater.com/releases/msrc-cve-2026-840162026-10-18 https://bugrater.com/releases/msrc-cve-2026-840192026-10-18 https://bugrater.com/releases/msrc-cve-2026-840202026-10-18 https://bugrater.com/releases/msrc-cve-2026-853182026-10-18 https://bugrater.com/releases/msrc-cve-2026-853202026-10-18 https://bugrater.com/releases/msrc-cve-2026-853312026-10-18 https://bugrater.com/releases/msrc-cve-2026-853272026-10-18 https://bugrater.com/releases/msrc-cve-2026-853282026-10-18 https://bugrater.com/releases/msrc-cve-2026-853362026-10-18 https://bugrater.com/releases/msrc-cve-2026-853322026-10-18 https://bugrater.com/releases/msrc-cve-2026-853332026-10-18 https://bugrater.com/releases/msrc-cve-2026-853342026-10-18 https://bugrater.com/releases/msrc-cve-2026-853532026-10-18 https://bugrater.com/releases/msrc-cve-2026-853372026-10-18 https://bugrater.com/releases/msrc-cve-2026-853432026-10-18 https://bugrater.com/releases/msrc-cve-2026-853412026-10-18 https://bugrater.com/releases/msrc-cve-2026-853392026-10-18 https://bugrater.com/releases/msrc-cve-2026-853542026-10-18 https://bugrater.com/releases/msrc-cve-2026-853552026-10-18 https://bugrater.com/releases/msrc-cve-2026-853382026-10-18 https://bugrater.com/releases/msrc-cve-2026-853562026-10-18 https://bugrater.com/releases/msrc-cve-2026-853572026-10-18 https://bugrater.com/releases/msrc-cve-2026-853582026-10-18 https://bugrater.com/releases/msrc-cve-2026-853522026-10-18 https://bugrater.com/releases/msrc-cve-2026-853592026-10-18 https://bugrater.com/releases/msrc-cve-2026-853612026-10-18 https://bugrater.com/releases/msrc-cve-2026-853682026-10-18 https://bugrater.com/releases/msrc-cve-2026-853622026-10-18 https://bugrater.com/releases/msrc-cve-2026-853662026-10-18 https://bugrater.com/releases/msrc-cve-2026-853702026-10-14 https://bugrater.com/releases/msrc-cve-2026-853722026-10-14 https://bugrater.com/releases/msrc-cve-2026-853692026-10-18 https://bugrater.com/releases/msrc-cve-2026-853672026-10-18 https://bugrater.com/releases/msrc-cve-2026-853652026-10-18 https://bugrater.com/releases/msrc-cve-2026-853422026-10-18 https://bugrater.com/releases/msrc-cve-2026-853642026-10-18 https://bugrater.com/releases/msrc-cve-2026-853732026-10-18 https://bugrater.com/releases/msrc-cve-2026-853742026-10-18 https://bugrater.com/releases/msrc-cve-2026-853752026-10-18 https://bugrater.com/releases/msrc-cve-2026-853772026-10-18 https://bugrater.com/releases/msrc-cve-2026-857902026-10-18 https://bugrater.com/releases/msrc-cve-2026-853762026-10-18 https://bugrater.com/releases/msrc-cve-2026-857912026-10-18 https://bugrater.com/releases/msrc-cve-2026-857922026-10-18 https://bugrater.com/releases/msrc-cve-2026-857932026-10-18 https://bugrater.com/releases/msrc-cve-2026-857942026-10-18 https://bugrater.com/releases/msrc-cve-2026-857952026-10-18 https://bugrater.com/releases/msrc-cve-2026-857962026-10-18 https://bugrater.com/releases/msrc-cve-2026-857972026-10-18 https://bugrater.com/releases/msrc-cve-2026-857982026-10-18 https://bugrater.com/releases/msrc-cve-2026-857992026-10-18 https://bugrater.com/releases/msrc-cve-2026-858002026-10-18 https://bugrater.com/releases/msrc-cve-2026-858022026-10-18 https://bugrater.com/releases/msrc-cve-2026-858032026-10-18 https://bugrater.com/releases/msrc-cve-2026-858042026-10-18 https://bugrater.com/releases/msrc-cve-2026-858062026-10-18 https://bugrater.com/releases/msrc-cve-2026-858092026-10-18 https://bugrater.com/releases/msrc-cve-2026-858072026-10-18 https://bugrater.com/releases/msrc-cve-2026-858082026-10-18 https://bugrater.com/releases/msrc-cve-2026-858102026-10-18 https://bugrater.com/releases/msrc-cve-2026-858112026-10-18 https://bugrater.com/releases/msrc-cve-2026-858142026-10-18 https://bugrater.com/releases/msrc-cve-2026-858122026-10-18 https://bugrater.com/releases/msrc-cve-2026-858152026-10-18 https://bugrater.com/releases/msrc-cve-2026-858162026-10-18 https://bugrater.com/releases/msrc-cve-2026-858182026-10-18 https://bugrater.com/releases/msrc-cve-2026-858202026-10-18 https://bugrater.com/releases/msrc-cve-2026-853712026-10-18 https://bugrater.com/releases/msrc-cve-2026-858212026-10-18 https://bugrater.com/releases/msrc-cve-2026-858172026-10-18 https://bugrater.com/releases/msrc-cve-2026-858222026-10-18 https://bugrater.com/releases/msrc-cve-2026-858252026-10-18 https://bugrater.com/releases/msrc-cve-2026-858232026-10-18 https://bugrater.com/releases/msrc-cve-2026-858262026-10-18 https://bugrater.com/releases/msrc-cve-2026-858242026-10-18 https://bugrater.com/releases/msrc-cve-2026-858272026-10-18 https://bugrater.com/releases/msrc-cve-2026-858282026-10-18 https://bugrater.com/releases/msrc-cve-2026-858292026-10-18 https://bugrater.com/releases/msrc-cve-2026-858302026-10-18 https://bugrater.com/releases/msrc-cve-2026-858312026-10-18 https://bugrater.com/releases/msrc-cve-2026-858352026-10-18 https://bugrater.com/releases/msrc-cve-2026-858362026-10-18 https://bugrater.com/releases/msrc-cve-2026-858322026-10-18 https://bugrater.com/releases/msrc-cve-2026-858402026-10-18 https://bugrater.com/releases/msrc-cve-2026-858372026-10-18 https://bugrater.com/releases/msrc-cve-2026-858332026-10-18 https://bugrater.com/releases/msrc-cve-2026-858342026-10-18 https://bugrater.com/releases/msrc-cve-2026-858432026-10-18 https://bugrater.com/releases/msrc-cve-2026-858422026-10-18 https://bugrater.com/releases/msrc-cve-2026-858462026-10-18 https://bugrater.com/releases/msrc-cve-2026-858472026-10-18 https://bugrater.com/releases/msrc-cve-2026-858482026-10-18 https://bugrater.com/releases/msrc-cve-2026-858502026-10-18 https://bugrater.com/releases/msrc-cve-2026-858492026-10-18 https://bugrater.com/releases/msrc-cve-2026-858512026-10-18 https://bugrater.com/releases/msrc-cve-2026-858522026-10-18 https://bugrater.com/releases/msrc-cve-2026-858532026-10-18 https://bugrater.com/releases/msrc-cve-2026-858542026-10-18 https://bugrater.com/releases/msrc-cve-2026-858552026-10-18 https://bugrater.com/releases/msrc-cve-2026-858602026-10-18 https://bugrater.com/releases/msrc-cve-2026-858562026-10-18 https://bugrater.com/releases/msrc-cve-2026-858582026-10-18 https://bugrater.com/releases/msrc-cve-2026-858592026-10-18 https://bugrater.com/releases/msrc-cve-2026-858632026-10-18 https://bugrater.com/releases/msrc-cve-2026-858612026-10-18 https://bugrater.com/releases/msrc-cve-2026-858652026-10-18 https://bugrater.com/releases/msrc-cve-2026-858642026-10-18 https://bugrater.com/releases/msrc-cve-2026-858682026-10-14 https://bugrater.com/releases/msrc-cve-2026-858702026-10-14 https://bugrater.com/releases/msrc-cve-2026-713472026-10-18 https://bugrater.com/releases/msrc-cve-2026-858692026-10-18 https://bugrater.com/releases/msrc-cve-2026-858812026-10-18 https://bugrater.com/releases/msrc-cve-2026-858912026-10-18 https://bugrater.com/releases/msrc-cve-2026-859152026-10-18 https://bugrater.com/releases/msrc-cve-2026-859182026-10-18 https://bugrater.com/releases/msrc-cve-2026-880802026-10-18 https://bugrater.com/releases/msrc-cve-2026-859202026-10-18 https://bugrater.com/releases/msrc-cve-2026-877082026-10-18 https://bugrater.com/releases/msrc-cve-2026-877112026-10-18 https://bugrater.com/releases/msrc-cve-2026-880912026-10-18 https://bugrater.com/releases/msrc-cve-2026-881572026-10-18 https://bugrater.com/releases/msrc-cve-2026-881012026-10-18 https://bugrater.com/releases/msrc-cve-2026-881242026-10-18 https://bugrater.com/releases/msrc-cve-2026-881582026-10-18 https://bugrater.com/releases/msrc-cve-2026-881612026-10-18 https://bugrater.com/releases/msrc-cve-2026-881602026-10-18 https://bugrater.com/releases/msrc-cve-2026-881592026-10-18 https://bugrater.com/releases/msrc-cve-2026-881682026-10-18 https://bugrater.com/releases/msrc-cve-2026-881622026-10-18 https://bugrater.com/releases/msrc-cve-2026-699432026-10-18 https://bugrater.com/releases/msrc-cve-2026-698772026-10-18 https://bugrater.com/releases/msrc-cve-2026-699342026-10-18 https://bugrater.com/releases/msrc-cve-2026-881732026-10-18 https://bugrater.com/releases/msrc-cve-2026-700412026-10-18 https://bugrater.com/releases/msrc-cve-2026-700522026-10-18 https://bugrater.com/releases/msrc-cve-2026-700482026-10-18 https://bugrater.com/releases/msrc-cve-2026-880962026-10-18 https://bugrater.com/releases/msrc-cve-2026-881652026-10-18 https://bugrater.com/releases/msrc-cve-2026-699162026-10-18 https://bugrater.com/releases/msrc-cve-2026-858712026-10-18 https://bugrater.com/releases/msrc-cve-2026-859272026-10-18 https://bugrater.com/releases/msrc-cve-2026-701642026-10-18 https://bugrater.com/releases/msrc-cve-2026-701702026-10-18 https://bugrater.com/releases/msrc-cve-2026-701672026-10-18 https://bugrater.com/releases/msrc-cve-2026-701722026-10-18 https://bugrater.com/releases/msrc-cve-2026-702102026-10-18 https://bugrater.com/releases/msrc-cve-2026-702132026-10-18 https://bugrater.com/releases/msrc-cve-2026-702442026-10-18 https://bugrater.com/releases/msrc-cve-2026-702622026-10-18 https://bugrater.com/releases/msrc-cve-2026-702162026-10-18 https://bugrater.com/releases/msrc-cve-2026-702382026-10-18 https://bugrater.com/releases/msrc-cve-2026-837102026-10-18 https://bugrater.com/releases/msrc-cve-2026-703032026-10-18 https://bugrater.com/releases/msrc-cve-2026-838882026-10-18 https://bugrater.com/releases/msrc-cve-2026-853292026-10-18 https://bugrater.com/releases/msrc-cve-2026-858672026-10-18 https://bugrater.com/releases/msrc-cve-2026-859042026-10-18 https://bugrater.com/releases/msrc-cve-2026-859142026-10-18 https://bugrater.com/releases/msrc-cve-2026-859162026-10-18 https://bugrater.com/releases/msrc-cve-2026-859282026-10-18 https://bugrater.com/releases/msrc-cve-2026-859302026-10-18 https://bugrater.com/releases/msrc-cve-2026-859332026-10-18 https://bugrater.com/releases/msrc-cve-2026-859382026-10-18 https://bugrater.com/releases/msrc-cve-2026-859352026-10-18 https://bugrater.com/releases/msrc-cve-2026-859312026-10-18 https://bugrater.com/releases/msrc-cve-2026-859392026-10-18 https://bugrater.com/releases/msrc-cve-2026-859362026-10-18 https://bugrater.com/releases/msrc-cve-2026-859452026-10-18 https://bugrater.com/releases/msrc-cve-2026-876912026-10-18 https://bugrater.com/releases/msrc-cve-2026-877062026-10-18 https://bugrater.com/releases/msrc-cve-2026-876972026-10-18 https://bugrater.com/releases/msrc-cve-2026-877102026-10-18 https://bugrater.com/releases/msrc-cve-2026-877122026-10-18 https://bugrater.com/releases/msrc-cve-2026-877132026-10-18 https://bugrater.com/releases/msrc-cve-2026-877142026-10-18 https://bugrater.com/releases/msrc-cve-2026-877162026-10-18 https://bugrater.com/releases/msrc-cve-2026-880702026-10-18 https://bugrater.com/releases/msrc-cve-2026-880732026-10-18 https://bugrater.com/releases/msrc-cve-2026-880712026-10-18 https://bugrater.com/releases/msrc-cve-2026-688832026-10-18 https://bugrater.com/releases/msrc-cve-2026-701892026-10-18 https://bugrater.com/releases/msrc-cve-2026-858762026-10-18 https://bugrater.com/releases/msrc-cve-2026-880742026-10-18 https://bugrater.com/releases/msrc-cve-2026-858862026-10-18 https://bugrater.com/releases/msrc-cve-2026-702702026-10-18 https://bugrater.com/releases/msrc-cve-2026-702772026-10-18 https://bugrater.com/releases/msrc-cve-2026-839452026-10-18 https://bugrater.com/releases/msrc-cve-2026-859342026-10-18 https://bugrater.com/releases/msrc-cve-2026-880982026-10-18 https://bugrater.com/releases/msrc-cve-2026-880992026-10-18 https://bugrater.com/releases/msrc-cve-2026-881062026-10-18 https://bugrater.com/releases/msrc-cve-2026-881022026-10-18 https://bugrater.com/releases/msrc-cve-2026-881002026-10-18 https://bugrater.com/releases/msrc-cve-2026-881322026-10-18 https://bugrater.com/releases/msrc-cve-2026-881072026-10-18 https://bugrater.com/releases/msrc-cve-2026-881372026-10-18 https://bugrater.com/releases/msrc-cve-2026-881362026-10-18 https://bugrater.com/releases/msrc-cve-2026-881402026-10-18 https://bugrater.com/releases/msrc-cve-2026-881432026-10-18 https://bugrater.com/releases/msrc-cve-2026-699232026-10-18 https://bugrater.com/releases/msrc-cve-2026-881462026-10-18 https://bugrater.com/releases/msrc-cve-2026-699402026-10-18 https://bugrater.com/releases/msrc-cve-2026-699492026-10-18 https://bugrater.com/releases/msrc-cve-2026-699552026-10-18 https://bugrater.com/releases/msrc-cve-2026-699772026-10-18 https://bugrater.com/releases/msrc-cve-2026-700082026-10-18 https://bugrater.com/releases/msrc-cve-2026-700242026-10-18 https://bugrater.com/releases/msrc-cve-2026-700382026-10-18 https://bugrater.com/releases/msrc-cve-2026-700312026-10-18 https://bugrater.com/releases/msrc-cve-2026-700132026-10-18 https://bugrater.com/releases/msrc-cve-2026-700452026-10-18 https://bugrater.com/releases/msrc-cve-2026-701342026-10-18 https://bugrater.com/releases/msrc-cve-2026-701312026-10-18 https://bugrater.com/releases/msrc-cve-2026-701022026-10-18 https://bugrater.com/releases/msrc-cve-2026-700442026-10-18 https://bugrater.com/releases/msrc-cve-2026-700682026-10-18 https://bugrater.com/releases/msrc-cve-2026-701102026-10-18 https://bugrater.com/releases/msrc-cve-2026-701092026-10-18 https://bugrater.com/releases/msrc-cve-2026-701472026-10-18 https://bugrater.com/releases/msrc-cve-2026-701162026-10-18 https://bugrater.com/releases/msrc-cve-2026-701492026-10-18 https://bugrater.com/releases/msrc-cve-2026-701862026-10-18 https://bugrater.com/releases/msrc-cve-2026-701742026-10-14 https://bugrater.com/releases/msrc-cve-2026-701592026-10-18 https://bugrater.com/releases/msrc-cve-2026-701612026-10-14 https://bugrater.com/releases/msrc-cve-2026-701652026-10-18 https://bugrater.com/releases/msrc-cve-2026-701752026-10-18 https://bugrater.com/releases/msrc-cve-2026-701962026-10-18 https://bugrater.com/releases/msrc-cve-2026-700112026-10-18 https://bugrater.com/releases/msrc-cve-2026-701792026-10-18 https://bugrater.com/releases/msrc-cve-2026-701372026-10-18 https://bugrater.com/releases/msrc-cve-2026-701812026-10-18 https://bugrater.com/releases/msrc-cve-2026-700922026-10-18 https://bugrater.com/releases/msrc-cve-2026-701132026-10-18 https://bugrater.com/releases/msrc-cve-2026-701902026-10-18 https://bugrater.com/releases/msrc-cve-2026-701882026-10-18 https://bugrater.com/releases/msrc-cve-2026-701832026-10-18 https://bugrater.com/releases/msrc-cve-2026-701972026-10-18 https://bugrater.com/releases/msrc-cve-2026-702202026-10-18 https://bugrater.com/releases/msrc-cve-2026-701942026-10-18 https://bugrater.com/releases/msrc-cve-2026-702682026-10-18 https://bugrater.com/releases/msrc-cve-2026-702562026-10-18 https://bugrater.com/releases/msrc-cve-2026-702062026-10-18 https://bugrater.com/releases/msrc-cve-2026-702512026-10-18 https://bugrater.com/releases/msrc-cve-2026-702692026-10-18 https://bugrater.com/releases/msrc-cve-2026-702572026-10-18 https://bugrater.com/releases/msrc-cve-2026-702632026-10-18 https://bugrater.com/releases/msrc-cve-2026-702592026-10-18 https://bugrater.com/releases/msrc-cve-2026-702872026-10-18 https://bugrater.com/releases/msrc-cve-2026-702662026-10-18 https://bugrater.com/releases/msrc-cve-2026-702762026-10-18 https://bugrater.com/releases/msrc-cve-2026-703022026-10-18 https://bugrater.com/releases/msrc-cve-2026-703012026-10-18 https://bugrater.com/releases/msrc-cve-2026-838912026-10-18 https://bugrater.com/releases/msrc-cve-2026-702982026-10-18 https://bugrater.com/releases/msrc-cve-2026-859002026-10-18 https://bugrater.com/releases/msrc-cve-2026-881532026-10-18 https://bugrater.com/releases/msrc-cve-2026-881502026-10-18 https://bugrater.com/releases/msrc-cve-2026-881452026-10-18 https://bugrater.com/releases/msrc-cve-2026-881512026-10-18 https://bugrater.com/releases/msrc-cve-2026-881562026-10-18 https://bugrater.com/releases/msrc-cve-2026-881552026-10-18 https://bugrater.com/releases/msrc-cve-2026-881752026-10-18 https://bugrater.com/releases/msrc-cve-2026-881672026-10-18 https://bugrater.com/releases/msrc-cve-2026-881692026-10-18 https://bugrater.com/releases/msrc-cve-2026-882012026-10-18 https://bugrater.com/releases/msrc-cve-2026-881782026-10-18 https://bugrater.com/releases/msrc-cve-2026-881972026-10-18 https://bugrater.com/releases/msrc-cve-2026-881962026-10-18 https://bugrater.com/releases/msrc-cve-2026-881982026-10-18 https://bugrater.com/releases/msrc-cve-2026-882022026-10-18 https://bugrater.com/releases/msrc-cve-2026-882042026-10-18 https://bugrater.com/releases/msrc-cve-2026-882092026-10-18 https://bugrater.com/releases/msrc-cve-2026-702822026-10-18 https://bugrater.com/releases/msrc-cve-2026-882082026-10-18 https://bugrater.com/releases/msrc-cve-2026-700492026-10-18 https://bugrater.com/releases/msrc-cve-2026-962152026-10-18 https://bugrater.com/releases/msrc-cve-2026-962042026-10-18 https://bugrater.com/releases/msrc-cve-2026-962172026-10-18 https://bugrater.com/releases/msrc-cve-2026-962182026-10-18 https://bugrater.com/releases/msrc-cve-2026-962162026-10-18 https://bugrater.com/releases/msrc-cve-2026-703002026-10-18 https://bugrater.com/releases/msrc-cve-2026-702912026-10-18 https://bugrater.com/releases/msrc-cve-2026-962202026-10-18 https://bugrater.com/releases/msrc-cve-2026-962232026-10-14 https://bugrater.com/releases/msrc-cve-2026-962222026-10-18 https://bugrater.com/releases/msrc-cve-2026-962242026-10-14 https://bugrater.com/releases/msrc-cve-2026-962362026-10-18 https://bugrater.com/releases/msrc-cve-2026-962462026-10-18 https://bugrater.com/releases/msrc-cve-2026-962482026-10-18 https://bugrater.com/releases/msrc-cve-2026-963052026-10-18 https://bugrater.com/releases/msrc-cve-2026-963062026-10-18 https://bugrater.com/releases/msrc-cve-2026-963112026-10-18 https://bugrater.com/releases/msrc-cve-2026-963082026-10-18 https://bugrater.com/releases/msrc-cve-2026-963092026-10-18 https://bugrater.com/releases/msrc-cve-2026-963142026-10-18 https://bugrater.com/releases/msrc-cve-2026-963122026-10-18 https://bugrater.com/releases/msrc-cve-2026-963132026-10-18 https://bugrater.com/releases/msrc-cve-2026-963152026-10-18 https://bugrater.com/releases/msrc-cve-2026-963162026-10-18 https://bugrater.com/releases/msrc-cve-2026-963172026-10-18 https://bugrater.com/releases/msrc-cve-2026-963192026-10-18 https://bugrater.com/releases/msrc-cve-2026-963182026-10-18 https://bugrater.com/releases/msrc-cve-2026-968492026-10-18 https://bugrater.com/releases/msrc-cve-2026-968482026-10-18 https://bugrater.com/releases/msrc-cve-2026-968662026-10-18 https://bugrater.com/releases/msrc-cve-2026-968622026-10-18 https://bugrater.com/releases/msrc-cve-2026-968512026-10-18 https://bugrater.com/releases/msrc-cve-2026-968562026-10-18 https://bugrater.com/releases/msrc-cve-2026-968572026-10-18 https://bugrater.com/releases/msrc-cve-2026-968632026-10-18 https://bugrater.com/releases/msrc-cve-2026-962442026-10-18 https://bugrater.com/releases/msrc-cve-2026-968592026-10-18 https://bugrater.com/releases/msrc-cve-2026-963072026-10-18 https://bugrater.com/releases/msrc-cve-2026-962452026-10-18 https://bugrater.com/releases/msrc-cve-2026-968612026-10-18 https://bugrater.com/releases/msrc-cve-2026-968642026-10-18 https://bugrater.com/releases/msrc-cve-2026-968652026-10-18 https://bugrater.com/releases/msrc-cve-2026-968672026-10-18 https://bugrater.com/releases/msrc-cve-2026-969282026-10-18 https://bugrater.com/releases/msrc-cve-2026-969212026-10-18 https://bugrater.com/releases/msrc-cve-2026-968682026-10-18 https://bugrater.com/releases/msrc-cve-2026-969352026-10-18 https://bugrater.com/releases/msrc-cve-2026-969432026-10-18 https://bugrater.com/releases/msrc-cve-2026-959042026-10-18 https://bugrater.com/releases/msrc-cve-2026-694522026-10-18 https://bugrater.com/releases/msrc-cve-2026-962472026-10-18 https://bugrater.com/releases/msrc-cve-2026-961082026-10-18 https://bugrater.com/releases/msrc-cve-2026-969202026-10-18 https://bugrater.com/releases/msrc-cve-2026-963022026-10-18 https://bugrater.com/releases/msrc-cve-2026-968552026-10-18 https://bugrater.com/releases/msrc-cve-2026-970162026-10-18 https://bugrater.com/releases/msrc-cve-2026-970122026-10-18 https://bugrater.com/releases/msrc-cve-2026-969962026-10-18 https://bugrater.com/releases/msrc-cve-2026-970052026-10-18 https://bugrater.com/releases/msrc-cve-2026-969952026-10-18 https://bugrater.com/releases/msrc-cve-2026-977492026-10-18 https://bugrater.com/releases/msrc-cve-2026-970012026-10-18 https://bugrater.com/releases/msrc-cve-2026-969972026-10-18 https://bugrater.com/releases/msrc-cve-2026-970142026-10-18 https://bugrater.com/releases/msrc-cve-2026-977442026-10-18 https://bugrater.com/releases/msrc-cve-2026-970092026-10-18 https://bugrater.com/releases/msrc-cve-2026-977502026-10-18 https://bugrater.com/releases/msrc-cve-2026-977402026-10-18 https://bugrater.com/releases/msrc-cve-2026-977662026-10-18 https://bugrater.com/releases/msrc-cve-2026-970172026-10-18 https://bugrater.com/releases/msrc-cve-2026-977532026-10-18 https://bugrater.com/releases/msrc-cve-2026-970032026-10-18 https://bugrater.com/releases/msrc-cve-2026-977512026-10-18 https://bugrater.com/releases/msrc-cve-2026-977762026-10-18 https://bugrater.com/releases/msrc-cve-2026-977522026-10-18 https://bugrater.com/releases/msrc-cve-2026-977582026-10-18 https://bugrater.com/releases/msrc-cve-2026-977542026-10-18 https://bugrater.com/releases/msrc-cve-2026-977612026-10-14 https://bugrater.com/releases/msrc-cve-2026-977672026-10-18 https://bugrater.com/releases/msrc-cve-2026-977472026-10-18 https://bugrater.com/releases/msrc-cve-2026-977802026-10-18 https://bugrater.com/releases/msrc-cve-2026-977702026-10-18 https://bugrater.com/releases/msrc-cve-2026-977552026-10-18 https://bugrater.com/releases/msrc-cve-2026-977712026-10-18 https://bugrater.com/releases/msrc-cve-2026-977652026-10-18 https://bugrater.com/releases/msrc-cve-2026-977392026-10-18 https://bugrater.com/releases/msrc-cve-2026-977782026-10-18 https://bugrater.com/releases/msrc-cve-2026-977592026-10-18 https://bugrater.com/releases/msrc-cve-2026-977822026-10-18 https://bugrater.com/releases/msrc-cve-2026-977832026-10-18 https://bugrater.com/releases/msrc-cve-2026-960962026-10-18 https://bugrater.com/releases/msrc-cve-2026-977892026-10-18 https://bugrater.com/releases/msrc-cve-2026-977942026-10-18 https://bugrater.com/releases/msrc-cve-2026-628792026-10-18 https://bugrater.com/releases/msrc-cve-2026-626872026-10-18 https://bugrater.com/releases/msrc-cve-2026-699312026-10-18 https://bugrater.com/releases/msrc-cve-2026-698802026-10-18 https://bugrater.com/releases/msrc-cve-2026-698562026-10-18 https://bugrater.com/releases/msrc-cve-2026-977742026-10-18 https://bugrater.com/releases/msrc-cve-2026-699852026-10-18 https://bugrater.com/releases/msrc-cve-2026-699992026-10-18 https://bugrater.com/releases/msrc-cve-2026-700512026-10-18 https://bugrater.com/releases/msrc-cve-2026-700552026-10-18 https://bugrater.com/releases/msrc-cve-2026-700692026-10-18 https://bugrater.com/releases/msrc-cve-2026-700672026-10-18 https://bugrater.com/releases/msrc-cve-2026-701442026-10-18 https://bugrater.com/releases/msrc-cve-2026-701992026-10-18 https://bugrater.com/releases/msrc-cve-2026-702072026-10-18 https://bugrater.com/releases/msrc-cve-2026-701572026-10-18 https://bugrater.com/releases/msrc-cve-2026-702112026-10-18 https://bugrater.com/releases/msrc-cve-2026-702012026-10-18 https://bugrater.com/releases/msrc-cve-2026-702082026-10-18 https://bugrater.com/releases/msrc-cve-2026-702302026-10-18 https://bugrater.com/releases/msrc-cve-2026-702092026-10-18 https://bugrater.com/releases/msrc-cve-2026-702322026-10-18 https://bugrater.com/releases/msrc-cve-2026-702582026-10-18 https://bugrater.com/releases/msrc-cve-2026-702362026-10-18 https://bugrater.com/releases/msrc-cve-2026-702372026-10-18 https://bugrater.com/releases/msrc-cve-2026-702882026-10-18 https://bugrater.com/releases/msrc-cve-2026-702922026-10-18 https://bugrater.com/releases/msrc-cve-2026-702932026-10-18 https://bugrater.com/releases/msrc-cve-2026-702952026-10-18 https://bugrater.com/releases/msrc-cve-2026-697362026-10-18 https://bugrater.com/releases/msrc-cve-2026-697652026-10-18 https://bugrater.com/releases/msrc-cve-2026-779022026-10-18 https://bugrater.com/releases/msrc-cve-2026-676262026-10-18 https://bugrater.com/releases/msrc-cve-2026-676282026-10-18 https://bugrater.com/releases/msrc-cve-2026-697332026-10-18 https://bugrater.com/releases/msrc-cve-2026-697832026-10-18 https://bugrater.com/releases/msrc-cve-2026-694712026-10-18 https://bugrater.com/releases/msrc-cve-2026-695772026-10-18 https://bugrater.com/releases/msrc-cve-2026-784592026-10-18 https://bugrater.com/releases/msrc-cve-2026-696352026-10-18 https://bugrater.com/releases/msrc-cve-2026-774962026-10-18 https://bugrater.com/releases/msrc-cve-2026-819712026-10-18 https://bugrater.com/releases/msrc-cve-2026-835052026-10-18 https://bugrater.com/releases/msrc-cve-2026-694542026-10-18 https://bugrater.com/releases/msrc-cve-2026-835062026-10-18 https://bugrater.com/releases/msrc-cve-2026-695962026-10-18 https://bugrater.com/releases/msrc-cve-2026-700752026-10-18 https://bugrater.com/releases/msrc-cve-2026-835082026-10-18 https://bugrater.com/releases/msrc-cve-2026-656742026-10-18 https://bugrater.com/releases/msrc-cve-2026-835092026-10-18 https://bugrater.com/releases/msrc-cve-2026-835072026-10-18 https://bugrater.com/releases/msrc-cve-2026-730272026-10-18 https://bugrater.com/releases/msrc-cve-2026-702942026-10-18 https://bugrater.com/releases/msrc-cve-2026-693262026-10-18 https://bugrater.com/releases/msrc-cve-2026-835112026-10-18 https://bugrater.com/releases/msrc-cve-2026-835142026-10-18 https://bugrater.com/releases/msrc-cve-2026-835172026-10-18 https://bugrater.com/releases/msrc-cve-2026-835132026-10-18 https://bugrater.com/releases/msrc-cve-2026-835192026-10-18 https://bugrater.com/releases/msrc-cve-2026-835232026-10-18 https://bugrater.com/releases/msrc-cve-2026-835652026-10-18 https://bugrater.com/releases/msrc-cve-2026-835662026-10-18 https://bugrater.com/releases/msrc-cve-2026-835672026-10-18 https://bugrater.com/releases/msrc-cve-2026-835682026-10-18 https://bugrater.com/releases/msrc-cve-2026-835742026-10-18 https://bugrater.com/releases/msrc-cve-2026-835792026-10-18 https://bugrater.com/releases/msrc-cve-2026-835822026-10-18 https://bugrater.com/releases/msrc-cve-2026-835702026-10-18 https://bugrater.com/releases/msrc-cve-2026-835872026-10-18 https://bugrater.com/releases/msrc-cve-2026-835852026-10-18 https://bugrater.com/releases/msrc-cve-2026-835882026-10-18 https://bugrater.com/releases/msrc-cve-2026-836342026-10-18 https://bugrater.com/releases/msrc-cve-2026-835732026-10-18 https://bugrater.com/releases/msrc-cve-2026-836372026-10-18 https://bugrater.com/releases/msrc-cve-2026-836362026-10-18 https://bugrater.com/releases/msrc-cve-2026-835642026-10-18 https://bugrater.com/releases/msrc-cve-2026-836382026-10-18 https://bugrater.com/releases/msrc-cve-2026-836392026-10-18 https://bugrater.com/releases/msrc-cve-2026-836402026-10-18 https://bugrater.com/releases/msrc-cve-2026-836432026-10-18 https://bugrater.com/releases/msrc-cve-2026-836562026-10-18 https://bugrater.com/releases/msrc-cve-2026-836592026-10-18 https://bugrater.com/releases/msrc-cve-2026-836512026-10-18 https://bugrater.com/releases/msrc-cve-2026-836642026-10-18 https://bugrater.com/releases/msrc-cve-2026-836652026-10-18 https://bugrater.com/releases/msrc-cve-2026-836682026-10-18 https://bugrater.com/releases/msrc-cve-2026-836722026-10-18 https://bugrater.com/releases/msrc-cve-2026-836702026-10-18 https://bugrater.com/releases/msrc-cve-2026-836762026-10-14 https://bugrater.com/releases/msrc-cve-2026-836772026-10-18 https://bugrater.com/releases/msrc-cve-2026-836802026-10-18 https://bugrater.com/releases/msrc-cve-2026-836792026-10-18 https://bugrater.com/releases/msrc-cve-2026-836822026-10-18 https://bugrater.com/releases/msrc-cve-2026-836832026-10-18 https://bugrater.com/releases/msrc-cve-2026-836852026-10-18 https://bugrater.com/releases/msrc-cve-2026-836862026-10-18 https://bugrater.com/releases/msrc-cve-2026-836962026-10-18 https://bugrater.com/releases/msrc-cve-2026-836972026-10-18 https://bugrater.com/releases/msrc-cve-2026-836892026-10-18 https://bugrater.com/releases/msrc-cve-2026-836952026-10-18 https://bugrater.com/releases/msrc-cve-2026-836982026-10-18 https://bugrater.com/releases/msrc-cve-2026-837012026-10-18 https://bugrater.com/releases/msrc-cve-2026-837022026-10-18 https://bugrater.com/releases/msrc-cve-2026-837142026-10-18 https://bugrater.com/releases/msrc-cve-2026-837092026-10-18 https://bugrater.com/releases/msrc-cve-2026-837032026-10-18 https://bugrater.com/releases/msrc-cve-2026-837162026-10-18 https://bugrater.com/releases/msrc-cve-2026-837172026-10-18 https://bugrater.com/releases/msrc-cve-2026-837182026-10-18 https://bugrater.com/releases/msrc-cve-2026-837202026-10-18 https://bugrater.com/releases/msrc-cve-2026-837252026-10-18 https://bugrater.com/releases/msrc-cve-2026-837242026-10-18 https://bugrater.com/releases/msrc-cve-2026-837322026-10-18 https://bugrater.com/releases/msrc-cve-2026-837392026-10-18 https://bugrater.com/releases/msrc-cve-2026-837362026-10-14 https://bugrater.com/releases/msrc-cve-2026-837352026-10-18 https://bugrater.com/releases/msrc-cve-2026-837372026-10-18 https://bugrater.com/releases/msrc-cve-2026-837212026-10-18 https://bugrater.com/releases/msrc-cve-2026-837472026-10-18 https://bugrater.com/releases/msrc-cve-2026-837512026-10-18 https://bugrater.com/releases/msrc-cve-2026-837502026-10-18 https://bugrater.com/releases/msrc-cve-2026-837522026-10-18 https://bugrater.com/releases/msrc-cve-2026-837552026-10-18 https://bugrater.com/releases/msrc-cve-2026-837562026-10-18 https://bugrater.com/releases/msrc-cve-2026-837572026-10-18 https://bugrater.com/releases/msrc-cve-2026-837622026-10-18 https://bugrater.com/releases/msrc-cve-2026-837642026-10-18 https://bugrater.com/releases/msrc-cve-2026-837652026-10-18 https://bugrater.com/releases/msrc-cve-2026-837632026-10-18 https://bugrater.com/releases/msrc-cve-2026-837662026-10-18 https://bugrater.com/releases/msrc-cve-2026-837702026-10-18 https://bugrater.com/releases/msrc-cve-2026-837672026-10-18 https://bugrater.com/releases/msrc-cve-2026-837712026-10-18 https://bugrater.com/releases/msrc-cve-2026-837732026-10-18 https://bugrater.com/releases/msrc-cve-2026-837742026-10-18 https://bugrater.com/releases/msrc-cve-2026-837782026-10-18 https://bugrater.com/releases/msrc-cve-2026-837772026-10-18 https://bugrater.com/releases/msrc-cve-2026-837832026-10-18 https://bugrater.com/releases/msrc-cve-2026-837852026-10-18 https://bugrater.com/releases/msrc-cve-2026-837812026-10-18 https://bugrater.com/releases/msrc-cve-2026-837882026-10-18 https://bugrater.com/releases/msrc-cve-2026-837892026-10-18 https://bugrater.com/releases/msrc-cve-2026-837912026-10-18 https://bugrater.com/releases/msrc-cve-2026-837922026-10-18 https://bugrater.com/releases/msrc-cve-2026-837952026-10-18 https://bugrater.com/releases/msrc-cve-2026-837942026-10-18 https://bugrater.com/releases/msrc-cve-2026-837972026-10-18 https://bugrater.com/releases/msrc-cve-2026-838292026-10-18 https://bugrater.com/releases/msrc-cve-2026-838302026-10-18 https://bugrater.com/releases/msrc-cve-2026-838352026-10-18 https://bugrater.com/releases/msrc-cve-2026-838372026-10-18 https://bugrater.com/releases/msrc-cve-2026-838402026-10-18 https://bugrater.com/releases/msrc-cve-2026-837902026-10-18 https://bugrater.com/releases/msrc-cve-2026-837862026-10-18 https://bugrater.com/releases/msrc-cve-2026-838412026-10-18 https://bugrater.com/releases/msrc-cve-2026-838452026-10-18 https://bugrater.com/releases/msrc-cve-2026-838502026-10-18 https://bugrater.com/releases/msrc-cve-2026-838562026-10-18 https://bugrater.com/releases/msrc-cve-2026-838572026-10-18 https://bugrater.com/releases/msrc-cve-2026-838612026-10-18 https://bugrater.com/releases/msrc-cve-2026-838632026-10-18 https://bugrater.com/releases/msrc-cve-2026-838742026-10-18 https://bugrater.com/releases/msrc-cve-2026-838812026-10-18 https://bugrater.com/releases/msrc-cve-2026-838832026-10-18 https://bugrater.com/releases/msrc-cve-2026-838872026-10-18 https://bugrater.com/releases/msrc-cve-2026-838842026-10-18 https://bugrater.com/releases/msrc-cve-2026-838982026-10-18 https://bugrater.com/releases/msrc-cve-2026-838702026-10-18 https://bugrater.com/releases/msrc-cve-2026-838952026-10-18 https://bugrater.com/releases/msrc-cve-2026-838772026-10-18 https://bugrater.com/releases/msrc-cve-2026-838732026-10-18 https://bugrater.com/releases/msrc-cve-2026-838892026-10-18 https://bugrater.com/releases/msrc-cve-2026-838972026-10-18 https://bugrater.com/releases/msrc-cve-2026-839002026-10-18 https://bugrater.com/releases/msrc-cve-2026-839032026-10-18 https://bugrater.com/releases/msrc-cve-2026-858722026-10-18 https://bugrater.com/releases/msrc-cve-2026-859012026-10-18 https://bugrater.com/releases/msrc-cve-2026-859022026-10-18 https://bugrater.com/releases/msrc-cve-2026-859032026-10-18 https://bugrater.com/releases/msrc-cve-2026-859052026-10-18 https://bugrater.com/releases/msrc-cve-2026-839052026-10-18 https://bugrater.com/releases/msrc-cve-2026-839042026-10-18 https://bugrater.com/releases/msrc-cve-2026-859062026-10-18 https://bugrater.com/releases/msrc-cve-2026-839082026-10-18 https://bugrater.com/releases/msrc-cve-2026-859082026-10-18 https://bugrater.com/releases/msrc-cve-2026-839102026-10-18 https://bugrater.com/releases/msrc-cve-2026-859092026-10-18 https://bugrater.com/releases/msrc-cve-2026-859102026-10-18 https://bugrater.com/releases/msrc-cve-2026-859112026-10-18 https://bugrater.com/releases/msrc-cve-2026-839132026-10-18 https://bugrater.com/releases/msrc-cve-2026-859122026-10-18 https://bugrater.com/releases/msrc-cve-2026-839232026-10-18 https://bugrater.com/releases/msrc-cve-2026-839252026-10-18 https://bugrater.com/releases/msrc-cve-2026-839312026-10-18 https://bugrater.com/releases/msrc-cve-2026-839182026-10-18 https://bugrater.com/releases/msrc-cve-2026-839302026-10-18 https://bugrater.com/releases/msrc-cve-2026-839342026-10-18 https://bugrater.com/releases/msrc-cve-2026-839352026-10-18 https://bugrater.com/releases/msrc-cve-2026-628402026-10-18 https://bugrater.com/releases/msrc-cve-2026-858792026-10-18 https://bugrater.com/releases/msrc-cve-2026-697892026-10-18 https://bugrater.com/releases/msrc-cve-2026-697982026-10-18 https://bugrater.com/releases/msrc-cve-2026-858842026-10-14 https://bugrater.com/releases/msrc-cve-2026-838602026-10-18 https://bugrater.com/releases/msrc-cve-2026-838992026-10-18 https://bugrater.com/releases/msrc-cve-2026-839332026-10-18 https://bugrater.com/releases/msrc-cve-2026-839072026-10-18 https://bugrater.com/releases/msrc-cve-2026-839152026-10-18 https://bugrater.com/releases/msrc-cve-2026-838592026-10-18 https://bugrater.com/releases/msrc-cve-2026-839242026-10-18 https://bugrater.com/releases/msrc-cve-2026-859432026-10-18 https://bugrater.com/releases/msrc-cve-2026-859412026-10-18 https://bugrater.com/releases/msrc-cve-2026-876992026-10-18 https://bugrater.com/releases/msrc-cve-2026-877052026-10-18 https://bugrater.com/releases/msrc-cve-2026-880762026-10-18 https://bugrater.com/releases/msrc-cve-2026-876932026-10-18 https://bugrater.com/releases/msrc-cve-2026-876942026-10-18 https://bugrater.com/releases/msrc-cve-2026-877092026-10-18 https://bugrater.com/releases/msrc-cve-2026-876982026-10-18 https://bugrater.com/releases/msrc-cve-2026-877042026-10-18 https://bugrater.com/releases/msrc-cve-2026-877002026-10-18 https://bugrater.com/releases/msrc-cve-2026-877152026-10-18 https://bugrater.com/releases/msrc-cve-2026-880722026-10-18 https://bugrater.com/releases/msrc-cve-2026-877022026-10-18 https://bugrater.com/releases/msrc-cve-2026-880792026-10-18 https://bugrater.com/releases/msrc-cve-2026-881032026-10-18 https://bugrater.com/releases/msrc-cve-2026-881052026-10-18 https://bugrater.com/releases/msrc-cve-2026-881272026-10-18 https://bugrater.com/releases/msrc-cve-2026-881342026-10-18 https://bugrater.com/releases/msrc-cve-2026-881262026-10-18 https://bugrater.com/releases/msrc-cve-2026-881092026-10-18 https://bugrater.com/releases/msrc-cve-2026-881102026-10-18 https://bugrater.com/releases/msrc-cve-2026-881132026-10-18 https://bugrater.com/releases/msrc-cve-2026-881352026-10-18 https://bugrater.com/releases/msrc-cve-2026-881152026-10-18 https://bugrater.com/releases/msrc-cve-2026-881282026-10-18 https://bugrater.com/releases/msrc-cve-2026-881472026-10-18 https://bugrater.com/releases/msrc-cve-2026-881182026-10-18 https://bugrater.com/releases/msrc-cve-2026-881212026-10-18 https://bugrater.com/releases/msrc-cve-2026-881522026-10-18 https://bugrater.com/releases/msrc-cve-2026-881332026-10-18 https://bugrater.com/releases/msrc-cve-2026-881392026-10-18 https://bugrater.com/releases/msrc-cve-2026-881412026-10-18 https://bugrater.com/releases/msrc-cve-2026-881422026-10-18 https://bugrater.com/releases/msrc-cve-2026-881712026-10-14 https://bugrater.com/releases/msrc-cve-2026-881492026-10-18 https://bugrater.com/releases/msrc-cve-2026-881792026-10-18 https://bugrater.com/releases/msrc-cve-2026-881802026-10-18 https://bugrater.com/releases/msrc-cve-2026-881742026-10-18 https://bugrater.com/releases/msrc-cve-2026-881772026-10-18 https://bugrater.com/releases/msrc-cve-2026-881822026-10-18 https://bugrater.com/releases/msrc-cve-2026-881912026-10-18 https://bugrater.com/releases/msrc-cve-2026-881892026-10-18 https://bugrater.com/releases/msrc-cve-2026-881942026-10-18 https://bugrater.com/releases/msrc-cve-2026-881932026-10-18 https://bugrater.com/releases/msrc-cve-2026-881882026-10-18 https://bugrater.com/releases/msrc-cve-2026-698842026-10-18 https://bugrater.com/releases/msrc-cve-2026-699022026-10-18 https://bugrater.com/releases/msrc-cve-2026-699152026-10-18 https://bugrater.com/releases/msrc-cve-2026-881812026-10-18 https://bugrater.com/releases/msrc-cve-2026-700542026-10-18 https://bugrater.com/releases/msrc-cve-2026-700842026-10-18 https://bugrater.com/releases/msrc-cve-2026-701122026-10-18 https://bugrater.com/releases/msrc-cve-2026-701222026-10-18 https://bugrater.com/releases/msrc-cve-2026-701432026-10-18 https://bugrater.com/releases/msrc-cve-2026-701482026-10-18 https://bugrater.com/releases/msrc-cve-2026-701582026-10-18 https://bugrater.com/releases/msrc-cve-2026-701602026-10-18 https://bugrater.com/releases/msrc-cve-2026-859222026-10-18 https://bugrater.com/releases/msrc-cve-2026-859252026-10-18 https://bugrater.com/releases/msrc-cve-2026-701112026-10-18 https://bugrater.com/releases/msrc-cve-2026-702272026-10-18 https://bugrater.com/releases/msrc-cve-2026-701842026-10-18 https://bugrater.com/releases/msrc-cve-2026-702282026-10-18 https://bugrater.com/releases/msrc-cve-2026-702502026-10-18 https://bugrater.com/releases/msrc-cve-2026-702292026-10-18 https://bugrater.com/releases/msrc-cve-2026-702602026-10-18 https://bugrater.com/releases/msrc-cve-2026-702612026-10-18 https://bugrater.com/releases/msrc-cve-2026-702642026-10-18 https://bugrater.com/releases/msrc-cve-2026-702792026-10-18 https://bugrater.com/releases/msrc-cve-2026-702972026-10-14 https://bugrater.com/releases/msrc-cve-2026-705712026-10-18 https://bugrater.com/releases/msrc-cve-2026-779102026-10-18 https://bugrater.com/releases/msrc-cve-2026-837462026-10-18 https://bugrater.com/releases/msrc-cve-2026-876922026-10-18 https://bugrater.com/releases/msrc-cve-2026-858732026-10-18 https://bugrater.com/releases/msrc-cve-2026-876952026-10-18 https://bugrater.com/releases/msrc-cve-2026-876962026-10-18 https://bugrater.com/releases/msrc-cve-2026-880752026-10-18 https://bugrater.com/releases/msrc-cve-2026-880822026-10-18 https://bugrater.com/releases/msrc-cve-2026-880832026-10-18 https://bugrater.com/releases/msrc-cve-2026-880812026-10-18 https://bugrater.com/releases/msrc-cve-2026-858882026-10-18 https://bugrater.com/releases/msrc-cve-2026-880842026-10-18 https://bugrater.com/releases/msrc-cve-2026-880862026-10-18 https://bugrater.com/releases/msrc-cve-2026-880882026-10-18 https://bugrater.com/releases/msrc-cve-2026-859192026-10-18 https://bugrater.com/releases/msrc-cve-2026-880852026-10-18 https://bugrater.com/releases/msrc-cve-2026-880922026-10-18 https://bugrater.com/releases/msrc-cve-2026-880892026-10-18 https://bugrater.com/releases/msrc-cve-2026-880932026-10-18 https://bugrater.com/releases/msrc-cve-2026-881142026-10-18 https://bugrater.com/releases/msrc-cve-2026-881122026-10-18 https://bugrater.com/releases/msrc-cve-2026-881162026-10-18 https://bugrater.com/releases/msrc-cve-2026-881172026-10-18 https://bugrater.com/releases/msrc-cve-2026-881192026-10-18 https://bugrater.com/releases/msrc-cve-2026-881202026-10-18 https://bugrater.com/releases/msrc-cve-2026-881252026-10-18 https://bugrater.com/releases/msrc-cve-2026-881302026-10-18 https://bugrater.com/releases/msrc-cve-2026-881232026-10-18 https://bugrater.com/releases/msrc-cve-2026-881222026-10-18 https://bugrater.com/releases/msrc-cve-2026-698022026-10-18 https://bugrater.com/releases/msrc-cve-2026-699192026-10-18 https://bugrater.com/releases/msrc-cve-2026-701532026-10-18 https://bugrater.com/releases/msrc-cve-2026-702022026-10-14 https://bugrater.com/releases/msrc-cve-2026-881292026-10-18 https://bugrater.com/releases/msrc-cve-2026-702142026-10-18 https://bugrater.com/releases/msrc-cve-2026-702542026-10-18 https://bugrater.com/releases/msrc-cve-2026-702192026-10-18 https://bugrater.com/releases/msrc-cve-2026-702172026-10-18 https://bugrater.com/releases/msrc-cve-2026-702812026-10-18 https://bugrater.com/releases/msrc-cve-2026-702462026-10-18 https://bugrater.com/releases/msrc-cve-2026-702422026-10-18 https://bugrater.com/releases/msrc-cve-2026-853402026-10-18 https://bugrater.com/releases/msrc-cve-2026-859322026-10-18 https://bugrater.com/releases/msrc-cve-2026-881542026-10-18 https://bugrater.com/releases/msrc-cve-2026-881632026-10-18 https://bugrater.com/releases/msrc-cve-2026-702152026-10-18 https://bugrater.com/releases/msrc-cve-2026-881642026-10-18 https://bugrater.com/releases/msrc-cve-2026-881722026-10-18 https://bugrater.com/releases/msrc-cve-2026-881662026-10-18 https://bugrater.com/releases/msrc-cve-2026-882002026-10-18 https://bugrater.com/releases/msrc-cve-2026-881852026-10-14 https://bugrater.com/releases/msrc-cve-2026-881842026-10-18 https://bugrater.com/releases/msrc-cve-2026-881862026-10-18 https://bugrater.com/releases/msrc-cve-2026-881902026-10-18 https://bugrater.com/releases/msrc-cve-2026-881832026-10-18 https://bugrater.com/releases/msrc-cve-2026-881922026-10-18 https://bugrater.com/releases/msrc-cve-2026-881952026-10-18 https://bugrater.com/releases/msrc-cve-2026-881442026-10-18 https://bugrater.com/releases/msrc-cve-2026-882032026-10-18 https://bugrater.com/releases/msrc-cve-2026-945122026-10-18 https://bugrater.com/releases/msrc-cve-2026-882072026-10-18 https://bugrater.com/releases/msrc-cve-2026-945202026-10-18 https://bugrater.com/releases/msrc-cve-2026-703432026-10-18 https://bugrater.com/releases/msrc-cve-2026-960442026-10-18 https://bugrater.com/releases/msrc-cve-2026-961862026-10-18 https://bugrater.com/releases/msrc-cve-2026-962052026-10-18 https://bugrater.com/releases/msrc-cve-2026-962062026-10-18 https://bugrater.com/releases/msrc-cve-2026-700072026-10-14 https://bugrater.com/releases/msrc-cve-2026-961882026-10-18 https://bugrater.com/releases/msrc-cve-2026-835202026-10-18 https://bugrater.com/releases/msrc-cve-2026-882062026-10-18 https://bugrater.com/releases/msrc-cve-2026-840082026-10-18 https://bugrater.com/releases/msrc-cve-2026-853632026-10-18 https://bugrater.com/releases/msrc-cve-2026-700352026-10-18 https://bugrater.com/releases/msrc-cve-2026-962252026-10-14 https://bugrater.com/releases/msrc-cve-2026-962312026-10-18 https://bugrater.com/releases/msrc-cve-2026-962332026-10-18 https://bugrater.com/releases/msrc-cve-2026-962292026-10-18 https://bugrater.com/releases/msrc-cve-2026-962322026-10-18 https://bugrater.com/releases/msrc-cve-2026-962342026-10-14 https://bugrater.com/releases/msrc-cve-2026-962382026-10-18 https://bugrater.com/releases/msrc-cve-2026-962372026-10-18 https://bugrater.com/releases/msrc-cve-2026-962432026-10-18 https://bugrater.com/releases/msrc-cve-2026-962492026-10-18 https://bugrater.com/releases/msrc-cve-2026-963012026-10-18 https://bugrater.com/releases/msrc-cve-2026-962542026-10-18 https://bugrater.com/releases/msrc-cve-2026-963102026-10-18 https://bugrater.com/releases/msrc-cve-2026-962532026-10-18 https://bugrater.com/releases/msrc-cve-2026-962512026-10-14 https://bugrater.com/releases/msrc-cve-2026-962502026-10-18 https://bugrater.com/releases/msrc-cve-2026-963042026-10-18 https://bugrater.com/releases/msrc-cve-2026-963002026-10-18 https://bugrater.com/releases/msrc-cve-2026-963032026-10-18 https://bugrater.com/releases/msrc-cve-2026-963222026-10-18 https://bugrater.com/releases/msrc-cve-2026-962302026-10-18 https://bugrater.com/releases/msrc-cve-2026-963202026-10-18 https://bugrater.com/releases/msrc-cve-2026-968502026-10-18 https://bugrater.com/releases/msrc-cve-2026-963242026-10-18 https://bugrater.com/releases/msrc-cve-2026-963212026-10-18 https://bugrater.com/releases/msrc-cve-2026-963252026-10-18 https://bugrater.com/releases/msrc-cve-2026-968442026-10-18 https://bugrater.com/releases/msrc-cve-2026-968472026-10-18 https://bugrater.com/releases/msrc-cve-2026-968462026-10-18 https://bugrater.com/releases/msrc-cve-2026-968432026-10-18 https://bugrater.com/releases/msrc-cve-2026-968542026-10-18 https://bugrater.com/releases/msrc-cve-2026-968522026-10-18 https://bugrater.com/releases/msrc-cve-2026-968532026-10-18 https://bugrater.com/releases/msrc-cve-2026-968582026-10-18 https://bugrater.com/releases/msrc-cve-2026-969092026-10-18 https://bugrater.com/releases/msrc-cve-2026-963232026-10-18 https://bugrater.com/releases/msrc-cve-2026-969112026-10-18 https://bugrater.com/releases/msrc-cve-2026-969102026-10-18 https://bugrater.com/releases/msrc-cve-2026-969122026-10-18 https://bugrater.com/releases/msrc-cve-2026-969162026-10-18 https://bugrater.com/releases/msrc-cve-2026-962352026-10-18 https://bugrater.com/releases/msrc-cve-2026-969132026-10-18 https://bugrater.com/releases/msrc-cve-2026-969152026-10-18 https://bugrater.com/releases/msrc-cve-2026-969172026-10-18 https://bugrater.com/releases/msrc-cve-2026-969182026-10-18 https://bugrater.com/releases/msrc-cve-2026-969142026-10-18 https://bugrater.com/releases/msrc-cve-2026-969192026-10-18 https://bugrater.com/releases/msrc-cve-2026-969232026-10-18 https://bugrater.com/releases/msrc-cve-2026-969272026-10-18 https://bugrater.com/releases/msrc-cve-2026-969332026-10-18 https://bugrater.com/releases/msrc-cve-2026-969252026-10-18 https://bugrater.com/releases/msrc-cve-2026-969302026-10-18 https://bugrater.com/releases/msrc-cve-2026-969242026-10-18 https://bugrater.com/releases/jenkins-security-advisory-2018-06-042026-10-19 https://bugrater.com/releases/jenkins-security-advisory-2018-05-092026-10-19 https://bugrater.com/releases/drupal-core-moderately-critical-cross-site-scripting-sa-core-2026-0162026-10-19 https://bugrater.com/releases/drupal-core-moderately-critical-cross-site-scripting-sa-core-2026-0152026-10-19 https://bugrater.com/releases/drupal-core-critical-remote-code-execution-sa-core-2026-0142026-10-19 https://bugrater.com/releases/entity-list-critical-remote-code-execution-sa-contrib-2026-2182026-10-19 https://bugrater.com/releases/gin-admin-theme-moderately-critical-cross-site-scripting-sa-contrib-2026-2192026-10-19 https://bugrater.com/releases/msa-26-0045-upgrade-tinymce-and-prismjs-including-security-fixes-upstream2026-10-19 https://bugrater.com/releases/msa-26-0044-missing-access-checks-on-h5p-content-files2026-10-19 https://bugrater.com/releases/zsb-26020-zoom-workplace-clients-buffer-overflow2026-10-18 https://bugrater.com/releases/zsb-26019-zoom-workplace-for-android-improper-authorization-in-handler-for-custom-url-scheme2026-10-18 https://bugrater.com/releases/stable-channel-update-for-desktop-155-0-8059-84-852026-10-19 https://bugrater.com/releases/jenkins-security-advisory-2018-04-162026-10-19 https://bugrater.com/releases/jenkins-security-advisory-2018-04-112026-10-19 https://bugrater.com/releases/msrc-cve-2026-969322026-10-18 https://bugrater.com/releases/msrc-cve-2026-969342026-10-18 https://bugrater.com/releases/msrc-cve-2026-969312026-10-18 https://bugrater.com/releases/msrc-cve-2026-969262026-10-18 https://bugrater.com/releases/msrc-cve-2026-696752026-10-18 https://bugrater.com/releases/msrc-cve-2026-858662026-10-18 https://bugrater.com/releases/msrc-cve-2026-969292026-10-18 https://bugrater.com/releases/msrc-cve-2026-969372026-10-18 https://bugrater.com/releases/msrc-cve-2026-969382026-10-18 https://bugrater.com/releases/msrc-cve-2026-969392026-10-18 https://bugrater.com/releases/msrc-cve-2026-880942026-10-18 https://bugrater.com/releases/msrc-cve-2026-214132026-10-18 https://bugrater.com/releases/msrc-cve-2026-962022026-10-18 https://bugrater.com/releases/msrc-cve-2026-969442026-10-18 https://bugrater.com/releases/jenkins-security-advisory-2018-03-262026-10-19 https://bugrater.com/releases/jenkins-security-advisory-2018-02-262026-10-19 https://bugrater.com/releases/jenkins-security-advisory-2018-02-142026-10-19 https://bugrater.com/releases/cve-2026-108695-multivendorx-wordpress-plugin-through-5-0-19-contains-an-incorrect-authorization-vulnerability-that-allows-vendor-accounts-to-modify-marketplace-wide-settings-v2026-10-19 https://bugrater.com/releases/stable-channel-update-for-chromeos-chromeos-flex2026-10-19 https://bugrater.com/releases/cve-2026-108782-a-weakness-has-been-identified-in-erzhongxmu-jeewms-up-to-2026-09-27-w39-affected-by-this-issue-is-the-function-commonserviceimpl-getautolist-of-the-file-src-m2026-10-19 https://bugrater.com/releases/cve-2026-108783-a-security-vulnerability-has-been-detected-in-prvtpro-amnezia-web-panel-up-to-1-6-2-1-7-2-this-affects-an-unknown-part-of-the-file-app-py-of-the-component-back2026-10-19 https://bugrater.com/releases/cve-2026-108784-a-vulnerability-was-detected-in-macrozheng-mall-up-to-1-0-3-this-vulnerability-affects-the-function-alipayserviceimpl-pay-of-the-file-com-macro-mall-portal-ser2026-10-19 https://bugrater.com/releases/cve-2026-108785-a-flaw-has-been-found-in-macrozheng-mall-up-to-1-0-3-this-issue-affects-the-function-jwttokenutil-refreshheadtoken-of-the-file-admin-refreshtoken-of-the-compo2026-10-19 https://bugrater.com/releases/cve-2026-108786-a-vulnerability-has-been-found-in-houtini-ai-seo-crawler-mcp-up-to-2-1-5-impacted-is-the-function-run-seo-audit-of-the-file-src-core-crawlorchestrator-ts-of-th2026-10-19 https://bugrater.com/releases/cve-2026-108787-a-vulnerability-was-found-in-houtini-ai-voice-analyser-mcp-up-to-2-1-1-the-affected-element-is-the-function-fetch-of-the-file-src-utils-crawler-ts-of-the-compo2026-10-19 https://bugrater.com/releases/cve-2026-108788-a-vulnerability-was-determined-in-deepseek-ai-deepseek-harness-up-to-0-1-1-rc-2-the-impacted-element-is-the-function-spawn-of-the-component-sandbox-executing2026-10-19 https://bugrater.com/releases/cve-2026-108789-a-vulnerability-was-identified-in-deepseek-ai-deepseek-harness-up-to-0-1-1-rc-2-this-affects-the-function-agent-of-the-component-dsh-workflow-worker-thread-th2026-10-19 https://bugrater.com/releases/cve-2026-108790-a-security-flaw-has-been-discovered-in-westboy-cicadascms-up-to-2431154dac8d0735e04f1fd2a3c3556668fc8dab-this-impacts-the-function-templatecontroller-save-of-t2026-10-19 https://bugrater.com/releases/cve-2026-108791-a-weakness-has-been-identified-in-westboy-cicadascms-up-to-2431154dac8d0735e04f1fd2a3c3556668fc8dab-affected-is-the-function-templatecontroller-input-of-the-fi2026-10-19 https://bugrater.com/releases/cve-2026-108794-a-security-vulnerability-has-been-detected-in-zkteco-biotime-9-5-6-build-20260130-3206-affected-by-this-vulnerability-is-an-unknown-functionality-of-the-file2026-10-19 https://bugrater.com/releases/cve-2026-108795-a-vulnerability-was-detected-in-zkteco-biotime-9-5-6-build-20260130-3206-affected-by-this-issue-is-some-unknown-functionality-of-the-file-base-api-systemsetti2026-10-19 https://bugrater.com/releases/cve-2026-108796-a-flaw-has-been-found-in-zkteco-biotime-9-5-6-build-20260130-3206-this-affects-an-unknown-part-of-the-file-iclock-finger-data-of-the-component-biometric-data2026-10-19 https://bugrater.com/releases/cve-2026-108797-a-vulnerability-has-been-found-in-zkteco-biotime-9-5-6-build-20260130-3206-this-vulnerability-affects-unknown-code-of-the-file-personnel-api-employees-of-the2026-10-19 https://bugrater.com/releases/cve-2026-108798-a-vulnerability-was-found-in-zkteco-biotime-9-5-6-build-20260130-3206-this-issue-affects-some-unknown-processing-the-manipulation-results-in-use-of-hard-coded2026-10-19 https://bugrater.com/releases/cve-2026-108799-a-vulnerability-was-determined-in-jackq-xcms-up-to-3fab5342cc509945a7ce1b8ec39d19f701b89261-impacted-is-the-function-publiccontroller-sendfindpwdmail-of-the-f2026-10-19 https://bugrater.com/releases/cve-2026-108800-a-vulnerability-was-identified-in-yangzongzhuan-ruoyi-4-8-3-the-affected-element-is-an-unknown-function-such-manipulation-leads-to-cross-site-request-forgery2026-10-19 https://bugrater.com/releases/cve-2026-108801-a-security-flaw-has-been-discovered-in-prasathmani-tinyfilemanager-up-to-2-6-the-impacted-element-is-the-function-move-uploaded-file-of-the-file-tinyfilemanage2026-10-19 https://bugrater.com/releases/cve-2026-87690-the-metasploit-framework-post-module-post-apple-ios-gather-ios-image-gather-is-affected-by-a-relative-path-traversal-vulnerability-cwe-22-the-module-interpol2026-10-19 https://bugrater.com/releases/cve-2025-15703-the-hirezoot-wordpress-plugin-before-4-0-0-does-not-sanitise-and-escape-one-of-its-job-specification-settings-before-it-is-reflected-back-into-an-admin-area-se2026-10-19 https://bugrater.com/releases/cve-2026-107193-a-flaw-has-been-found-in-permission-filters-in-the-foreman-package-the-api-loads-a-filter-by-its-identifier-and-does-not-apply-the-search-limit-on-the2026-10-19 https://bugrater.com/releases/cve-2026-107203-an-incorrect-authorization-flaw-has-been-found-in-network-interface-handling-in-the-foreman-package-the-domain-and-subnet-interface-api-checks-only2026-10-19 https://bugrater.com/releases/cve-2026-107791-the-wp-comment-cleaner-wordpress-plugin-before-7-2-does-not-perform-a-capability-check-or-validate-a-nonce-on-one-of-its-bulk-comment-deletion-routines-allowi2026-10-19 https://bugrater.com/releases/cve-2026-108804-a-vulnerability-was-detected-in-trendnet-tew-751dr-tew-752dru-and-tew733gr-1-03b01-1-03b03-affected-is-the-function-fwrite-of-the-file-pigwidgeon-cgi-of-the-c2026-10-19 https://bugrater.com/releases/cve-2026-108805-a-flaw-has-been-found-in-krupalshah-employeerecruitmentsystem-up-to-922ff6d208278282e7c8e36d70d9ae356adec9fe-affected-by-this-vulnerability-is-the-function-mys2026-10-19 https://bugrater.com/releases/cve-2026-108806-a-vulnerability-has-been-found-in-krupalshah-employeerecruitmentsystem-up-to-922ff6d208278282e7c8e36d70d9ae356adec9fe-affected-by-this-issue-is-the-function-my2026-10-19 https://bugrater.com/releases/cve-2026-84166-the-hotel-booking-wordpress-plugin-through-3-8-does-not-implement-csrf-protection-on-its-administrative-booking-order-management-allowing-attackers-to-trick-a2026-10-19 https://bugrater.com/releases/cve-2026-84167-the-hotel-booking-wordpress-plugin-through-3-8-does-not-verify-that-a-booking-record-belongs-to-the-user-requesting-it-allowing-any-authenticated-user-such-as2026-10-19 https://bugrater.com/releases/cve-2026-108807-a-vulnerability-was-found-in-krupalshah-employeerecruitmentsystem-up-to-922ff6d208278282e7c8e36d70d9ae356adec9fe-this-affects-the-function-mysql-query-of-the-f2026-10-19 https://bugrater.com/releases/cve-2026-108808-a-vulnerability-was-determined-in-eleveo-call-recording-software-up-to-10-3-0-this-vulnerability-affects-unknown-code-of-the-file-auth-realms-default-protocol2026-10-19 https://bugrater.com/releases/cve-2026-108809-a-vulnerability-was-identified-in-eleveo-call-recording-software-up-to-10-3-0-this-issue-affects-some-unknown-processing-of-the-file-auth-realms-default-proto2026-10-19 https://bugrater.com/releases/cve-2026-109082-a-flaw-was-found-in-the-client-initiated-backchannel-authentication-ciba-implementation-within-the-keycloak-services-component-of-keycloak-this-component-handl2026-10-19 https://bugrater.com/releases/cve-2026-48211-an-authenticated-administrator-can-be-induced-to-delete-administrative-import-export-templates-through-a-cross-site-request-forgery-csrf-attack-the-otrs-admi2026-10-19 https://bugrater.com/releases/cve-2026-48212-an-otrs-administrator-can-enter-arbitrary-javascript-into-the-content-of-an-otrs-custom-page-which-is-stored-by-the-application-and-subsequently-executed-in-th2026-10-19 https://bugrater.com/releases/cve-2026-78355-a-path-traversal-vulnerability-in-the-otrs-sendsupportbundle-functionality-allows-an-authenticated-administrator-to-reference-file-paths-outside-the-intended-di2026-10-19 https://bugrater.com/releases/cve-2026-78356-the-otrs-agent-frontend-configuration-endpoint-can-be-accessed-without-authentication-this-allows-unauthenticated-remote-users-to-retrieve-internal-application2026-10-19 https://bugrater.com/releases/cve-2026-78357-previously-issued-authentication-tokens-are-not-immediately-invalidated-when-an-otrs-agent-or-customer-user-account-is-deactivated-or-its-password-is-changed-a2026-10-19 https://bugrater.com/releases/cve-2026-78358-several-administrative-actions-do-not-sufficiently-validate-whether-a-request-was-intentionally-initiated-by-the-authenticated-user-in-particular-the-dbupdate2026-10-19 https://bugrater.com/releases/cve-2026-78359-otrs-does-not-sufficiently-enforce-the-uniqueness-of-customer-user-identities-across-multiple-configured-customeruser-backends-when-multiple-backends-such-as2026-10-19 https://bugrater.com/releases/cve-2026-93581-user-controlled-values-are-not-sufficiently-neutralized-when-included-in-csv-exports-values-originating-from-user-input-including-data-submitted-by-authentica2026-10-19 https://bugrater.com/releases/cve-2026-93582-the-http-basic-authentication-modules-in-otrs-community-edition-6-and-prior-accept-the-authenticated-username-from-either-the-remote-user-or-http-remote-use2026-10-19 https://bugrater.com/releases/cve-2026-103356-missing-authorization-vulnerability-in-villatheme-tmds-tmds-dropshipping-for-temu-and-woo-allows-exploiting-incorrectly-configured-access-control-security-level2026-10-19 https://bugrater.com/releases/cve-2026-106605-improper-validation-of-specified-quantity-in-input-vulnerability-in-wp-desk-flexible-quantity-measurement-price-calculator-for-woocommerce-flexible-quantity-m2026-10-19 https://bugrater.com/releases/cve-2026-107427-authorization-bypass-through-user-controlled-key-vulnerability-in-nous-ouvert-utile-et-simple-event-post-event-post-allows-exploiting-incorrectly-configured-acc2026-10-19 https://bugrater.com/releases/cve-2026-107429-improper-validation-of-specified-quantity-in-input-vulnerability-in-videowhisper-com-paid-videochat-turnkey-site-ppv-live-webcams-allows-input-data-manipulation2026-10-19 https://bugrater.com/releases/cve-2026-107430-missing-authorization-vulnerability-in-videowhisper-com-videowhisper-site-manager-for-chatgpt-claude-codex-videowhisper-site-manager-allows-exploiting-incorre2026-10-19 https://bugrater.com/releases/cve-2026-107432-missing-authorization-vulnerability-in-nous-ouvert-utile-et-simple-event-post-event-post-allows-exploiting-incorrectly-configured-access-control-security-levels2026-10-19 https://bugrater.com/releases/cve-2026-108810-a-security-flaw-has-been-discovered-in-tsi-coop-tsi-dpdp-cms-0-5-0-0-5-1-0-5-2-impacted-is-an-unknown-function-of-the-component-json-schema-validation-the-man2026-10-19 https://bugrater.com/releases/cve-2026-108811-a-weakness-has-been-identified-in-wmcms-4-446-1257-the-affected-element-is-an-unknown-function-of-the-file-index-php-this-manipulation-of-the-argument-path-f2026-10-19 https://bugrater.com/releases/cve-2026-108812-a-security-vulnerability-has-been-detected-in-semcms-up-to-5-0-the-impacted-element-is-an-unknown-function-of-the-file-admin-semcms-user-php-class-deleted-cf2026-10-19 https://bugrater.com/releases/cve-2026-108813-a-vulnerability-was-detected-in-semcms-up-to-5-0-this-affects-an-unknown-function-of-the-file-semcms-download-php-performing-a-manipulation-results-in-sql-inj2026-10-19 https://bugrater.com/releases/cve-2026-108814-a-flaw-has-been-found-in-semcms-up-to-5-0-this-impacts-an-unknown-function-of-the-file-semcms-banner-php-executing-a-manipulation-can-lead-to-sql-injection-i2026-10-19 https://bugrater.com/releases/cve-2023-25996-insertion-of-sensitive-information-into-sent-data-vulnerability-in-pluggabl-llc-booster-elite-for-woocommerce-booster-elite-for-woocommerce-allows-retrieve-emb2026-10-19 https://bugrater.com/releases/cve-2026-107423-missing-authorization-vulnerability-in-wp-user-manager-wp-user-manager-wp-user-manager-allows-exploiting-incorrectly-configured-access-control-security-levels-t2026-10-19 https://bugrater.com/releases/cve-2026-107863-missing-authorization-vulnerability-in-codection-products-restricted-users-for-woocommerce-woo-products-restricted-users-allows-exploiting-incorrectly-configure2026-10-19 https://bugrater.com/releases/cve-2026-107864-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-vulnerability-in-igor-funa-ad-inserter-ad-inserter-allows-stored-xss-this-i2026-10-19 https://bugrater.com/releases/cve-2026-107865-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-vulnerability-in-crocoblock-jetmenu-jet-menu-allows-stored-xss-this-issue-a2026-10-19 https://bugrater.com/releases/cve-2026-107866-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-vulnerability-in-crocoblock-jetelements-for-elementor-jet-elements-allows-s2026-10-19 https://bugrater.com/releases/cve-2026-107869-missing-authorization-vulnerability-in-wp-desk-flexible-subscriptions-flexible-subscriptions-allows-exploiting-incorrectly-configured-access-control-security-le2026-10-19 https://bugrater.com/releases/cve-2026-108168-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-vulnerability-in-dlx-plugins-custom-query-blocks-post-type-archive-mapping2026-10-19 https://bugrater.com/releases/cve-2026-108815-a-vulnerability-has-been-found-in-idccms-1-70-affected-is-an-unknown-function-of-the-file-admin-member-deal-php-the-manipulation-leads-to-cross-site-scripting2026-10-19 https://bugrater.com/releases/cve-2026-108816-a-vulnerability-was-found-in-agno-agi-agno-up-to-3-0-6-affected-by-this-vulnerability-is-the-function-run-python-code-of-the-file-python-py-of-the-component-py2026-10-19 https://bugrater.com/releases/sveltejs-security-releases-april-20252026-10-19 https://bugrater.com/releases/sveltejs-security-releases-november-20242026-10-19 https://bugrater.com/releases/sveltejs-security-releases-january-20242026-10-19 https://bugrater.com/releases/sveltejs-security-releases-april-20232026-10-19 https://bugrater.com/releases/github-com-security-releases-october-20262026-10-19 https://bugrater.com/releases/wasmtime-wasi-security-releases-october-20262026-10-19 https://bugrater.com/releases/org-bytedeco-javacv-security-releases-october-20262026-10-19 https://bugrater.com/releases/aborruso-security-releases-october-20262026-10-19 https://bugrater.com/releases/swoosh-security-releases-october-20262026-10-19 https://bugrater.com/releases/serialize-javascript-security-releases-february-20252026-10-19 https://bugrater.com/releases/pipecat-ai-security-releases-october-20262026-10-19 https://bugrater.com/releases/jupyterlab-security-releases-october-20262026-10-19 https://bugrater.com/releases/builder-io-security-releases-october-20262026-10-19 https://bugrater.com/releases/appium-security-releases-october-20262026-10-19 https://bugrater.com/releases/dio-http2-adapter-security-releases-october-20262026-10-19 https://bugrater.com/releases/tinytag-security-releases-october-20262026-10-19 https://bugrater.com/releases/vitess-io-security-releases-october-20262026-10-19 https://bugrater.com/releases/unstructured-security-releases-october-20262026-10-19 https://bugrater.com/releases/mise-security-releases-october-20262026-10-19 https://bugrater.com/releases/leantime-security-releases-october-20262026-10-19 https://bugrater.com/releases/mcp-security-releases-october-20262026-10-19 https://bugrater.com/releases/yourls-security-releases-october-20262026-10-19 https://bugrater.com/releases/nginx-ui-security-releases-october-20262026-10-19 https://bugrater.com/releases/react-security-releases-october-20262026-10-19 https://bugrater.com/releases/adonisjs-security-releases-october-20262026-10-19 https://bugrater.com/releases/com-github-junrar-junrar-security-releases-october-20262026-10-19 https://bugrater.com/releases/social-auth-core-security-releases-october-20262026-10-19 https://bugrater.com/releases/netlicensing-mcp-security-releases-june-20262026-10-19 https://bugrater.com/releases/messagepack-security-releases-october-20262026-10-19 https://bugrater.com/releases/twisted-security-releases-october-20262026-10-19 https://bugrater.com/releases/mcp-contextforge-gateway-security-releases-august-20262026-10-19 https://bugrater.com/releases/microsoft-openapi-yamlreader-security-releases-october-20262026-10-19 https://bugrater.com/releases/bbot-security-releases-october-20262026-10-19 https://bugrater.com/releases/apprise-security-releases-october-20262026-10-19 https://bugrater.com/releases/flyto-core-security-releases-july-20262026-10-19 https://bugrater.com/releases/starcitizenwiki-security-releases-june-20262026-10-19 https://bugrater.com/releases/apple-security-releases-may-20262026-10-19 https://bugrater.com/releases/apple-security-releases-june-20262026-10-19 https://bugrater.com/releases/apple-security-releases-july-20262026-10-19 https://bugrater.com/releases/apple-security-releases-august-20262026-10-19 https://bugrater.com/releases/apple-security-releases-september-20262026-10-19 https://bugrater.com/releases/drupal-security-releases-february-20222026-10-19 https://bugrater.com/releases/drupal-security-releases-march-20222026-10-19 https://bugrater.com/releases/drupal-security-releases-april-20222026-10-19 https://bugrater.com/releases/drupal-security-releases-june-20222026-10-19 https://bugrater.com/releases/openbsd-security-releases-october-20262026-10-19 https://bugrater.com/releases/multivendorx-security-releases-october-20262026-10-19 https://bugrater.com/releases/villatheme-security-releases-october-20262026-10-19 https://bugrater.com/releases/wp-desk-security-releases-october-20262026-10-19 https://bugrater.com/releases/nous-ouvert-utile-et-simple-security-releases-october-20262026-10-19 https://bugrater.com/releases/videowhisper-com-security-releases-october-20262026-10-19 https://bugrater.com/releases/pluggabl-llc-security-releases-october-20262026-10-19 https://bugrater.com/releases/wp-user-manager-security-releases-october-20262026-10-19 https://bugrater.com/releases/codection-security-releases-october-20262026-10-19 https://bugrater.com/releases/igor-funa-security-releases-october-20262026-10-19 https://bugrater.com/releases/crocoblock-security-releases-october-20262026-10-19 https://bugrater.com/releases/dlx-plugins-security-releases-october-20262026-10-19 https://bugrater.com/releases/cve-2026-107437-gv-e-map-server-v18-2-0a-contains-a-plaintext-database-password-embedded-within-an-application-component-the-credential-can-be-recovered-through-static-analysi2026-10-19 https://bugrater.com/releases/cve-2026-108817-a-vulnerability-was-determined-in-agno-agi-agno-up-to-3-0-9-affected-by-this-issue-is-the-function-agno-codingtools-run-shell-in-the-library-libs-agno-agno-too2026-10-19 https://bugrater.com/releases/cve-2026-108818-a-vulnerability-was-identified-in-agno-agi-agno-up-to-2-7-3-3-0-6-this-affects-the-function-get-authentication-dependency-of-the-file-auth-py-such-manipulatio2026-10-19 https://bugrater.com/releases/cve-2026-1907-a-sql-injection-sqli-affects-the-kong-gateway-enterprise-and-open-source-clustering-communication-logic-when-operating-in-hybrid-mode-the-issue-can-be-trig2026-10-19 https://bugrater.com/releases/cve-2026-108819-a-security-flaw-has-been-discovered-in-agno-agi-agno-up-to-3-0-6-3-1-1-this-vulnerability-affects-the-function-exec-of-the-component-agent-orchestration-layer2026-10-19 https://bugrater.com/releases/cve-2026-108820-a-weakness-has-been-identified-in-agno-agi-agno-up-to-3-0-6-3-1-1-this-issue-affects-the-function-member-agent-run-in-the-library-libs-agno-agno-team-default2026-10-19 https://bugrater.com/releases/cve-2026-108821-a-security-vulnerability-has-been-detected-in-tencent-weknora-up-to-0-8-1-impacted-is-the-function-validatesubquery-of-the-file-internal-utils-inject-go-of-the2026-10-19 https://bugrater.com/releases/cve-2026-108822-a-vulnerability-was-detected-in-kamailio-up-to-6-0-7-6-1-3-the-affected-element-is-the-function-isup-get-calling-party-of-the-file-src-modules-sipt-ss7-parser2026-10-19 https://bugrater.com/releases/cve-2026-108824-a-flaw-has-been-found-in-dataease-up-to-3-0-0-the-impacted-element-is-the-function-utils-buildcalcfield-of-the-file-io-dataease-engine-utils-utils-java-this-m2026-10-19 https://bugrater.com/releases/cve-2026-108825-a-vulnerability-has-been-found-in-yangzongzhuan-ruoyi-up-to-4-8-3-this-affects-the-function-checkroleallowed-of-the-file-system-role-authdatascope-such-manip2026-10-19 https://bugrater.com/releases/cve-2026-108826-a-vulnerability-was-found-in-zen-cart-up-to-2-2-2-this-impacts-the-function-zen-db-perform-in-the-library-includes-modules-payment-paypaldp-php-of-the-componen2026-10-19 https://bugrater.com/releases/cve-2026-105283-generation-of-error-message-containing-sensitive-information-vulnerability-in-ash-project-ash-typescript-allows-an-unauthenticated-attacker-to-read-internal-eli2026-10-19 https://bugrater.com/releases/cve-2026-108827-a-vulnerability-was-determined-in-zen-cart-up-to-2-2-2-affected-is-the-function-zen-call-function-of-the-file-admin-includes-functions-general-php-of-the-compo2026-10-19 https://bugrater.com/releases/cve-2026-108828-a-vulnerability-was-identified-in-zen-cart-2-2-2-affected-by-this-vulnerability-is-the-function-eval-of-the-file-admin-configuration-php-of-the-component-admin2026-10-19 https://bugrater.com/releases/cve-2026-108829-a-security-flaw-has-been-discovered-in-zen-cart-up-to-2-2-2-affected-by-this-issue-is-some-unknown-functionality-of-the-file-admin-modules-php-of-the-component2026-10-19 https://bugrater.com/releases/cve-2026-108830-a-weakness-has-been-identified-in-meetecho-janus-gateway-up-to-1-4-2-this-affects-an-unknown-part-of-the-file-src-plugins-janus-videoroom-c-of-the-component-vi2026-10-19 https://bugrater.com/releases/cve-2026-85499-improper-authorization-vulnerability-in-apache-skywalking-banyandb-the-canopy-includes-incomplete-proof-of-concept-role-and-monitoring-proxy-functionality2026-10-19 https://bugrater.com/releases/cve-2026-105081-imagemagick-before-6-9-13-58-and-7-x-before-7-1-2-33-does-not-properly-account-for-symbolic-links-in-the-isrightsauthorizedbyname-security-policy-check-allowin2026-10-19 https://bugrater.com/releases/cve-2026-108831-a-security-vulnerability-has-been-detected-in-meetecho-janus-gateway-up-to-1-4-2-this-vulnerability-affects-unknown-code-of-the-file-html-demos-admin-js-of-the2026-10-19 https://bugrater.com/releases/cve-2026-108834-a-vulnerability-was-detected-in-cairo-dock-glx-dock-up-to-3-4-0-this-issue-affects-some-unknown-processing-of-the-file-ww-page-php-of-the-component-query-param2026-10-19 https://bugrater.com/releases/cve-2026-108835-a-flaw-has-been-found-in-yungengxin-yun-jia-security-guard-up-to-2-7-1-9-impacted-is-the-function-sub-14000885c-in-the-library-kgameprotect-sys-executing-a-ma2026-10-19 https://bugrater.com/releases/cve-2026-108836-a-vulnerability-has-been-found-in-ollama-up-to-0-34-1-the-affected-element-is-the-function-isvalid-of-the-file-types-model-name-go-of-the-component-pull-api-t2026-10-19 https://bugrater.com/releases/cve-2026-108889-a-flaw-has-been-found-in-yungengxin-cloud-billing-2024-11-28-11-affected-by-this-vulnerability-is-the-function-sub-14000443c-in-the-library-lwbilling64-sys-of2026-10-19 https://bugrater.com/releases/cve-2026-108950-open-source-social-network-ossn-through-10-1-contains-a-missing-authorization-vulnerability-in-ossn-album-page-handler-that-allows-unauthenticated-attackers-t2026-10-19 https://bugrater.com/releases/cve-2026-108951-lavalite-cms-through-10-1-2-contains-an-authorization-bypass-vulnerability-that-allows-authenticated-low-privileged-users-to-modify-other-users-accounts-by-abu2026-10-19 https://bugrater.com/releases/cve-2026-108952-rt-thread-through-5-3-0-contains-a-memory-corruption-vulnerability-in-the-legacy-usb-cdc-virtual-com-port-driver-that-aliases-rx-ringbuffer-as-a-serial-v2-rt-se2026-10-19 https://bugrater.com/releases/cve-2026-108953-mac-shell-mcp-before-2-0-0-contains-an-os-command-injection-vulnerability-that-allows-mcp-clients-to-bypass-the-command-whitelist-by-injecting-shell-metacharact2026-10-19 https://bugrater.com/releases/cve-2026-109164-tduck-survey-form-through-6-0-contains-an-insecure-direct-object-reference-vulnerability-that-allows-authenticated-users-to-delete-other-users-form-submissions2026-10-19 https://bugrater.com/releases/cve-2026-109165-tduck-survey-form-through-6-0-contains-a-broken-access-control-vulnerability-that-allows-authenticated-users-to-add-fields-to-other-users-forms-via-post-user2026-10-19 https://bugrater.com/releases/cve-2026-109166-lamp-cloud-through-5-10-1-contains-an-insecure-direct-object-reference-vulnerability-that-allows-authenticated-users-to-obtain-storage-urls-for-other-users-fil2026-10-19 https://bugrater.com/releases/cve-2026-109167-tduck-survey-form-through-6-0-contains-an-insecure-direct-object-reference-vulnerability-in-the-saveformtheme-handler-that-allows-authenticated-users-to-overwri2026-10-19 https://bugrater.com/releases/cve-2026-109168-lamp-cloud-through-5-10-1-contains-an-insecure-direct-object-reference-vulnerability-that-allows-authenticated-users-to-list-other-business-objects-file-attach2026-10-19 https://bugrater.com/releases/cve-2026-109171-yshop-crm-through-2-1-3-contains-a-missing-authorization-vulnerability-that-allows-any-authenticated-back-office-user-to-approve-or-reject-contracts-by-calling2026-10-19 https://bugrater.com/releases/cve-2026-109172-yshop-crm-through-2-1-3-contains-a-missing-authorization-vulnerability-that-allows-any-authenticated-back-office-user-to-approve-or-reject-receivables-records-b2026-10-19 https://bugrater.com/releases/cve-2026-109173-yshop-crm-through-2-1-3-contains-a-missing-authorization-vulnerability-that-allows-any-authenticated-back-office-user-to-approve-or-reject-invoices-via-post-ad2026-10-19 https://bugrater.com/releases/cve-2026-109174-mogublog-through-6-2-contains-an-information-disclosure-vulnerability-that-allows-low-privileged-front-end-users-to-read-system-credentials-via-the-getsystemcon2026-10-19 https://bugrater.com/releases/cve-2026-109175-mogublog-through-6-2-contains-an-insecure-direct-object-reference-vulnerability-that-allows-authenticated-administrators-to-list-other-administrators-network-d2026-10-19 https://bugrater.com/releases/cve-2026-109176-mogublog-through-6-2-contains-an-insecure-direct-object-reference-vulnerability-that-allows-authenticated-administrators-to-delete-other-administrators-files-v2026-10-19 https://bugrater.com/releases/cve-2026-109177-mogublog-through-6-2-contains-a-broken-access-control-vulnerability-that-allows-authenticated-administrators-to-move-or-rename-other-administrators-network-dis2026-10-19 https://bugrater.com/releases/cve-2026-109178-jsherp-through-3-6-contains-a-missing-authorization-vulnerability-in-logcontroller-that-allows-any-authenticated-user-to-forge-modify-or-delete-audit-log-entr2026-10-19 https://bugrater.com/releases/cve-2026-109179-jsherp-through-3-6-contains-a-missing-authorization-vulnerability-in-logcontroller-that-allows-any-authenticated-user-to-read-the-tenant-s-operation-audit-log2026-10-19 https://bugrater.com/releases/cve-2026-109180-jsherp-through-3-6-contains-an-authorization-bypass-vulnerability-that-allows-authenticated-users-to-read-data-from-unassigned-warehouses-by-supplying-depotid-o2026-10-19 https://bugrater.com/releases/cve-2026-109181-jsherp-through-3-6-contains-an-authorization-bypass-vulnerability-that-allows-authenticated-users-restricted-to-personal-or-department-data-to-list-other-users2026-10-19 https://bugrater.com/releases/cve-2026-109182-jsherp-through-3-6-contains-an-incorrect-authorization-vulnerability-in-get-supplier-exportexcel-that-allows-authenticated-users-to-bypass-role-data-scope-rest2026-10-19 https://bugrater.com/releases/cve-2026-109183-jsherp-through-3-6-contains-an-authorization-bypass-vulnerability-that-allows-authenticated-users-to-create-pre-approved-bills-by-setting-status-in-post-depoth2026-10-19 https://bugrater.com/releases/cve-2026-109184-jsherp-through-3-6-contains-an-improper-authorization-vulnerability-that-allows-low-privilege-authenticated-users-to-read-any-settlement-account-ledger-by-suppl2026-10-19 https://bugrater.com/releases/cve-2026-109185-jsherp-through-3-6-contains-a-missing-authorization-vulnerability-in-the-usercontroller-updateuser-handler-that-allows-authenticated-users-to-assign-arbitrary-r2026-10-19 https://bugrater.com/releases/cve-2026-109186-jsherp-through-3-6-contains-a-mass-assignment-vulnerability-in-the-usercontroller-update-handler-that-allows-authenticated-users-to-overwrite-protected-fields-i2026-10-19 https://bugrater.com/releases/cve-2026-109187-jsherp-through-3-6-contains-an-information-disclosure-vulnerability-that-allows-any-authenticated-user-to-read-platform-wide-configuration-secrets-via-the-getin2026-10-19 https://bugrater.com/releases/cve-2026-109188-jsherp-through-3-6-contains-a-missing-authorization-vulnerability-that-allows-low-privilege-authenticated-users-to-create-tenant-wide-master-data-via-add-and-im2026-10-19 https://bugrater.com/releases/cve-2026-52903-a-deserialization-of-untrusted-data-vulnerability-was-found-in-manageiq-the-yamlloadaliases-module-overrides-yaml-safe-load-to-silently-fall-back-to-yaml-unsaf2026-10-19 https://bugrater.com/releases/cve-2026-103502-improper-certificate-validation-vulnerability-in-hexpm-hex-core-allows-an-attacker-who-can-intercept-https-connections-to-impersonate-hex-pm-repo-hex-pm-or-any2026-10-19 https://bugrater.com/releases/cve-2026-108890-a-vulnerability-has-been-found-in-blackbelttechnology-pi-agent-dashboard-up-to-0-8-0-affected-by-this-issue-is-the-function-terminalmanager-spawn-of-the-file-p2026-10-19 https://bugrater.com/releases/cve-2026-108892-a-vulnerability-was-determined-in-linksys-e1700-1-0-0-4-003-this-vulnerability-affects-the-function-ssid1macfilter-of-the-file-goform-ssid1macfilter-of-the-co2026-10-19 https://bugrater.com/releases/cve-2026-108893-a-vulnerability-was-identified-in-linksys-e1700-up-to-1-0-0-4-003-this-issue-affects-the-function-setvlan-of-the-file-goform-setvlan-such-manipulation-of-the2026-10-19 https://bugrater.com/releases/cve-2026-108894-a-security-flaw-has-been-discovered-in-linksys-e1700-1-0-0-4-003-impacted-is-the-function-addstaticroute-of-the-file-goform-addstaticroute-of-the-component-st2026-10-19 https://bugrater.com/releases/cve-2026-109169-logicaldoc-community-edition-through-9-3-contains-a-sql-injection-vulnerability-that-allows-authenticated-users-to-execute-crafted-sql-via-the-firstletter-param2026-10-19 https://bugrater.com/releases/cve-2026-109170-logicaldoc-community-edition-through-9-3-contains-an-hql-injection-vulnerability-in-documentsdataservlet-that-allows-authenticated-users-to-manipulate-queries-v2026-10-19 https://bugrater.com/releases/cve-2026-109199-logicaldoc-community-edition-through-9-3-contains-a-code-injection-vulnerability-that-allows-authenticated-users-to-execute-os-commands-by-submitting-velocity-t2026-10-19 https://bugrater.com/releases/cve-2026-109200-logicaldoc-community-edition-through-9-3-contains-a-server-side-request-forgery-vulnerability-in-the-default-enabled-xmlconverter-that-fetches-xml-stylesheet-hr2026-10-19 https://bugrater.com/releases/cve-2026-109201-logicaldoc-community-edition-through-9-3-contains-a-missing-authorization-vulnerability-in-soapdocumentservice-operations-that-allows-authenticated-users-to-acc2026-10-19 https://bugrater.com/releases/cve-2026-109202-logicaldoc-community-edition-through-9-3-contains-a-missing-authorization-vulnerability-in-the-zip-export-servlet-that-allows-authenticated-users-to-export-rest2026-10-19 https://bugrater.com/releases/cve-2026-109203-logicaldoc-community-edition-through-9-3-contains-a-missing-authorization-vulnerability-in-the-convertpdf-servlet-that-allows-authenticated-users-to-download-re2026-10-19 https://bugrater.com/releases/cve-2026-109204-logicaldoc-community-edition-through-9-3-contains-an-improper-authorization-vulnerability-in-the-pswrecovery-servlet-that-fails-to-bind-password-recovery-ticket2026-10-19 https://bugrater.com/releases/cve-2026-109205-logicaldoc-community-edition-through-9-3-contains-an-unauthenticated-file-upload-vulnerability-in-the-uploadservlet-that-allows-remote-attackers-to-write-files2026-10-19 https://bugrater.com/releases/cve-2026-109206-logicaldoc-community-edition-through-9-3-contains-a-username-enumeration-vulnerability-that-allows-unauthenticated-attackers-to-identify-valid-accounts-because2026-10-19 https://bugrater.com/releases/cve-2026-109225-sglang-through-0-5-21-contains-an-unbounded-memory-allocation-vulnerability-that-allows-unauthenticated-remote-attackers-to-exhaust-memory-by-uploading-oversize2026-10-19 https://bugrater.com/releases/cve-2026-109226-sglang-through-0-5-21-contains-a-decompression-amplification-vulnerability-in-load-audio-that-allows-remote-attackers-to-exhaust-memory-by-submitting-highly-com2026-10-19 https://bugrater.com/releases/cve-2026-109227-sglang-through-0-5-21-contains-an-unbounded-memory-allocation-vulnerability-in-preprocess-video-in-qwen-vl-py-that-decodes-frames-at-full-source-resolution-befo2026-10-19 https://bugrater.com/releases/cve-2026-109228-sglang-through-0-5-21-contains-a-resource-budget-bypass-vulnerability-that-allows-remote-attackers-to-override-glm-v-video-processing-limits-by-supplying-fps-m2026-10-19 https://bugrater.com/releases/cve-2026-109229-sglang-through-0-5-21-contains-a-denial-of-service-vulnerability-that-disables-pillow-decompression-bomb-protection-process-wide-by-setting-image-max-image-pixe2026-10-19 https://bugrater.com/releases/cve-2026-12613-deserialization-of-untrusted-data-vulnerability-in-ministry-of-justice-general-directorate-of-information-technology-uyap-document-editor-on-windows-and-linux-a2026-10-19 https://bugrater.com/releases/cve-2026-18390-improper-neutralization-of-special-elements-used-in-an-os-command-os-command-injection-vulnerability-in-ministry-of-justice-general-directorate-of-informati2026-10-19 https://bugrater.com/releases/cve-2026-108094-a-use-after-free-flaw-was-found-in-mutter-in-the-wayland-color-management-icc-image-description-path-a-local-attacker-who-can-run-a-malicious-wayland-client-ca2026-10-19 https://bugrater.com/releases/cve-2026-108895-a-weakness-has-been-identified-in-linksys-e1700-1-0-0-4-003-the-affected-element-is-the-function-setdmz-of-the-file-goform-setdmz-executing-a-manipulation-of2026-10-19 https://bugrater.com/releases/cve-2026-108896-a-vulnerability-was-found-in-linksys-e1700-1-0-0-4-003-this-affects-the-function-setlinksysipv6-of-the-file-goform-setlinksysipv6-the-manipulation-of-the-arg2026-10-19 https://bugrater.com/releases/cve-2026-108897-a-security-vulnerability-has-been-detected-in-smart-media4u-technology-shareit-app-6-27-38-ww-on-android-the-impacted-element-is-the-function-syncinvoke-of-the2026-10-19 https://bugrater.com/releases/cve-2026-108898-a-vulnerability-was-detected-in-netis-wf2409e-3-3-42541-this-affects-an-unknown-function-of-the-component-wireless-settings-the-manipulation-of-the-argument-s2026-10-19 https://bugrater.com/releases/cve-2026-92877-the-jaxb-factory-methods-historically-relied-solely-on-feature-secure-processing-to-prevent-xml-external-entity-xxe-resolution-on-jaxp-implementations-wher2026-10-19 https://bugrater.com/releases/cve-2026-103060-improper-limitation-of-a-pathname-to-a-restricted-directory-path-traversal-vulnerability-in-erlang-rebar3-allows-a-malicious-package-publisher-to-delete-a-d2026-10-19 https://bugrater.com/releases/cve-2026-103503-improper-certificate-validation-vulnerability-in-hexpm-hex-allows-an-attacker-who-can-intercept-https-connections-and-holds-a-certificate-for-a-hex-host-issued2026-10-19 https://bugrater.com/releases/cve-2026-105280-improper-validation-of-integrity-check-value-vulnerability-in-hexpm-hex-allows-a-package-mirror-to-substitute-the-tarball-that-mix-hex-package-fetch-package-ver2026-10-19 https://bugrater.com/releases/cve-2026-105668-protection-mechanism-failure-vulnerability-in-hexpm-hex-allows-the-owner-of-a-package-or-an-attacker-who-has-taken-over-the-owner-s-account-to-get-a-newly-pub2026-10-19 https://bugrater.com/releases/cve-2026-108899-a-flaw-has-been-found-in-tobychui-zoraxy-up-to-3-3-4-this-impacts-the-function-handlebasicauth-of-the-file-mod-dynamicproxy-authproviders-go-of-the-component-p2026-10-19 https://bugrater.com/releases/cve-2026-108900-a-vulnerability-has-been-found-in-exponent-cms-up-to-3-0-2patch2-affected-is-the-function-userlogin-of-the-file-xmlrpc-php-of-the-component-xml-rpc-such-manip2026-10-19 https://bugrater.com/releases/cve-2026-108901-a-vulnerability-was-found-in-shenzhen-hcc-technology-mpos-m6-plus-1-31-n-affected-by-this-vulnerability-is-an-unknown-functionality-of-the-component-display-qr2026-10-19 https://bugrater.com/releases/cve-2026-108906-a-vulnerability-has-been-found-in-netcore-nr268-1-7-121109-this-affects-the-function-filter-arp-put-file-cgi-of-the-file-router-filter-arp-put-file-cgi-the-m2026-10-19 https://bugrater.com/releases/cve-2026-109194-a-flaw-was-found-in-red-hat-quay-the-build-trigger-management-application-programming-interface-api-fails-to-verify-whether-a-requested-trigger-belongs-to-th2026-10-19 https://bugrater.com/releases/cve-2026-109195-a-flaw-was-found-in-quay-an-authenticated-attacker-can-access-repository-auto-prune-configurations-from-other-namespaces-leading-to-unauthorized-information-d2026-10-19 https://bugrater.com/releases/cve-2026-109391-square-squash-through-commit-e73f280-contains-an-insecure-deserialization-vulnerability-that-allows-unauthenticated-attackers-to-store-crafted-yaml-via-the-post2026-10-19 https://bugrater.com/releases/cve-2026-109392-pimcore-through-2026-3-1-contains-a-stored-cross-site-scripting-vulnerability-that-allows-authenticated-backend-users-to-inject-scripts-by-storing-unescaped-url2026-10-19 https://bugrater.com/releases/cve-2026-109393-qloapps-through-1-7-0-contains-an-insecure-direct-object-reference-vulnerability-in-back-office-ajax-handlers-of-adminorderscontroller-adminbookingdocumentcont2026-10-19 https://bugrater.com/releases/cve-2026-109394-thirty-bees-through-1-7-0-contains-an-authentication-bypass-vulnerability-in-passwordcontroller-resolvecustomer-that-allows-unauthenticated-attackers-to-rese2026-10-19 https://bugrater.com/releases/cve-2026-109396-thelia-before-3-1-2-and-3-2-x-before-3-2-1-contains-a-csv-formula-injection-vulnerability-that-allows-unauthenticated-visitors-to-inject-spreadsheet-formulas-by2026-10-19 https://bugrater.com/releases/cve-2026-109397-thelia-before-3-1-2-and-3-2-x-before-3-2-1-contains-an-unrestricted-file-upload-vulnerability-that-allows-authenticated-back-office-users-to-upload-php-files-by2026-10-19 https://bugrater.com/releases/cve-2026-109398-gumlet-php-image-resize-before-3-0-1-contains-a-denial-of-service-vulnerability-because-the-imageresize-constructor-in-lib-imageresize-php-passes-images-to-gd-i2026-10-19 https://bugrater.com/releases/cve-2026-109399-swupdate-through-2026-05-1-contains-an-improper-certificate-validation-vulnerability-in-crypto-swupdate-cms-verify-openssl-c-that-trusts-untrusted-x-509-certifi2026-10-19 https://bugrater.com/releases/cve-2026-81856-improper-neutralization-of-escape-meta-or-control-sequences-vulnerability-in-hexpm-hex-allows-a-malicious-package-publisher-or-a-hostile-repository-server-to2026-10-19 https://bugrater.com/releases/cve-2026-85947-progress-marklogic-server-12-x-releases-before-12-1-0-and-11-x-releases-before-11-3-7-contain-an-authorization-flaw-in-certain-forest-management-operations-a-r2026-10-19 https://bugrater.com/releases/cve-2026-85948-progress-marklogic-server-12-x-releases-before-12-1-0-and-11-x-releases-before-11-3-7-contain-an-xquery-injection-flaw-in-a-deprecated-management-api-package-pa2026-10-19 https://bugrater.com/releases/cve-2026-85950-progress-marklogic-server-12-x-releases-before-12-1-0-and-11-x-releases-before-11-3-7-contain-an-authorization-flaw-that-could-allow-a-remote-attacker-with-admi2026-10-19 https://bugrater.com/releases/cve-2026-85953-progress-marklogic-server-12-x-releases-before-12-1-0-and-11-x-releases-before-11-3-7-contain-privileged-legacy-infostudio-modules-that-do-not-sufficiently-vali2026-10-19 https://bugrater.com/releases/cve-2026-85956-progress-marklogic-server-12-x-releases-before-12-1-0-and-11-x-releases-before-11-3-7-allow-a-remote-attacker-with-delegated-database-administrator-privileges-t2026-10-19 https://bugrater.com/releases/cve-2026-92682-in-neo4j-graphql-versions-from-7-0-0-up-to-but-not-including-7-6-4-the-none-quantifier-in-authorization-filters-on-relationships-and-connections-is-not-negat2026-10-19 https://bugrater.com/releases/cve-2026-96612-improper-limitation-of-a-pathname-to-a-restricted-directory-path-traversal-vulnerability-in-hexpm-hex-allows-a-malicious-package-publisher-to-delete-a-direc2026-10-19 https://bugrater.com/releases/cve-2026-96618-improper-handling-of-highly-compressed-data-data-amplification-vulnerability-in-hexpm-hex-allows-an-untrusted-package-mirror-to-exhaust-the-memory-or-disk-spa2026-10-19 https://bugrater.com/releases/cve-2026-9191-progress-marklogic-server-12-x-releases-before-12-1-0-and-11-x-releases-before-11-3-7-do-not-sufficiently-isolate-user-supplied-code-executed-through-certain-re2026-10-19 https://bugrater.com/releases/cve-2026-105274-improper-handling-of-highly-compressed-data-data-amplification-vulnerability-in-hexpm-hex-core-allows-an-untrusted-repository-mirror-or-a-server-answering-he2026-10-19 https://bugrater.com/releases/cve-2026-108475-missing-authorization-vulnerability-in-videowhisper-com-broadcast-live-video-videowhisper-live-streaming-integration-allows-exploiting-incorrectly-configured-ac2026-10-19 https://bugrater.com/releases/cve-2026-108476-missing-authorization-vulnerability-in-videowhisper-com-paid-videochat-turnkey-site-ppv-live-webcams-allows-exploiting-incorrectly-configured-access-control-sec2026-10-19 https://bugrater.com/releases/cve-2026-108477-missing-authorization-vulnerability-in-arraytics-booktics-booktics-allows-exploiting-incorrectly-configured-access-control-security-levels-this-issue-affects-bo2026-10-19 https://bugrater.com/releases/cve-2026-108478-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-vulnerability-in-bdthemes-element-pack-elementor-addons-bdthemes-element-pa2026-10-19 https://bugrater.com/releases/cve-2026-108907-a-vulnerability-was-determined-in-netcore-nr268-1-7-121109-affected-is-the-function-user-ok-of-the-component-cgi-execution-this-manipulation-causes-improper-a2026-10-19 https://bugrater.com/releases/cve-2026-108908-a-vulnerability-was-identified-in-netcore-nr268-1-7-121109-affected-by-this-vulnerability-is-the-function-eval-of-the-file-router-l7-call-board-user-set-cgi-o2026-10-19 https://bugrater.com/releases/cve-2026-108909-a-security-flaw-has-been-discovered-in-netcore-nr268-1-7-121109-affected-by-this-issue-is-some-unknown-functionality-of-the-component-cgi-endpoint-performing2026-10-19 https://bugrater.com/releases/cve-2026-108914-a-flaw-has-been-found-in-edimax-br-6208ac-1-32-affected-by-this-issue-is-some-unknown-functionality-of-the-file-goform-formwlsitesurvey-this-manipulation-of2026-10-19 https://bugrater.com/releases/cve-2026-109237-crawl4ai-from-0-9-0-before-0-9-4-contains-an-untrusted-config-gate-bypass-that-allows-non-admin-api-clients-to-construct-forbidden-config-objects-by-wrapping-th2026-10-19 https://bugrater.com/releases/cve-2026-109239-crawl4ai-before-0-9-4-contains-a-blind-server-side-request-forgery-vulnerability-in-robotsparser-can-fetch-that-lets-unauthenticated-attackers-bypass-docker-ser2026-10-19 https://bugrater.com/releases/cve-2026-109240-freerdp-3-11-0-before-3-32-1-contains-a-reachable-assertion-vulnerability-in-urb-isoch-transfer-that-allows-malicious-rdp-servers-to-crash-clients-by-sending-un2026-10-19 https://bugrater.com/releases/cve-2026-109241-freerdp-before-3-32-0-contains-a-null-pointer-dereference-vulnerability-in-the-client-video-redirection-channel-that-allows-malicious-servers-to-crash-clients-b2026-10-19 https://bugrater.com/releases/cve-2026-109242-freerdp-before-3-0-0-and-3-6-0-before-3-32-0-renders-uninitialized-heap-memory-from-un-decoded-progressive-tiles-because-the-tile-current-buffer-is-allocated-w2026-10-19 https://bugrater.com/releases/cve-2026-109243-freerdp-from-3-0-0-before-3-32-0-contains-an-incorrect-permission-assignment-vulnerability-that-allows-local-users-to-read-private-keys-written-by-crypto-write2026-10-19 https://bugrater.com/releases/cve-2026-109244-freerdp-from-2-0-0-before-3-32-0-contains-an-insecure-permission-vulnerability-in-winpr-makecert-that-creates-unencrypted-private-keys-without-owner-only-file-m2026-10-19 https://bugrater.com/releases/cve-2026-109245-freerdp-3-0-0-before-3-32-0-contains-an-improper-certificate-validation-vulnerability-in-freerdp-http-request-in-libfreerdp-utils-http-c-that-completes-tls-ha2026-10-19 https://bugrater.com/releases/cve-2026-109246-freerdp-before-3-32-0-contains-a-divide-by-zero-vulnerability-in-the-freerdp-shadow-cli-shadow-server-the-frame-id-in-a-client-s-frame-acknowledge-pdu-is-store2026-10-19 https://bugrater.com/releases/cve-2026-109247-freerdp-before-3-32-0-contains-a-path-traversal-vulnerability-in-convert-filedescriptors-to-file-list-in-winpr-libwinpr-clipboard-synthetic-file-c-which-conc2026-10-19 https://bugrater.com/releases/cve-2026-109248-freerdp-3-0-0-before-3-32-0-contains-a-heap-out-of-bounds-read-in-the-winpr-clipboard-function-convert-filedescriptors-to-file-list-which-scans-a-server-cont2026-10-19 https://bugrater.com/releases/cve-2026-109249-freerdp-3-0-0-before-3-32-0-contains-a-heap-out-of-bounds-read-in-freerdp-assistance-parse-all-elements-of-because-it-advances-its-parsing-cursor-without-redu2026-10-19 https://bugrater.com/releases/cve-2026-109250-freerdp-3-0-0-before-3-32-0-contains-a-heap-buffer-overflow-vulnerability-in-collect-keys-that-allows-local-attackers-to-write-past-the-fixed-64-entry-keys-ar2026-10-19 https://bugrater.com/releases/cve-2026-109251-freerdp-before-3-32-0-stores-the-server-supplied-signed-ms-rdpegt-geometry-origin-unchecked-in-an-unsigned-video-surface-coordinate-so-the-blit-clamp-in-gdivid2026-10-19 https://bugrater.com/releases/cve-2026-109252-freerdp-from-3-9-0-before-3-32-0-contains-a-null-pointer-dereference-vulnerability-in-the-rdpear-ndr-reader-that-allows-malicious-servers-to-crash-clients-via-t2026-10-19 https://bugrater.com/releases/cve-2026-109253-freerdp-from-3-9-0-before-3-32-0-contains-an-out-of-bounds-read-vulnerability-in-the-rdpear-ndr-scalar-readers-which-check-value-length-before-consuming-alignm2026-10-19 https://bugrater.com/releases/cve-2026-109254-freerdp-2-1-0-before-3-32-0-contains-a-use-after-free-vulnerability-in-the-static-rdpsnd-channel-disconnect-path-which-frees-audio-formats-and-device-without-j2026-10-19 https://bugrater.com/releases/cve-2026-109255-freerdp-3-0-0-before-3-32-0-contains-an-integer-truncation-vulnerability-in-license-check-stream-length-that-allows-a-malicious-rdp-server-to-trigger-a-heap-buf2026-10-19 https://bugrater.com/releases/cve-2026-109256-freerdp-3-10-0-through-3-32-2-contains-a-heap-buffer-overflow-in-the-winpr-png-write-data-callback-that-writes-past-the-buffer-after-a-realloc-failure-a-malici2026-10-19 https://bugrater.com/releases/cve-2026-109257-freerdp-before-3-32-0-contains-a-double-free-vulnerability-in-nsc-context-initialize-encode-that-leaves-dangling-plane-pointers-after-a-partial-buffer-growth2026-10-19 https://bugrater.com/releases/cve-2026-109258-imagemagick-7-1-0-20-before-7-1-2-32-contains-an-invalid-memory-free-vulnerability-in-the-fx-operation-that-occurs-when-initialization-of-an-fx-runtime-entry-fa2026-10-19 https://bugrater.com/releases/cve-2026-109259-imagemagick-before-6-9-13-57-and-7-x-before-7-1-2-32-contains-an-uninitialized-memory-read-in-the-tga-image-decoder-that-can-expose-memory-contents-attackers-c2026-10-19 https://bugrater.com/releases/cve-2026-109260-imagemagick-before-6-9-13-57-and-7-x-before-7-1-2-32-contains-a-memory-leak-in-the-png-encoder-which-does-not-release-allocated-memory-when-libpng-initializati2026-10-19 https://bugrater.com/releases/cve-2026-109261-imagemagick-before-6-9-13-57-and-7-x-before-7-1-2-32-contains-a-memory-leak-in-the-gif-encoder-because-allocated-memory-is-not-released-when-color-quantization2026-10-19 https://bugrater.com/releases/cve-2026-109262-imagemagick-before-6-9-13-57-and-7-x-before-7-1-2-32-contains-a-memory-leak-in-the-svg-encoder-writesvgimage-that-fails-to-release-allocated-memory-when-handl2026-10-19 https://bugrater.com/releases/cve-2026-109263-imagemagick-before-6-9-13-57-and-7-x-before-7-1-2-32-contains-a-memory-leak-in-the-yuv-encoder-which-fails-to-release-allocated-memory-when-a-specific-operatio2026-10-19 https://bugrater.com/releases/cve-2026-109264-imagemagick-before-6-9-13-57-and-7-x-before-7-1-2-32-contains-uncontrolled-recursion-in-the-mvg-decoder-that-can-exhaust-the-program-stack-an-attacker-who-cont2026-10-19 https://bugrater.com/releases/cve-2026-109265-imagemagick-7-1-1-7-before-7-1-2-32-contains-a-heap-buffer-over-read-vulnerability-that-allows-attackers-to-read-beyond-allocated-memory-due-to-incorrect-string2026-10-19 https://bugrater.com/releases/cve-2026-109266-imagemagick-before-6-9-13-57-and-7-x-before-7-1-2-32-contains-an-xml-injection-vulnerability-in-the-cip-encoder-which-does-not-properly-escape-input-derived-da2026-10-19 https://bugrater.com/releases/cve-2026-109267-imagemagick-before-6-9-13-57-and-7-x-before-7-1-2-32-contains-a-stack-overflow-in-the-msl-decoder-caused-by-an-incorrect-depth-check-that-fails-to-limit-recursi2026-10-19 https://bugrater.com/releases/cve-2026-109268-imagemagick-before-6-9-13-57-and-7-x-before-7-1-2-32-contains-a-use-after-free-vulnerability-in-the-pdf-writer-when-writing-cmyk-images-with-jpeg2000-compressio2026-10-19 https://bugrater.com/releases/cve-2026-109269-imagemagick-before-6-9-13-57-and-7-x-before-7-1-2-32-contains-an-information-disclosure-vulnerability-in-the-jpeg-decoder-which-performs-a-read-that-exposes-un2026-10-19 https://bugrater.com/releases/cve-2026-109270-imagemagick-before-7-1-2-32-contains-a-memory-leak-vulnerability-in-the-process-option-that-allows-attackers-to-cause-unreleased-memory-allocations-by-supplyin2026-10-19 https://bugrater.com/releases/cve-2026-109271-imagemagick-7-1-2-30-before-7-1-2-32-contains-a-use-after-free-vulnerability-in-the-wbinfo-decoder-that-occurs-when-a-memory-allocation-fails-during-image-decod2026-10-19 https://bugrater.com/releases/cve-2026-109272-imagemagick-7-1-1-31-before-7-1-2-32-contains-a-null-pointer-dereference-in-the-postscript-decoder-that-is-triggered-when-a-policy-limit-is-reached-attackers-c2026-10-19 https://bugrater.com/releases/cve-2026-109273-imagemagick-before-6-9-13-57-and-7-x-before-7-1-2-32-contains-an-information-disclosure-vulnerability-in-the-postscript-decoder-which-allocates-a-buffer-one-by2026-10-19 https://bugrater.com/releases/cve-2026-109274-imagemagick-before-7-1-2-32-contains-a-time-of-check-time-of-use-symlink-race-vulnerability-that-allows-attackers-to-bypass-the-path-security-policy-when-execut2026-10-19 https://bugrater.com/releases/cve-2026-109275-imagemagick-before-6-9-13-57-and-7-x-before-7-1-2-32-contains-a-code-injection-vulnerability-in-the-mvg-decoder-when-a-postscript-renderer-is-used-attackers-ca2026-10-19 https://bugrater.com/releases/cve-2026-109276-imagemagick-before-6-9-13-57-and-7-x-before-7-1-2-32-contains-an-incomplete-cleanup-flaw-in-the-jng-decoder-that-fails-to-remove-temporary-files-when-processing2026-10-19 https://bugrater.com/releases/cve-2026-109277-imagemagick-before-7-1-2-32-contains-a-policy-bypass-vulnerability-in-the-script-operation-due-to-missing-checks-on-file-descriptor-handling-attackers-can-use2026-10-19 https://bugrater.com/releases/cve-2026-109278-imagemagick-before-6-9-13-57-and-7-x-before-7-1-2-32-contains-a-memory-leak-in-the-wavelet-denoise-operation-which-fails-to-release-allocated-memory-when-a-req2026-10-19 https://bugrater.com/releases/cve-2026-109279-imagemagick-before-6-9-13-57-and-7-x-before-7-1-2-32-lacks-proper-synchronization-when-the-security-policy-is-accessed-so-simultaneous-reads-and-writes-of-the2026-10-19 https://bugrater.com/releases/cve-2026-109280-imagemagick-7-1-0-20-before-7-1-2-32-contains-a-use-after-free-vulnerability-in-the-fx-option-that-occurs-when-a-memory-allocation-fails-during-a-specific-oper2026-10-19 https://bugrater.com/releases/cve-2026-109281-imagemagick-7-1-0-21-before-7-1-2-32-contains-a-heap-buffer-over-read-in-its-handling-of-the-fx-option-where-a-certain-fx-operation-reads-beyond-the-bounds-o2026-10-19 https://bugrater.com/releases/cve-2026-109282-imagemagick-before-6-9-13-57-and-7-x-before-7-1-2-32-contains-a-type-confusion-flaw-in-the-info-json-and-yaml-encoders-where-an-internal-method-receives-a-poi2026-10-19 https://bugrater.com/releases/cve-2026-109283-open-webui-from-0-11-1-before-0-11-4-contains-an-authorization-bypass-in-the-oauth-token-exchange-endpoint-which-reads-role-claims-only-from-the-provider-s-use2026-10-19 https://bugrater.com/releases/cve-2026-109284-open-webui-from-0-11-0-before-0-11-4-contains-an-improper-authorization-vulnerability-in-the-chat-fork-handler-which-places-forked-chats-in-the-source-chat-s-f2026-10-19 https://bugrater.com/releases/cve-2026-109285-open-webui-from-0-6-0-before-0-11-4-contains-an-improper-access-control-vulnerability-in-has-access-to-file-that-lets-former-knowledge-base-collaborators-keep-f2026-10-19 https://bugrater.com/releases/cve-2026-109286-open-webui-from-0-7-0-before-0-11-4-contains-a-cross-origin-message-handling-vulnerability-in-syncstatsmodal-that-allows-any-website-to-steal-a-signed-in-user-s2026-10-19 https://bugrater.com/releases/cve-2026-109287-open-webui-from-0-9-6-before-0-11-4-contains-an-authorization-flaw-where-the-knowledge-base-file-listing-does-not-verify-that-a-supplied-directory-id-belongs-to2026-10-19 https://bugrater.com/releases/cve-2026-109288-open-webui-before-0-11-4-contains-a-stored-cross-site-scripting-vulnerability-in-markdowninlinetokens-svelte-which-renders-markdown-link-urls-into-anchor-hrefs2026-10-19 https://bugrater.com/releases/cve-2026-109289-open-webui-from-0-8-8-before-0-11-4-contains-an-improper-authorization-vulnerability-that-allows-deactivated-users-to-keep-executing-terminal-commands-through-a2026-10-19 https://bugrater.com/releases/cve-2026-109290-open-webui-from-0-11-1-before-0-11-4-contains-a-stored-cross-site-scripting-vulnerability-in-docxpreview-svelte-that-allows-authenticated-users-to-execute-scrip2026-10-19 https://bugrater.com/releases/cve-2026-109291-open-webui-from-0-6-33-before-0-11-4-contains-a-cross-site-scripting-vulnerability-that-allows-authenticated-users-to-execute-script-in-victims-sessions-by-sto2026-10-19 https://bugrater.com/releases/cve-2026-109292-open-webui-from-0-6-27-before-0-11-4-contains-an-information-disclosure-vulnerability-that-allows-destination-servers-to-obtain-user-session-cookies-by-receivin2026-10-19 https://bugrater.com/releases/cve-2026-109293-open-webui-from-0-11-0-before-0-11-4-contains-an-information-disclosure-vulnerability-that-allows-authenticated-non-admin-users-with-tool-export-permission-to-o2026-10-19 https://bugrater.com/releases/cve-2026-109294-open-webui-from-0-6-42-before-0-11-4-contains-an-uncontrolled-resource-consumption-vulnerability-that-allows-authenticated-users-to-exhaust-server-memory-by-sup2026-10-19 https://bugrater.com/releases/cve-2026-109295-open-webui-from-0-11-0-before-0-11-4-contains-a-regular-expression-denial-of-service-vulnerability-that-allows-authenticated-users-to-stall-server-workers-via-f2026-10-19 https://bugrater.com/releases/cve-2026-109296-open-webui-before-0-11-4-contains-a-missing-authorization-vulnerability-that-allows-authenticated-users-to-reach-disabled-model-provider-backends-by-supplying-a2026-10-19 https://bugrater.com/releases/cve-2026-109297-open-webui-0-11-0-before-0-11-4-contains-a-denial-of-service-vulnerability-in-the-automation-recurrence-rule-validator-whose-sub-daily-frequency-guard-parses-r2026-10-19 https://bugrater.com/releases/cve-2026-109298-open-webui-0-11-0-before-0-11-4-compiles-user-chosen-grep-patterns-for-its-knowledge-and-chat-file-search-tools-with-a-regex-engine-that-expands-nested-counted2026-10-19 https://bugrater.com/releases/cve-2026-109299-open-webui-from-0-9-0-before-0-11-4-contains-a-denial-of-service-vulnerability-that-allows-authenticated-users-with-automations-permission-to-stall-the-instance2026-10-19 https://bugrater.com/releases/cve-2026-109300-open-webui-from-0-6-31-before-0-11-4-contains-a-stored-cross-site-scripting-vulnerability-in-its-markdown-renderer-which-treats-user-authored-tool-call-details2026-10-19 https://bugrater.com/releases/cve-2026-109303-parse-server-before-8-6-93-and-9-0-0-before-9-10-1-alpha-13-does-not-enforce-identity-scoped-protectedfields-authenticated-role-or-per-user-groups-on-count2026-10-19 https://bugrater.com/releases/cve-2026-109304-craft-cms-4-0-0-before-4-18-7-and-5-0-0-before-5-10-14-contains-an-arbitrary-file-read-vulnerability-because-the-twig-create-class-blocklist-does-not-cover-do2026-10-19 https://bugrater.com/releases/cve-2026-109305-craft-cms-from-5-10-2-before-5-10-14-contains-a-twig-sandbox-bypass-that-allows-non-admin-users-to-invoke-php-callables-through-the-has-some-and-has-every-o2026-10-19 https://bugrater.com/releases/cve-2026-109307-craft-cms-5-0-0-before-5-10-14-contains-a-dom-based-cross-site-scripting-vulnerability-in-the-control-panel-login-and-2fa-verification-flow-where-a-user-contro2026-10-19 https://bugrater.com/releases/cve-2026-109309-siyuan-v3-7-0-before-v3-8-6-contains-an-absolute-path-traversal-vulnerability-in-the-kernel-s-private-plugin-http-server-which-passes-a-kernel-plugin-handler-s2026-10-19 https://bugrater.com/releases/cve-2026-109310-siyuan-v3-1-12-before-v3-8-6-fails-to-restrict-the-sprig-template-function-map-in-the-api-icon-getdynamicicon-content-parameter-allowing-resource-exhaustion2026-10-19 https://bugrater.com/releases/cve-2026-109311-vllm-before-0-29-0-passes-uploaded-audio-to-the-pyav-ffmpeg-av-open-fallback-with-only-a-file-size-check-exposing-ffmpeg-s-iamf-parser-heap-overflow-authent2026-10-19 https://bugrater.com/releases/cve-2026-109312-grav-login-plugin-2-7-0-before-3-9-9-contains-an-authentication-bypass-in-processuserprofile-which-checks-that-the-session-user-exists-but-not-that-a-pending2026-10-19 https://bugrater.com/releases/cve-2026-109313-grav-login-plugin-2-7-0-before-3-9-9-contains-an-authentication-bypass-vulnerability-that-allows-attackers-with-a-valid-password-to-skip-two-factor-authenticati2026-10-19 https://bugrater.com/releases/cve-2026-109314-grav-login-plugin-1-2-0-before-3-9-9-contains-an-information-disclosure-vulnerability-that-allows-publishers-to-obtain-password-reset-tokens-by-authoring-a-page2026-10-19 https://bugrater.com/releases/cve-2026-109315-grav-from-2-0-22-before-2-1-7-contains-an-information-disclosure-vulnerability-that-allows-page-editors-to-read-the-clockwork-debugger-token-because-the-sandbox2026-10-19 https://bugrater.com/releases/cve-2026-109316-grav-data-manager-plugin-1-4-0-through-1-4-5-contains-a-missing-authorization-vulnerability-that-allows-unauthenticated-attackers-to-delete-stored-data-files-vi2026-10-19 https://bugrater.com/releases/cve-2026-109317-grav-grav-plugin-api-before-1-0-36-contains-a-privilege-escalation-vulnerability-that-allows-delegated-user-managers-to-obtain-super-admin-access-by-storing-pos2026-10-19 https://bugrater.com/releases/cve-2026-109318-grav-git-sync-1-0-2-through-3-4-12-contains-a-command-injection-vulnerability-that-allows-authenticated-content-editors-to-execute-os-commands-by-injecting-shel2026-10-19 https://bugrater.com/releases/cve-2026-109319-grav-guestbook-plugin-0-5-0-and-0-5-1-contains-missing-authorization-and-cross-site-request-forgery-vulnerabilities-in-admin-moderation-actions-delete-approve2026-10-19 https://bugrater.com/releases/cve-2026-109320-the-grav-api-plugin-grav-plugin-api-before-1-0-36-contains-an-improper-session-validation-vulnerability-that-allows-disabled-accounts-to-keep-api-access-beca2026-10-19 https://bugrater.com/releases/cve-2026-109321-grav-login-oauth-plugin-grav-plugin-login-oauth-before-1-4-3-provisions-oauth-accounts-as-ordinary-grav-users-with-a-deterministic-provider-id-username-an2026-10-19 https://bugrater.com/releases/cve-2026-109322-grav-guestbook-plugin-before-0-5-2-contains-a-stored-cross-site-scripting-vulnerability-because-its-ajax-load-more-and-admin-load-all-handlers-insert-stored-aut2026-10-19 https://bugrater.com/releases/cve-2026-109323-grav-star-ratings-2-0-1-through-2-0-3-contains-a-missing-authorization-vulnerability-that-allows-unauthenticated-visitors-to-vote-by-bypassing-client-only-vote2026-10-19 https://bugrater.com/releases/cve-2026-109324-grav-before-2-1-7-contains-a-denial-of-service-vulnerability-that-allows-authenticated-media-authors-to-exhaust-memory-by-uploading-compressed-oversized-raster2026-10-19 https://bugrater.com/releases/cve-2026-109325-grav-from-2-0-22-before-2-1-7-contains-an-authentication-bypass-vulnerability-in-the-clockwork-profiler-that-trusts-loopback-remote-addr-values-unauthenticated2026-10-19 https://bugrater.com/releases/cve-2026-109326-grav-before-2-1-7-contains-an-information-disclosure-vulnerability-because-bundled-nginx-lighttpd-iis-and-caddy-2-configurations-block-git-only-at-document2026-10-19 https://bugrater.com/releases/cve-2026-109327-admidio-4-0-12-through-4-3-17-and-5-0-0-before-5-0-15-contains-a-reflected-cross-site-scripting-vulnerability-in-system-redirect-php-that-allows-unauthenticated2026-10-19 https://bugrater.com/releases/cve-2026-109328-admidio-5-0-0-before-5-0-15-contains-an-unauthenticated-stored-cross-site-scripting-vulnerability-in-registrationpresenter-php-which-inserts-the-raw-first-name2026-10-19 https://bugrater.com/releases/cve-2026-109329-admidio-4-3-2-through-4-3-17-and-5-0-0-before-5-0-15-contains-a-broken-access-control-vulnerability-that-allows-role-administrators-to-assign-users-to-roles-in2026-10-19 https://bugrater.com/releases/cve-2026-109330-network-ai-5-0-0-before-5-15-2-contains-a-cross-site-websocket-hijacking-vulnerability-in-dashboardserver-that-allows-remote-attackers-to-read-live-agent-topolo2026-10-19 https://bugrater.com/releases/cve-2026-109331-network-ai-from-5-14-0-before-5-15-2-contains-a-security-control-bypass-vulnerability-in-the-claudehookbridge-pretooluse-hook-which-matches-deny-patterns-only2026-10-19 https://bugrater.com/releases/cve-2026-109333-surrealdb-from-3-0-0-before-3-3-0-contains-an-authorization-bypass-vulnerability-that-allows-authenticated-record-users-to-read-records-in-other-namespaces-or-d2026-10-19 https://bugrater.com/releases/cve-2026-109334-surrealdb-before-3-3-0-does-not-check-the-caller-selected-namespace-or-database-against-the-level-at-which-a-namespace-or-database-level-system-user-authentica2026-10-19 https://bugrater.com/releases/cve-2026-109335-surrealdb-from-3-0-0-before-3-3-0-contains-an-information-disclosure-vulnerability-that-allows-record-users-to-read-values-hidden-by-field-level-select-permissi2026-10-19 https://bugrater.com/releases/cve-2026-109336-surrealdb-before-3-3-0-contains-an-authorization-bypass-vulnerability-that-allows-record-users-to-read-fields-hidden-by-field-level-select-permissions-through-l2026-10-19 https://bugrater.com/releases/cve-2026-109337-surrealdb-before-3-3-0-contains-an-authorization-bypass-vulnerability-that-allows-record-users-to-infer-field-values-hidden-by-field-level-select-permissions-us2026-10-19 https://bugrater.com/releases/cve-2026-109338-surrealdb-before-3-3-0-contains-a-denial-of-service-vulnerability-that-allows-query-capable-users-to-crash-the-server-by-reading-non-ascii-header-values-in-embe2026-10-19 https://bugrater.com/releases/cve-2026-109339-surrealdb-3-1-0-before-3-3-0-lets-surrealism-modules-exhaust-server-memory-because-module-stdout-stderr-lines-are-buffered-unbounded-in-host-memory-bypassing-t2026-10-19 https://bugrater.com/releases/cve-2026-109340-surrealdb-from-3-1-0-before-3-3-0-contains-an-authorization-bypass-vulnerability-that-allows-authenticated-users-to-delete-protected-graph-edges-by-triggering-a2026-10-19 https://bugrater.com/releases/cve-2026-109341-surrealdb-before-3-3-0-contains-an-authorization-bypass-vulnerability-that-allows-callers-with-table-level-write-permission-to-read-select-restricted-fields-by2026-10-19 https://bugrater.com/releases/cve-2026-109342-surrealdb-from-3-0-0-before-3-3-0-contains-a-missing-authentication-vulnerability-in-the-revoke-rpc-method-that-allows-low-privileged-or-unauthenticated-callers2026-10-19 https://bugrater.com/releases/cve-2026-109343-surrealdb-before-3-3-0-allows-cross-tenant-access-because-the-surrealql-use-statement-switches-a-session-to-any-namespace-database-without-checking-that-the-cal2026-10-19 https://bugrater.com/releases/cve-2026-109344-dompurify-from-3-4-13-before-3-4-16-contains-a-cross-site-scripting-vulnerability-because-in-place-mode-fails-to-neutralize-subtrees-detached-by-aftersanitizeel2026-10-19 https://bugrater.com/releases/cve-2026-109345-dompurify-before-3-4-16-contains-a-cross-site-scripting-vulnerability-that-allows-attackers-to-bypass-sanitization-because-in-place-mode-returns-a-force-removed2026-10-19 https://bugrater.com/releases/cve-2026-109346-better-auth-from-1-3-8-beta-3-before-1-7-0-rc-3-contains-a-ui-misrepresentation-vulnerability-in-the-deviceauthorization-plugin-because-get-device-omits-the-re2026-10-19 https://bugrater.com/releases/cve-2026-109347-adminer-before-6-1-1-contains-a-remote-code-execution-vulnerability-that-allows-authenticated-sqlite-users-to-bypass-attach-and-vacuum-into-restrictions-by-pref2026-10-19 https://bugrater.com/releases/cve-2026-109348-gitoxide-gix-mailmap-before-0-35-0-contains-a-denial-of-service-vulnerability-that-allows-attackers-to-exhaust-cpu-through-quadratic-time-parsing-in-snapshot-f2026-10-19 https://bugrater.com/releases/cve-2026-109349-gitoxide-gix-pack-before-0-75-0-contains-a-reachable-assertion-in-bytestoentriesiter-new-from-header-the-pack-header-decoder-accepts-version-3-but-a-release2026-10-19 https://bugrater.com/releases/cve-2026-109350-gitoxide-gix-pack-before-0-75-0-contains-a-denial-of-service-vulnerability-that-allows-malicious-remotes-to-crash-fetch-operations-by-sending-crafted-thin-pack2026-10-19 https://bugrater.com/releases/cve-2026-109351-gitoxide-gix-pack-before-0-75-0-contains-an-uncontrolled-memory-allocation-vulnerability-that-allows-remote-attackers-to-abort-the-process-by-supplying-a-huge-p2026-10-19 https://bugrater.com/releases/cve-2026-109353-librenms-before-26-9-0-contains-an-sql-injection-vulnerability-that-allows-unprivileged-users-to-inject-sql-by-supplying-an-array-valued-notification-id-paramet2026-10-19 https://bugrater.com/releases/cve-2026-109357-librenms-before-26-9-0-contains-an-ldap-filter-injection-in-ldap-authorization-and-ad-authorization-modes-because-usernames-are-inserted-unescaped-into-ldap-sea2026-10-19 https://bugrater.com/releases/cve-2026-109358-edgeless-systems-contrast-1-8-0-before-1-24-1-contains-an-incorrect-permissions-vulnerability-where-the-node-installer-writes-the-containerd-config-world-writab2026-10-19 https://bugrater.com/releases/cve-2026-109359-contrast-1-8-0-before-1-24-1-contains-an-improper-verification-vulnerability-in-coordinator-peer-recovery-that-fails-to-confirm-the-serving-peer-uses-the-same-m2026-10-19 https://bugrater.com/releases/cve-2026-109360-monai-0-4-0-before-1-6-1-contains-a-remote-code-execution-vulnerability-that-allows-on-path-attackers-to-execute-code-by-tampering-with-senet-pretrained-weights2026-10-19 https://bugrater.com/releases/cve-2026-109361-monai-1-2-0-before-1-6-1-contains-an-insecure-deserialization-vulnerability-in-nnunetv2runner-that-unpickles-the-postprocessing-file-path-read-from-inference-in2026-10-19 https://bugrater.com/releases/cve-2026-109362-heym-v0-0-5-before-v0-0-113-contains-a-broken-access-control-vulnerability-that-allows-former-collaborators-to-keep-executing-jwt-auth-workflows-by-reusing-scop2026-10-19 https://bugrater.com/releases/cve-2026-109363-zcashfoundation-zebra-6-4-0-before-6-4-2-parses-version-6-transactions-carrying-a-pre-nu6-3-consensus-branch-id-but-the-size-computation-during-unminedtx-const2026-10-19 https://bugrater.com/releases/cve-2026-109364-zebra-2-3-0-before-6-4-0-contains-a-protection-mechanism-failure-that-allows-unauthenticated-peers-to-evade-bans-because-bans-and-misbehavior-scores-are-keyed-o2026-10-19 https://bugrater.com/releases/cve-2026-109365-zebra-before-6-4-0-contains-an-uncontrolled-resource-consumption-vulnerability-that-allows-unauthenticated-peers-to-force-full-proof-verification-by-serving-for2026-10-19 https://bugrater.com/releases/cve-2026-109366-zebra-before-6-4-0-contains-an-improper-integrity-validation-vulnerability-in-the-inbound-gossip-download-path-that-allows-unauthenticated-peers-to-force-droppi2026-10-19 https://bugrater.com/releases/cve-2026-109371-zitadel-3-0-0-before-4-18-0-contains-a-missing-authentication-vulnerability-in-the-hosted-login-v1-ui-where-the-change-username-handler-acts-on-the-account-bou2026-10-19 https://bugrater.com/releases/cve-2026-109372-zitadel-4-x-before-4-19-2-and-3-x-through-3-4-15-contains-an-authentication-bypass-in-the-saml-identity-provider-intent-callback-which-verifies-the-assertion-s2026-10-19 https://bugrater.com/releases/cve-2026-109373-zitadel-3-0-0-before-4-19-2-contains-an-authentication-bypass-vulnerability-in-the-login-v2-ui-that-allows-unauthenticated-attackers-to-obtain-other-users-sess2026-10-19 https://bugrater.com/releases/cve-2026-109374-zitadel-3-0-0-before-4-19-2-contains-a-privilege-escalation-vulnerability-in-oidc-token-exchange-that-allows-end-user-impersonators-to-impersonate-administrator2026-10-19 https://bugrater.com/releases/cve-2026-85958-progress-marklogic-server-12-x-releases-before-12-1-0-and-11-x-releases-before-11-3-7-contain-an-authentication-validation-weakness-that-could-allow-an-attacker2026-10-19 https://bugrater.com/releases/cve-2026-85960-progress-marklogic-server-12-x-releases-before-12-1-0-and-11-x-releases-before-11-3-7-use-predictable-csrf-tokens-in-query-console-a-remote-attacker-who-lures2026-10-19 https://bugrater.com/releases/cve-2026-85966-progress-marklogic-server-12-x-releases-before-12-1-0-and-11-x-releases-before-11-3-7-do-not-sufficiently-restrict-access-to-certain-security-sensitive-informat2026-10-19 https://bugrater.com/releases/cve-2026-85967-progress-marklogic-server-12-x-releases-before-12-1-0-and-11-x-releases-before-11-3-7-contain-a-cross-site-scripting-vulnerability-that-could-allow-a-remote-att2026-10-19 https://bugrater.com/releases/cve-2026-108983-a-vulnerability-is-in-web-server-default-connection-ports-under-the-process-name-geowebserver-exe2026-10-19 https://bugrater.com/releases/cve-2026-108984-a-vulnerability-is-in-web-server-default-connection-ports-under-the-process-name-geowebserver-exe2026-10-19 https://bugrater.com/releases/cve-2026-112037-a-flaw-has-been-found-in-diem-project-diem-up-to-116974edfb9a5b8bd69cb13586dc62bcdbb485ad-affected-is-an-unknown-function-of-the-file-dmcoreplugin-lib-vendor-g2026-10-19 https://bugrater.com/releases/cve-2026-112038-a-vulnerability-has-been-found-in-diem-project-diem-up-to-116974edfb9a5b8bd69cb13586dc62bcdbb485ad-affected-by-this-vulnerability-is-the-function-html-of-the-f2026-10-19 https://bugrater.com/releases/cve-2026-112039-a-vulnerability-was-found-in-diem-project-diem-up-to-116974edfb9a5b8bd69cb13586dc62bcdbb485ad-affected-by-this-issue-is-the-function-append-of-the-file-dmadmin2026-10-19 https://bugrater.com/releases/cve-2026-112040-a-vulnerability-was-determined-in-diem-project-diem-up-to-116974edfb9a5b8bd69cb13586dc62bcdbb485ad-this-affects-an-unknown-part-of-the-file-dmcoreplugin-plugin2026-10-19 https://bugrater.com/releases/cve-2026-112041-a-vulnerability-was-identified-in-diem-project-diem-up-to-116974edfb9a5b8bd69cb13586dc62bcdbb485ad-this-vulnerability-affects-the-function-dmstring-random-of2026-10-19 https://bugrater.com/releases/cve-2026-102503-missing-authentication-for-critical-function-cwe-306-and-missing-authorization-cwe-862-in-the-libp2p-http-ingress-server-startingressserver-in-cmd-sam-nod2026-10-19 https://bugrater.com/releases/cve-2026-103091-missing-authorization-cwe-862-and-initialization-of-a-resource-with-an-insecure-default-cwe-1188-in-the-mcp-proxy-handlestreampassthrough-in-mcp-service-go2026-10-19 https://bugrater.com/releases/cve-2026-112042-a-security-flaw-has-been-discovered-in-diem-project-diem-up-to-116974edfb9a5b8bd69cb13586dc62bcdbb485ad-this-issue-affects-the-function-dmbaselinktag-text-of2026-10-19 https://bugrater.com/releases/cve-2026-112043-a-weakness-has-been-identified-in-calcom-cal-com-and-cal-diy-up-to-6-2-0-impacted-is-the-function-createwebhookprocedure-of-the-file-packages-trpc-server-route2026-10-19 https://bugrater.com/releases/cve-2026-112044-a-security-vulnerability-has-been-detected-in-dotnet-eshop-up-to-913acea66708a59595351174cee9b29f37179d29-the-affected-element-is-the-function-addapplicationse2026-10-19 https://bugrater.com/releases/cve-2026-112045-a-vulnerability-was-detected-in-donetick-up-to-0-1-82-the-impacted-element-is-the-function-candeletehistory-of-the-file-internal-chore-model-model-go-of-the-co2026-10-19 https://bugrater.com/releases/cve-2026-112073-a-vulnerability-was-identified-in-tencent-ncnn-up-to-44b02dabdcf97499281a4692ebd65bad73dcf8b6-affected-by-this-vulnerability-is-the-function-matmul-transb-of-t2026-10-19 https://bugrater.com/releases/cve-2026-112074-a-security-flaw-has-been-discovered-in-tencent-ncnn-up-to-44b02dabdcf97499281a4692ebd65bad73dcf8b6-affected-by-this-issue-is-the-function-ncnn-yuv420sp2rgb-of2026-10-19 https://bugrater.com/releases/cve-2026-112075-a-weakness-has-been-identified-in-unslothai-unsloth-up-to-0-1-501-beta-this-affects-the-function-fastsentencetransformer-is-transformer-module-ref-of-the-file2026-10-19 https://bugrater.com/releases/cve-2026-112076-a-security-vulnerability-has-been-detected-in-alexta69-metube-up-to-2026-09-28-this-vulnerability-affects-the-function-downloadqueue-write-feed-metadata-sync2026-10-19 https://bugrater.com/releases/cve-2026-112077-a-vulnerability-was-detected-in-radareorg-radare2-6-2-0-6-2-2-this-issue-affects-the-function-r-core-cmd-str-pipe-in-the-library-libr-core-rtr-http-inc-c-of-th2026-10-19 https://bugrater.com/releases/cve-2026-112078-a-flaw-has-been-found-in-rvc-project-retrieval-based-voice-conversion-webui-up-to-2-3-260718-impacted-is-the-function-change-info-of-the-file-webui-py-execut2026-10-19 https://bugrater.com/releases/cve-2026-112079-a-vulnerability-has-been-found-in-hankcs-hanlp-up-to-2-1-0-beta-64-the-affected-element-is-the-function-load-word2vec-as-vocab-tensor-of-the-file-hanlp-utils-t2026-10-19 https://bugrater.com/releases/cve-2026-112080-a-vulnerability-was-found-in-llamachinese-llama-chinese-up-to-6fa0fffb0dd82fe3cfaa1449ee54a5806d26ae9b-the-impacted-element-is-the-function-get-class-from-dyna2026-10-19 https://bugrater.com/releases/hirezoot-security-releases-october-20262026-10-19 https://bugrater.com/releases/wp-comment-cleaner-security-releases-october-20262026-10-19 https://bugrater.com/releases/krupalshah-security-releases-october-20262026-10-19 https://bugrater.com/releases/hotel-booking-security-releases-october-20262026-10-19 https://bugrater.com/releases/eleveo-security-releases-october-20262026-10-19 https://bugrater.com/releases/red-hat-security-releases-october-20262026-10-19 https://bugrater.com/releases/otrs-gmbh-former-otrs-ag-security-releases-october-20262026-10-19 https://bugrater.com/releases/micromatch-security-releases-september-20262026-10-19 https://bugrater.com/releases/kornelski-security-releases-september-20262026-10-19 https://bugrater.com/releases/px-lab-security-releases-october-20262026-10-19 https://bugrater.com/releases/tsi-coop-security-releases-october-20262026-10-19 https://bugrater.com/releases/wmcms-security-releases-october-20262026-10-19 https://bugrater.com/releases/red-hat-security-releases-august-20262026-10-19 https://bugrater.com/releases/semcms-security-releases-october-20262026-10-19 https://bugrater.com/releases/red-hat-security-releases-june-20262026-10-19 https://bugrater.com/releases/quarkus-security-releases-august-20262026-10-19 https://bugrater.com/releases/red-hat-security-releases-september-20262026-10-19 https://bugrater.com/releases/idccms-security-releases-october-20262026-10-19 https://bugrater.com/releases/agno-agi-security-releases-october-20262026-10-19 https://bugrater.com/releases/kong-security-releases-october-20262026-10-19 https://bugrater.com/releases/admin-and-customer-messages-after-order-for-woocommerce-orderconvo-security-releases-october-20252026-10-19 https://bugrater.com/releases/tencent-security-releases-october-20262026-10-19 https://bugrater.com/releases/kamailio-security-releases-october-20262026-10-19 https://bugrater.com/releases/dataease-security-releases-october-20262026-10-19 https://bugrater.com/releases/go-standard-library-security-releases-august-20262026-10-19 https://bugrater.com/releases/go-standard-library-security-releases-june-20262026-10-19 https://bugrater.com/releases/mikrotik-security-releases-october-20262026-10-19 https://bugrater.com/releases/yangzongzhuan-security-releases-october-20262026-10-19 https://bugrater.com/releases/zen-cart-security-releases-october-20262026-10-19 https://bugrater.com/releases/ash-project-security-releases-october-20262026-10-19 https://bugrater.com/releases/apache-security-releases-october-20262026-10-19 https://bugrater.com/releases/dotstore-security-releases-september-20262026-10-19 https://bugrater.com/releases/meetecho-security-releases-october-20262026-10-19 https://bugrater.com/releases/netlink-ict-pvt-ltd-security-releases-september-20262026-10-19 https://bugrater.com/releases/cairo-dock-security-releases-october-20262026-10-19 https://bugrater.com/releases/yungengxin-security-releases-october-20262026-10-19 https://bugrater.com/releases/opensource-socialnetwork-security-releases-october-20262026-10-19 https://bugrater.com/releases/lavalite-security-releases-october-20262026-10-19 https://bugrater.com/releases/rt-thread-security-releases-october-20262026-10-19 https://bugrater.com/releases/cfdude-security-releases-october-20262026-10-19 https://bugrater.com/releases/manageiq-security-releases-october-20262026-10-19 https://bugrater.com/releases/imithemes-security-releases-july-20262026-10-19 https://bugrater.com/releases/dji-security-releases-august-20262026-10-19 https://bugrater.com/releases/imagemagick-security-releases-october-20262026-10-19 https://bugrater.com/releases/ollama-security-releases-october-20262026-10-19 https://bugrater.com/releases/tduckcloud-security-releases-october-20262026-10-19 https://bugrater.com/releases/dromara-security-releases-october-20262026-10-19 https://bugrater.com/releases/guchengwuyue-security-releases-october-20262026-10-19 https://bugrater.com/releases/moxi624-security-releases-october-20262026-10-19 https://bugrater.com/releases/jishenghua-security-releases-october-20262026-10-19 https://bugrater.com/releases/progress-security-releases-october-20262026-10-19 https://bugrater.com/releases/hexpm-security-releases-october-20262026-10-19 https://bugrater.com/releases/blackbelttechnology-security-releases-october-20262026-10-19 https://bugrater.com/releases/linksys-security-releases-october-20262026-10-19 https://bugrater.com/releases/logicaldoc-security-releases-october-20262026-10-19 https://bugrater.com/releases/denver-security-releases-january-20262026-10-19 https://bugrater.com/releases/denver-security-releases-november-20252026-10-19 https://bugrater.com/releases/smartertools-security-releases-october-20262026-10-19 https://bugrater.com/releases/sgl-project-security-releases-october-20262026-10-19 https://bugrater.com/releases/ministry-of-justice-general-directorate-of-information-technology-security-releases-october-20262026-10-19 https://bugrater.com/releases/cozy-vision-technologies-pvt-ltd-security-releases-october-20262026-10-19 https://bugrater.com/releases/eclipse-foundation-security-releases-october-20262026-10-19 https://bugrater.com/releases/royalnavneet-security-releases-october-20262026-10-19 https://bugrater.com/releases/thelia-security-releases-october-20262026-10-19 https://bugrater.com/releases/smart-media4u-technology-security-releases-october-20262026-10-19 https://bugrater.com/releases/netis-security-releases-october-20262026-10-19 https://bugrater.com/releases/tobychui-security-releases-october-20262026-10-19 https://bugrater.com/releases/square-security-releases-october-20262026-10-19 https://bugrater.com/releases/pimcore-security-releases-october-20262026-10-19 https://bugrater.com/releases/webkul-security-releases-october-20262026-10-19 https://bugrater.com/releases/thirty-bees-security-releases-october-20262026-10-19 https://bugrater.com/releases/gumlet-security-releases-october-20262026-10-19 https://bugrater.com/releases/sbabic-security-releases-october-20262026-10-19 https://bugrater.com/releases/neo4j-security-releases-october-20262026-10-19 https://bugrater.com/releases/spip-security-releases-september-20262026-10-19 https://bugrater.com/releases/exponent-security-releases-october-20262026-10-19 https://bugrater.com/releases/progress-software-corporation-security-releases-october-20262026-10-19 https://bugrater.com/releases/erlang-security-releases-october-20262026-10-19 https://bugrater.com/releases/shenzhen-hcc-technology-security-releases-october-20262026-10-19 https://bugrater.com/releases/netcore-security-releases-october-20262026-10-19 https://bugrater.com/releases/unclecode-security-releases-october-20262026-10-19 https://bugrater.com/releases/freerdp-security-releases-october-20262026-10-19 https://bugrater.com/releases/open-webui-security-releases-october-20262026-10-19 https://bugrater.com/releases/parse-community-security-releases-october-20262026-10-19 https://bugrater.com/releases/craftcms-security-releases-october-20262026-10-19 https://bugrater.com/releases/siyuan-note-security-releases-october-20262026-10-19 https://bugrater.com/releases/vllm-project-security-releases-october-20262026-10-19 https://bugrater.com/releases/getgrav-security-releases-october-20262026-10-19 https://bugrater.com/releases/cve-2026-106014-the-gateway-for-vantiv-on-wc-wordpress-plugin-through-1-0-1-does-not-verify-the-authenticity-of-the-payment-notification-received-on-its-hosted-payment-return-h2026-10-19 https://bugrater.com/releases/cve-2026-106028-the-activetrail-for-woocommerce-wordpress-plugin-through-1-2-6-does-not-perform-any-authorization-check-before-creating-woocommerce-coupons-allowing-unauthenti2026-10-19 https://bugrater.com/releases/cve-2026-106933-the-blaze-demo-importer-wordpress-plugin-before-1-0-17-does-not-sanitize-uploaded-svg-files-and-registers-the-svg-mime-type-for-the-wordpress-media-library-unco2026-10-19 https://bugrater.com/releases/cve-2026-108120-brian-mariani-from-digitalcanion-sa-has-discovered-a-path-traversal-vulnerability-in-the-view-logs-functionality-of-koozali-s-sme-server-version-11-0rc1-215-al2026-10-19 https://bugrater.com/releases/cve-2026-108121-brian-mariani-from-digitalcanion-sa-has-discovered-a-vulnerability-in-the-domain-creation-functionality-of-koozali-s-sme-server-version-11-0rc1-215-allowing2026-10-19 https://bugrater.com/releases/cve-2026-112081-a-vulnerability-was-determined-in-hankcs-hanlp-up-to-2-1-0-beta-64-this-affects-the-function-hanlp-load-of-the-file-plugins-hanlp-common-hanlp-common-reflectio2026-10-19 https://bugrater.com/releases/cve-2026-112082-a-vulnerability-was-identified-in-sgl-project-sglang-up-to-0-5-19-this-impacts-the-function-scheduler-expert-distribution-handle-of-the-file-python-sglang-srt2026-10-19 https://bugrater.com/releases/cve-2026-112083-a-security-flaw-has-been-discovered-in-sgl-project-sglang-up-to-0-5-19-affected-is-the-function-weightexporter-send-weights-to-remote-instance-of-the-file-pyth2026-10-19 https://bugrater.com/releases/cve-2026-112086-a-vulnerability-was-found-in-espnet-up-to-202610-post2-this-affects-the-function-build-model-of-the-file-espnet3-publication-inference-model-py-of-the-componen2026-10-19 https://bugrater.com/releases/cve-2026-16487-a-flaw-was-found-in-bootc-when-operating-with-the-default-containers-signature-policy-automatic-or-manual-upgrades-of-a-mutable-image-tag-may-apply-unsigned-co2026-10-19 https://bugrater.com/releases/cve-2026-89286-the-formflow-for-gohighlevel-ghl-wordpress-plugin-through-1-0-0-does-not-restrict-access-to-a-log-file-it-writes-inside-the-publicly-accessible-uploads-direc2026-10-19 https://bugrater.com/releases/cve-2026-91046-the-elementsready-addons-for-elementor-wordpress-plugin-through-6-7-2-does-not-perform-authorization-checks-that-halt-execution-in-several-of-its-settings-save2026-10-19 https://bugrater.com/releases/cve-2026-91047-the-elementsready-addons-for-elementor-wordpress-plugin-through-6-7-2-does-not-properly-restrict-access-to-protected-woocommerce-product-downloads-allowing-una2026-10-19 https://bugrater.com/releases/cve-2026-94273-the-snap-finance-wordpress-plugin-through-3-11-0-does-not-verify-that-the-payment-provider-s-response-actually-confirms-a-completed-approved-transaction-before2026-10-19 https://bugrater.com/releases/cve-2026-103311-the-coinbase-commerce-payment-gateway-for-woocommerce-wordpress-plugin-through-1-4-1-does-not-verify-the-authenticity-of-incoming-payment-webhook-notifications2026-10-19 https://bugrater.com/releases/cve-2026-106010-the-bdm-digital-payment-gateway-wordpress-plugin-through-1-3-12-does-not-verify-the-credentials-on-its-public-payment-status-update-route-and-treats-unset-crede2026-10-19 https://bugrater.com/releases/cve-2026-110034-the-salon-booking-system-wordpress-plugin-before-10-31-11-does-not-enforce-a-minimum-of-zero-when-subtracting-a-fixed-amount-discount-from-a-booking-s-total-al2026-10-19 https://bugrater.com/releases/cve-2026-112087-a-weakness-has-been-identified-in-itsourcecode-online-cake-ordering-system-1-0-this-issue-affects-some-unknown-processing-of-the-file-confirm-php-this-manipul2026-10-19 https://bugrater.com/releases/cve-2026-112088-a-weakness-has-been-identified-in-dav-ee-dairy-management-system-31ace9692d1e1e6d64339a42c463b361319c615c-f31a584c3330c013b61f8b0306d9e0849c6d693d-this-affects2026-10-19 https://bugrater.com/releases/cve-2026-112089-a-security-vulnerability-has-been-detected-in-dav-ee-dairy-management-system-31ace9692d1e1e6d64339a42c463b361319c615c-f31a584c3330c013b61f8b0306d9e0849c6d693d2026-10-19 https://bugrater.com/releases/cve-2026-16460-a-flaw-was-found-in-bootc-and-ostree-already-staged-deployments-are-finalized-without-revalidating-the-deployment-s-container-image-against-the-current-contain2026-10-19 https://bugrater.com/releases/cve-2026-74921-the-document-gallery-wordpress-plugin-through-5-1-1-does-not-sanitise-or-escape-several-gallery-shortcode-attributes-before-embedding-them-in-a-single-quoted-ht2026-10-19 https://bugrater.com/releases/cve-2026-74922-the-document-gallery-wordpress-plugin-through-5-1-1-does-not-verify-the-signature-on-one-of-its-unauthenticated-webhook-endpoints-when-no-shared-secret-has-been2026-10-19 https://bugrater.com/releases/cve-2026-86791-the-ipospays-payment-gateway-for-woocommerce-wordpress-plugin-before-1-4-7-does-not-verify-that-a-payment-was-actually-completed-before-recording-an-order-as-pa2026-10-19 https://bugrater.com/releases/cve-2026-91831-the-subscribe-to-comments-wordpress-plugin-before-2-3-3-does-not-sanitise-newline-characters-from-a-notification-sender-name-setting-before-using-it-in-e-mail-h2026-10-19 https://bugrater.com/releases/cve-2026-94228-the-truebooker-wordpress-plugin-before-1-3-0-does-not-perform-any-capability-check-on-one-of-its-setup-handlers-and-the-token-it-does-check-is-issued-to-unauth2026-10-19 https://bugrater.com/releases/cve-2026-94229-the-truebooker-wordpress-plugin-before-1-3-0-does-not-verify-that-the-requester-owns-a-booking-before-rendering-its-confirmation-summary-allowing-unauthenticat2026-10-19 https://bugrater.com/releases/cve-2026-94230-the-truebooker-wordpress-plugin-before-1-3-0-does-not-have-authorisation-checks-in-some-of-its-ajax-actions-and-does-not-validate-the-submitted-service-price-s2026-10-19 https://bugrater.com/releases/cve-2026-94231-the-truebooker-wordpress-plugin-before-1-3-0-does-not-have-authorisation-checks-in-place-in-some-of-its-functionality-allowing-unauthenticated-users-to-create2026-10-19 https://bugrater.com/releases/cve-2026-94272-the-snap-finance-wordpress-plugin-before-3-12-0-does-not-verify-that-a-request-to-change-a-woocommerce-order-s-status-comes-from-an-authorised-source-allowing2026-10-19 https://bugrater.com/releases/cve-2026-94294-the-app-builder-wordpress-plugin-before-5-7-1-does-not-require-authentication-or-authorisation-before-writing-attacker-supplied-data-to-one-of-its-options-and2026-10-19 https://bugrater.com/releases/cve-2026-112090-a-vulnerability-was-detected-in-dav-ee-dairy-management-system-31ace9692d1e1e6d64339a42c463b361319c615c-f31a584c3330c013b61f8b0306d9e0849c6d693d-this-issue-aff2026-10-19 https://bugrater.com/releases/cve-2026-112091-a-flaw-has-been-found-in-dav-ee-dairy-management-system-31ace9692d1e1e6d64339a42c463b361319c615c-f31a584c3330c013b61f8b0306d9e0849c6d693d-impacted-is-an-unknow2026-10-19 https://bugrater.com/releases/cve-2026-112092-a-flaw-has-been-found-in-subhajitkhan-online-clinic-management-system-up-to-e9ee77a8827a1446220fa07ee693dc4d9a29a578-the-affected-element-is-the-function-echo2026-10-19 https://bugrater.com/releases/cve-2026-112093-a-vulnerability-has-been-found-in-subhajitkhan-online-clinic-management-system-up-to-e9ee77a8827a1446220fa07ee693dc4d9a29a578-the-impacted-element-is-an-unknow2026-10-19 https://bugrater.com/releases/cve-2026-112094-a-security-vulnerability-has-been-detected-in-michaelrsweet-mxml-4-0-5-4-0-6-this-affects-the-function-mxml-load-data-of-the-file-mxml-file-c-the-manipulation2026-10-19 https://bugrater.com/releases/cve-2026-112095-a-flaw-has-been-found-in-sourcecodester-inventory-system-1-0-this-affects-an-unknown-part-of-the-file-api-products-handler-php-action-save-of-the-component-pr2026-10-19 https://bugrater.com/releases/cve-2026-112096-a-vulnerability-has-been-found-in-sourcecodester-inventory-system-1-0-this-vulnerability-affects-unknown-code-of-the-file-api-transactions-handler-php-action2026-10-19 https://bugrater.com/releases/cve-2026-112097-a-vulnerability-was-found-in-sourcecodester-inventory-system-1-0-this-issue-affects-some-unknown-processing-of-the-file-api-transactions-handler-php-action-sa2026-10-19 https://bugrater.com/releases/cve-2026-112098-a-security-flaw-has-been-discovered-in-deeppavlov-up-to-1-7-0-impacted-is-the-function-resolve-of-the-file-deeppavlov-core-common-params-py-of-the-component-co2026-10-19 https://bugrater.com/releases/cve-2026-112161-mobaxterm-personal-edition-portable-26-4-ga-extracts-the-cygutils64-plugin-file-without-first-verifying-its-integrity-a-local-attacker-with-write-permissions2026-10-19 https://bugrater.com/releases/cve-2026-112178-misp-contains-an-access-control-flaw-in-the-proposal-shadow-attribute-visibility-logic-the-authorization-check-accepted-any-attribute-or-object-carrying-one2026-10-19 https://bugrater.com/releases/cve-2026-112179-in-misp-the-event-synchronization-process-contained-a-logic-error-in-the-preparation-of-event-reports-for-remote-push-the-filtering-of-non-exportable-tags-was2026-10-19 https://bugrater.com/releases/cve-2026-13695-sql-injection-sqli-vulnerability-specifically-a-union-based-vulnerability-in-the-integratec-application-that-affects-the-sinfo-parameter-sent-via-post-to-the2026-10-19 https://bugrater.com/releases/cve-2026-108762-path-confinement-bypass-during-metadata-backup-deletion-in-apache-kylin-impact-most-to-the-kylin-services-that-are-directly-exposed-to-public-network-which-is2026-10-19 https://bugrater.com/releases/cve-2026-108764-server-side-request-forgery-ssrf-vulnerability-in-apache-kylin-impact-most-to-the-kylin-job-service-that-are-directly-exposed-to-public-network-which-is-not2026-10-19 https://bugrater.com/releases/cve-2026-108766-missing-authorization-on-jdbc-source-config-update-in-apache-kylin-impact-most-to-the-kylin-services-that-are-directly-exposed-to-public-network-which-is-not2026-10-19 https://bugrater.com/releases/cve-2026-108771-missing-authentication-for-in-house-broadcast-and-polymorphic-deserialization-vulnerability-in-apache-kylin-impact-most-to-the-kylin-services-that-are-directly2026-10-19 https://bugrater.com/releases/cve-2026-108776-improper-neutralization-of-special-elements-used-in-an-sql-command-sql-injection-vulnerability-in-apache-kylin-the-impact-is-moderate-if-kylin-service-is-i2026-10-19 https://bugrater.com/releases/cve-2026-108780-potential-jdbc-source-configuration-validation-vulnerability-in-apache-kylin-the-impact-is-minor-unless-the-kylin-backend-services-are-open-to-public-network2026-10-19 https://bugrater.com/releases/cve-2026-108823-exposure-of-sensitive-information-to-an-unauthorized-actor-during-job-manipulation-in-apache-kylin-the-impact-is-minor-unless-job-services-are-exposed-to-publi2026-10-19 https://bugrater.com/releases/cve-2026-108833-default-startup-profile-miss-security-settings-in-apache-kylin-any-deployment-has-security-setting-profile-turned-on-does-not-impact-this-issue-affects-apa2026-10-19 https://bugrater.com/releases/cve-2026-108837-allocation-of-resources-without-limits-or-throttling-vulnerability-in-apache-kylin-given-an-attacker-has-got-project-admin-permission-an-cache-api-maybe-used2026-10-19 https://bugrater.com/releases/cve-2026-110379-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-vulnerability-in-ays-pro-quiz-maker-quiz-maker-allows-reflected-xss-this-is2026-10-19 https://bugrater.com/releases/cve-2026-110887-improper-control-of-generation-of-code-code-injection-vulnerability-in-hivepress-hivepress-hivepress-allows-remote-code-inclusion-this-issue-affects-hivepre2026-10-19 https://bugrater.com/releases/cve-2026-110898-incorrect-privilege-assignment-vulnerability-in-wpdeveloper-essential-addons-for-elementor-essential-addons-for-elementor-lite-allows-privilege-escalation-this2026-10-19 https://bugrater.com/releases/cve-2026-111398-improper-limitation-of-a-pathname-to-a-restricted-directory-path-traversal-vulnerability-in-pt-norther-lights-production-mapsvg-mapsvg-lite-interactive-vect2026-10-19 https://bugrater.com/releases/cve-2026-111406-unrestricted-upload-of-file-with-dangerous-type-vulnerability-in-pt-norther-lights-production-mapsvg-mapsvg-lite-interactive-vector-maps-allows-upload-a-web-she2026-10-19 https://bugrater.com/releases/cve-2026-111407-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-vulnerability-in-themeum-tutor-lms-tutor-allows-stored-xss-this-issue-affec2026-10-19 https://bugrater.com/releases/cve-2026-111408-deserialization-of-untrusted-data-vulnerability-in-expresstech-quiz-and-survey-master-quiz-master-next-allows-object-injection-this-issue-affects-quiz-and-surve2026-10-19 https://bugrater.com/releases/cve-2026-112100-a-vulnerability-was-determined-in-deeppavlov-up-to-1-7-0-this-affects-the-function-multitaskpipelinepreprocessor-init-of-the-file-deeppavlov-models-preproc2026-10-19 https://bugrater.com/releases/cve-2026-112101-a-vulnerability-was-determined-in-blackbelttechnology-pi-agent-dashboard-up-to-0-8-0-the-affected-element-is-an-unknown-function-of-the-file-blackbelttechnolo2026-10-19 https://bugrater.com/releases/cve-2026-112102-a-vulnerability-was-detected-in-axa-group-nlp-js-4-27-0-this-impacts-the-function-evaluator-walkfunction-of-the-file-packages-evaluator-src-evaluator-js-of-the2026-10-19 https://bugrater.com/releases/cve-2026-112184-misp-contains-a-reflected-cross-site-scripting-xss-vulnerability-in-the-workflow-module-interface-parameter-names-returned-by-the-misp-modules-service-are-re2026-10-19 https://bugrater.com/releases/cve-2026-112188-misp-contains-a-vulnerability-in-its-server-settings-lookup-mechanism-that-allows-an-authenticated-user-to-retrieve-sensitive-configuration-data-that-should-hav2026-10-19 https://bugrater.com/releases/cve-2026-64943-insertion-of-sensitive-information-into-log-file-vulnerability-in-apache-answer-this-issue-affects-apache-answer-through-2-0-2-full-api-keys-are-written2026-10-19 https://bugrater.com/releases/cve-2026-64944-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-vulnerability-in-apache-answer-this-issue-affects-apache-answer-throug2026-10-19 https://bugrater.com/releases/cve-2026-64945-a-vulnerability-in-apache-answer-this-issue-affects-apache-answer-through-2-0-2-the-question-operation-controller-gates-hide-show-operations-on-the-wrong2026-10-19 https://bugrater.com/releases/cve-2026-67249-a-vulnerability-in-apache-answer-this-issue-affects-apache-answer-through-2-0-2-a-verification-code-issued-for-one-email-based-workflow-could-be-accepted2026-10-19 https://bugrater.com/releases/cve-2026-68482-missing-authorization-vulnerability-in-apache-answer-this-issue-affects-apache-answer-through-2-0-2-an-unauthenticated-or-unauthorized-user-can-retrieve2026-10-19 https://bugrater.com/releases/cve-2026-71563-missing-authorization-vulnerability-in-apache-answer-this-issue-affects-apache-answer-through-2-0-2-an-authorization-flaw-in-the-mcp-answer-retrieval-too2026-10-19 https://bugrater.com/releases/cve-2026-76994-exposure-of-sensitive-information-to-an-unauthorized-actor-vulnerability-in-apache-answer-this-issue-affects-apache-answer-through-2-0-2-unauthenticated2026-10-19 https://bugrater.com/releases/cve-2026-79613-vulnerability-in-apache-answer-this-issue-affects-apache-answer-through-2-0-2-unauthenticated-attackers-could-access-comments-associated-with-non-publi2026-10-19 https://bugrater.com/releases/cve-2026-79620-exposure-of-sensitive-information-through-data-queries-vulnerability-in-apache-answer-this-issue-affects-apache-answer-through-2-0-2-an-improper-author2026-10-19 https://bugrater.com/releases/cve-2026-79624-insufficient-session-expiration-vulnerability-in-apache-answer-this-issue-affects-apache-answer-through-2-0-2-insufficient-session-invalidation-allowed2026-10-19 https://bugrater.com/releases/cve-2026-79633-vulnerability-in-apache-answer-this-issue-affects-apache-answer-through-2-0-2-missing-authorization-checks-allowed-authenticated-users-to-perform-actio2026-10-19 https://bugrater.com/releases/cve-2026-86589-incorrect-implementation-of-authentication-algorithm-vulnerability-in-apache-answer-this-issue-affects-apache-answer-through-2-0-2-a-flaw-in-the-user-c2026-10-19 https://bugrater.com/releases/cve-2026-90910-missing-authentication-for-critical-function-vulnerability-in-apache-answer-this-issue-affects-apache-answer-through-2-0-2-the-reaction-api-did-not-enf2026-10-19 https://bugrater.com/releases/cve-2026-112103-a-vulnerability-has-been-found-in-f3-factory-fatfree-core-up-to-3-9-2-this-vulnerability-affects-the-function-curl-of-the-file-web-php-of-the-component-http-c2026-10-19 https://bugrater.com/releases/cve-2026-112104-a-flaw-has-been-found-in-eremef-bandcamp-player-up-to-1-8-33-beta-the-impacted-element-is-an-unknown-function-of-the-file-database-ts-of-the-component-remote-c2026-10-19 https://bugrater.com/releases/cve-2026-112105-a-vulnerability-has-been-found-in-glitterware-passy-up-to-1-10-1-the-affected-element-is-the-function-myhttpoverrides-in-the-library-lib-main-dart-of-the-compo2026-10-19 https://bugrater.com/releases/cve-2026-112106-a-security-vulnerability-has-been-detected-in-tufayellus-tiktok-video-downloader-php-up-to-c4230497bb23dd9c1f81456fe8a982d951feac0d-affected-by-this-issue-is-s2026-10-19 https://bugrater.com/releases/cve-2026-71253-use-of-externally-controlled-input-to-select-classes-or-code-unsafe-reflection-vulnerability-in-apache-johnzon-classconverter-loads-static-initializes2026-10-19 https://bugrater.com/releases/cve-2026-78162-deserialization-of-untrusted-data-vulnerability-in-apache-camel-this-issue-affects-apache-camel-from-4-0-0-before-4-18-5-from-4-19-0-before-4-22-1-the2026-10-19 https://bugrater.com/releases/cve-2026-78163-server-side-request-forgery-ssrf-improper-limitation-of-a-pathname-to-a-restricted-directory-path-traversal-and-exposure-of-sensitive-information-to-an-u2026-10-19 https://bugrater.com/releases/cve-2026-78164-improper-neutralization-of-special-elements-used-in-a-template-engine-and-exposure-of-sensitive-information-to-an-unauthorized-actor-vulnerability-in-apache-cam2026-10-19 https://bugrater.com/releases/cve-2026-78165-deserialization-of-untrusted-data-vulnerability-in-apache-camel-spring-redis-component-this-issue-affects-apache-camel-from-2-11-0-before-4-18-5-from-4-192026-10-19 https://bugrater.com/releases/cve-2026-79983-improper-limitation-of-a-pathname-to-a-restricted-directory-path-traversal-vulnerability-in-apache-camel-ftp-component-this-issue-affects-apache-camel2026-10-19 https://bugrater.com/releases/cve-2026-79984-improper-limitation-of-a-pathname-to-a-restricted-directory-path-traversal-vulnerability-in-apache-camel-mina-sftp-component-this-issue-affects-apache-c2026-10-19 https://bugrater.com/releases/cve-2026-79985-improper-limitation-of-a-pathname-to-a-restricted-directory-path-traversal-vulnerability-in-apache-camel-smb-component-this-issue-affects-apache-camel2026-10-19 https://bugrater.com/releases/cve-2026-79986-improper-limitation-of-a-pathname-to-a-restricted-directory-path-traversal-vulnerability-in-apache-camel-azure-files-component-this-issue-affects-apache2026-10-19 https://bugrater.com/releases/cve-2026-80312-improper-authentication-vulnerability-in-apache-camel-oauth-component-this-issue-affects-apache-camel-from-4-11-0-before-4-18-5-from-4-19-0-before-4-22-12026-10-19 https://bugrater.com/releases/cve-2026-80343-improper-handling-of-case-sensitivity-vulnerability-in-apache-camel-netty-http-component-this-issue-affects-apache-camel-from-4-0-0-before-4-18-5-from-4-12026-10-19 https://bugrater.com/releases/cve-2026-80344-server-side-request-forgery-ssrf-vulnerability-in-apache-camel-as2-component-this-issue-affects-apache-camel-from-4-0-0-before-4-18-5-from-4-19-0-before-42026-10-19 https://bugrater.com/releases/cve-2026-83531-improper-control-of-generation-of-code-code-injection-improper-neutralization-of-special-elements-used-in-an-expression-language-statement-expression-lan2026-10-19 https://bugrater.com/releases/cve-2026-84176-permissive-cross-domain-policy-with-untrusted-domains-vulnerability-in-apache-camel-platform-http-vertx-component-this-issue-affects-apache-camel-from-4-0-02026-10-19 https://bugrater.com/releases/cve-2026-84178-cross-site-request-forgery-csrf-vulnerability-in-apache-camel-oauth-component-this-issue-affects-apache-camel-from-4-11-0-before-4-18-5-from-4-19-0-befo2026-10-19 https://bugrater.com/releases/cve-2026-84180-generation-of-error-message-containing-sensitive-information-vulnerability-in-apache-camel-knative-component-this-issue-affects-apache-camel-from-4-0-0-befor2026-10-19 https://bugrater.com/releases/cve-2026-84181-improper-authentication-vulnerability-in-apache-camel-shiro-component-this-issue-affects-apache-camel-from-4-0-0-before-4-18-5-from-4-19-0-before-4-22-12026-10-19 https://bugrater.com/releases/cve-2026-85243-improper-validation-of-integrity-check-value-vulnerability-in-apache-camel-crypto-pgp-component-this-issue-affects-apache-camel-from-4-0-0-before-4-18-5-fro2026-10-19 https://bugrater.com/releases/cve-2026-85245-exposure-of-data-element-to-wrong-session-vulnerability-in-apache-camel-thrift-component-this-issue-affects-apache-camel-from-4-0-0-before-4-18-5-from-4-12026-10-19 https://bugrater.com/releases/cve-2026-85246-generation-of-error-message-containing-sensitive-information-vulnerability-in-apache-camel-mina-component-this-issue-affects-apache-camel-from-4-0-0-before-42026-10-19 https://bugrater.com/releases/cve-2026-85247-improper-certificate-validation-vulnerability-in-apache-camel-knative-component-this-issue-affects-apache-camel-from-4-0-0-before-4-18-5-from-4-19-0-before2026-10-19 https://bugrater.com/releases/cve-2026-85248-concurrent-execution-using-shared-resource-with-improper-synchronization-race-condition-vulnerability-in-apache-camel-pqc-component-this-issue-affects-apa2026-10-19 https://bugrater.com/releases/cve-2026-85249-improper-input-validation-vulnerability-in-apache-camel-tika-component-this-issue-affects-apache-camel-from-4-0-0-before-4-18-5-from-4-19-0-before-4-22-12026-10-19 https://bugrater.com/releases/cve-2026-85250-improper-restriction-of-xml-external-entity-reference-vulnerability-in-apache-camel-xpath-component-this-issue-affects-apache-camel-from-4-0-0-before-4-18-52026-10-19 https://bugrater.com/releases/cve-2026-85251-exposure-of-sensitive-information-to-an-unauthorized-actor-vulnerability-in-apache-camel-http-component-this-issue-affects-apache-camel-from-4-0-0-before-4-12026-10-19 https://bugrater.com/releases/cve-2026-85254-improper-handling-of-case-sensitivity-vulnerability-in-apache-camel-platform-http-component-this-issue-affects-apache-camel-from-4-0-0-before-4-18-5-from-42026-10-19 https://bugrater.com/releases/cve-2026-85257-generation-of-error-message-containing-sensitive-information-vulnerability-in-apache-camel-cxf-component-this-issue-affects-apache-camel-from-4-0-0-before-42026-10-19 https://bugrater.com/releases/cve-2026-85260-insertion-of-sensitive-information-into-log-file-vulnerability-in-apache-camel-mllp-component-this-issue-affects-apache-camel-from-4-0-0-before-4-18-5-from2026-10-19 https://bugrater.com/releases/cve-2026-85296-exposure-of-data-element-to-wrong-session-vulnerability-in-apache-camel-as2-component-this-issue-affects-apache-camel-from-4-0-0-before-4-18-5-from-4-19-0-b2026-10-19 https://bugrater.com/releases/cve-2026-85300-incorrect-default-permissions-vulnerability-in-apache-camel-pqc-component-this-issue-affects-apache-camel-from-4-12-0-before-4-18-5-from-4-19-0-before-4-222026-10-19 https://bugrater.com/releases/cve-2026-85301-improper-authentication-vulnerability-in-apache-camel-keycloak-component-this-issue-affects-apache-camel-from-4-15-0-before-4-18-5-from-4-19-0-before-4-22-12026-10-19 https://bugrater.com/releases/cve-2026-85312-improper-input-validation-vulnerability-in-apache-camel-core-component-this-issue-affects-apache-camel-from-4-0-0-before-4-18-5-from-4-19-0-before-4-22-12026-10-19 https://bugrater.com/releases/cve-2026-85313-permissive-cross-domain-policy-with-untrusted-domains-vulnerability-in-apache-camel-jetty-component-this-issue-affects-apache-camel-from-4-0-0-before-4-18-52026-10-19 https://bugrater.com/releases/cve-2026-85314-improper-input-validation-vulnerability-in-apache-camel-mail-component-this-issue-affects-apache-camel-from-4-0-0-before-4-18-5-from-4-19-0-before-4-22-12026-10-19 https://bugrater.com/releases/cve-2026-85315-generation-of-error-message-containing-sensitive-information-vulnerability-in-apache-camel-grpc-component-this-issue-affects-apache-camel-from-4-0-0-before-42026-10-19 https://bugrater.com/releases/cve-2026-85316-insufficient-granularity-of-access-control-vulnerability-in-apache-camel-platform-http-component-this-issue-affects-apache-camel-from-4-0-0-before-4-18-5-fr2026-10-19 https://bugrater.com/releases/cve-2026-85317-use-of-cache-containing-sensitive-information-vulnerability-in-apache-camel-http-component-this-issue-affects-apache-camel-from-4-0-0-before-4-18-5-from-4-12026-10-19 https://bugrater.com/releases/cve-2026-88901-improper-restriction-of-xml-external-entity-reference-vulnerability-in-apache-camel-this-issue-affects-apache-camel-from-4-7-0-before-4-18-5-from-4-19-0-b2026-10-19 https://bugrater.com/releases/cve-2026-91858-fopproducer-transforms-the-incoming-xsl-fo-message-body-by-creating-a-javax-xml-transform-transformerfactory-through-transformerfactory-newinstance-and-enabli2026-10-19 https://bugrater.com/releases/trilbymedia-security-releases-october-20262026-10-19 https://bugrater.com/releases/admidio-security-releases-october-20262026-10-19 https://bugrater.com/releases/jovancoding-security-releases-october-20262026-10-19 https://bugrater.com/releases/surrealdb-security-releases-october-20262026-10-19 https://bugrater.com/releases/cure53-security-releases-october-20262026-10-19 https://bugrater.com/releases/better-auth-security-releases-october-20262026-10-19 https://bugrater.com/releases/vrana-security-releases-october-20262026-10-19 https://bugrater.com/releases/gitoxidelabs-security-releases-october-20262026-10-19 https://bugrater.com/releases/librenms-security-releases-october-20262026-10-19 https://bugrater.com/releases/edgelesssys-security-releases-october-20262026-10-19 https://bugrater.com/releases/project-monai-security-releases-october-20262026-10-19 https://bugrater.com/releases/heymrun-security-releases-october-20262026-10-19 https://bugrater.com/releases/zcashfoundation-security-releases-october-20262026-10-19 https://bugrater.com/releases/zitadel-security-releases-october-20262026-10-19 https://bugrater.com/releases/arraytics-security-releases-october-20262026-10-19 https://bugrater.com/releases/bdthemes-security-releases-october-20262026-10-19 https://bugrater.com/releases/edimax-security-releases-october-20262026-10-19 https://bugrater.com/releases/expresstech-security-releases-october-20262026-10-19 https://bugrater.com/releases/leapworx-security-releases-october-20262026-10-19 https://bugrater.com/releases/wpmu-dev-security-releases-october-20262026-10-19 https://bugrater.com/releases/semtech-security-releases-october-20262026-10-19 https://bugrater.com/releases/red-hat-security-releases-july-20262026-10-19 https://bugrater.com/releases/patreon-security-releases-october-20262026-10-19 https://bugrater.com/releases/postgresql-security-releases-october-20262026-10-19 https://bugrater.com/releases/pixelite-security-releases-october-20262026-10-19 https://bugrater.com/releases/gnome-security-releases-july-20252026-10-19 https://bugrater.com/releases/rocketgeek-security-releases-october-20262026-10-19 https://bugrater.com/releases/gleam-security-releases-october-20262026-10-19 https://bugrater.com/releases/sourcecodester-security-releases-october-20262026-10-19 https://bugrater.com/releases/temporal-technologies-inc-security-releases-october-20262026-10-19 https://bugrater.com/releases/kusalkasilva-security-releases-october-20262026-10-19 https://bugrater.com/releases/c4illin-security-releases-october-20262026-10-19 https://bugrater.com/releases/1024-lab-security-releases-october-20262026-10-19 https://bugrater.com/releases/getkirby-security-releases-october-20262026-10-19 https://bugrater.com/releases/netease-security-releases-october-20262026-10-19 https://bugrater.com/releases/red-hat-security-releases-june-20252026-10-19 https://bugrater.com/releases/itsourcecode-security-releases-october-20262026-10-19 https://bugrater.com/releases/tink-crypto-security-releases-october-20262026-10-19 https://bugrater.com/releases/weebzone-security-releases-october-20262026-10-19 https://bugrater.com/releases/netherman-security-releases-october-20262026-10-19 https://bugrater.com/releases/obsidian-security-releases-october-20262026-10-19 https://bugrater.com/releases/karuppiah7890-security-releases-october-20262026-10-19 https://bugrater.com/releases/pelioniot-security-releases-october-20262026-10-19 https://bugrater.com/releases/lukejacksonn-security-releases-october-20262026-10-19 https://bugrater.com/releases/gin-quin-security-releases-october-20262026-10-19 https://bugrater.com/releases/mher-security-releases-october-20262026-10-19 https://bugrater.com/releases/holoviz-security-releases-october-20262026-10-19 https://bugrater.com/releases/rvc-boss-security-releases-october-20262026-10-19 https://bugrater.com/releases/vercel-security-releases-october-20262026-10-19 https://bugrater.com/releases/frappe-security-releases-october-20262026-10-19 https://bugrater.com/releases/spip-security-releases-october-20262026-10-19 https://bugrater.com/releases/cockpit-hq-security-releases-october-20262026-10-19 https://bugrater.com/releases/ayuhito-security-releases-october-20262026-10-19 https://bugrater.com/releases/tianma-if-security-releases-october-20262026-10-19 https://bugrater.com/releases/continuedev-security-releases-october-20262026-10-19 https://bugrater.com/releases/aaif-goose-security-releases-october-20262026-10-19 https://bugrater.com/releases/snapotter-hq-security-releases-october-20262026-10-19 https://bugrater.com/releases/rdfjs-security-releases-october-20262026-10-19 https://bugrater.com/releases/learnhouse-security-releases-october-20262026-10-19 https://bugrater.com/releases/zofe-security-releases-october-20262026-10-19 https://bugrater.com/releases/marceauka-security-releases-october-20262026-10-19 https://bugrater.com/releases/th0rgal-security-releases-october-20262026-10-19 https://bugrater.com/releases/fire-boltt-security-releases-october-20262026-10-19 https://bugrater.com/releases/xdg-security-releases-july-20262026-10-19 https://bugrater.com/releases/gnome-security-releases-june-20262026-10-19 https://bugrater.com/releases/webkul-security-releases-september-20262026-10-19 https://bugrater.com/releases/gnu-security-releases-october-20262026-10-19 https://bugrater.com/releases/thorsten-security-releases-october-20262026-10-19 https://bugrater.com/releases/gohugoio-security-releases-october-20262026-10-19 https://bugrater.com/releases/cve-2026-112107-a-flaw-has-been-found-in-ztxz16-fastllm-up-to-1-8-2-affected-by-this-issue-is-the-function-safetensoritem-createbuffer-of-the-file-src-model-cpp-of-the-compon2026-10-19 https://bugrater.com/releases/cve-2026-112108-a-vulnerability-was-determined-in-ztxz16-fastllm-up-to-0-1-8-2-this-impacts-the-function-ggufbuffer-readstring-of-the-file-third-party-gguf-gguf-cpp-of-the-co2026-10-19 https://bugrater.com/releases/cve-2026-112138-a-flaw-has-been-found-in-diem-project-diem-up-to-5-1-3-the-impacted-element-is-the-function-dmos-join-of-the-file-dmfrontplugin-modules-dmcodeeditor-actions-a2026-10-19 https://bugrater.com/releases/cve-2026-112139-a-vulnerability-has-been-found-in-subhajitkhan-online-clinic-management-system-up-to-e9ee77a8827a1446220fa07ee693dc4d9a29a578-this-affects-an-unknown-function2026-10-19 https://bugrater.com/releases/cve-2026-112140-a-vulnerability-was-found-in-llsourcell-doctor-dignity-up-to-3f2ffb6c892f13b50a708d05900d3227acb40ded-this-impacts-the-function-get-lib-module-of-the-file-pyt2026-10-19 https://bugrater.com/releases/cve-2026-112210-a-flaw-was-found-in-the-rhc-canonical-facts-service-systemd-unit-shipped-with-rhc-the-service-runs-as-root-and-operates-on-a-file-inside-a-directory-owned-by-a2026-10-19 https://bugrater.com/releases/cve-2026-88900-deserialization-of-untrusted-data-vulnerability-in-apache-camel-camel-jgroups-component-this-issue-affects-apache-camel-from-4-0-0-before-4-18-5-from-4-192026-10-19 https://bugrater.com/releases/cve-2026-103314-a-flaw-was-found-in-red-hat-advanced-cluster-security-for-kubernetes-rhacs-the-central-saml-authentication-acs-endpoint-does-not-retain-used-saml-assertion-o2026-10-19 https://bugrater.com/releases/cve-2026-110363-missing-authorization-vulnerability-in-thimpress-learnpress-learnpress-allows-exploiting-incorrectly-configured-access-control-security-levels-this-issue-affect2026-10-19 https://bugrater.com/releases/cve-2026-111410-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-vulnerability-in-e2pdf-com-e2pdf-e2pdf-allows-stored-xss-this-issue-affects2026-10-19 https://bugrater.com/releases/cve-2026-111414-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-vulnerability-in-crocoblock-jetelements-for-elementor-jet-elements-allows-s2026-10-19 https://bugrater.com/releases/cve-2026-111831-missing-authorization-vulnerability-in-wp-manageninja-llc-fluentform-fluentform-allows-exploiting-incorrectly-configured-access-control-security-levels-this-iss2026-10-19 https://bugrater.com/releases/cve-2026-111836-missing-authorization-vulnerability-in-wp-manageninja-llc-fluentcommunity-fluent-community-allows-exploiting-incorrectly-configured-access-control-security-leve2026-10-19 https://bugrater.com/releases/cve-2026-111839-missing-authorization-vulnerability-in-videowhisper-com-broadcast-live-video-videowhisper-live-streaming-integration-allows-exploiting-incorrectly-configured-ac2026-10-19 https://bugrater.com/releases/cve-2026-111845-missing-authorization-vulnerability-in-yith-yith-woocommerce-product-bundles-yith-woocommerce-product-bundles-allows-exploiting-incorrectly-configured-access-co2026-10-19 https://bugrater.com/releases/cve-2026-112141-a-vulnerability-was-determined-in-satya-vinay-events-management-system-up-to-437c77ceb69bf9fe2e3f4f46f7871b83f425383a-affected-is-the-function-mysqli-query-of2026-10-19 https://bugrater.com/releases/cve-2026-112142-a-vulnerability-was-identified-in-satya-vinay-events-management-system-up-to-437c77ceb69bf9fe2e3f4f46f7871b83f425383a-affected-by-this-vulnerability-is-an-unkn2026-10-19 https://bugrater.com/releases/cve-2026-112199-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-vulnerability-in-yith-yith-woocommerce-wishlist-yith-woocommerce-wishlist-a2026-10-19 https://bugrater.com/releases/cve-2026-112214-a-flaw-was-found-in-the-gstreamer-asf-demuxer-in-gst-plugins-ugly-when-parsing-a-simple-index-object-an-attacker-controlled-entry-count-is-used-to-size-a-heap2026-10-19 https://bugrater.com/releases/cve-2026-110008-fastify-oauth2-is-a-fastify-wrapper-for-oauth2-login-flows-in-versions-7-2-0-through-8-3-1-the-state-and-code-verifier-cookies-are-set-without-a-path-attribu2026-10-19 https://bugrater.com/releases/cve-2026-110902-authorization-bypass-through-user-controlled-key-vulnerability-in-liquid-web-stellarwp-event-tickets-event-tickets-allows-exploiting-incorrectly-configured-ac2026-10-19 https://bugrater.com/releases/cve-2026-111828-improper-validation-of-specified-quantity-in-input-vulnerability-in-mamunur-rashid-classified-listing-classified-listing-allows-accessing-functionality-not-prop2026-10-19 https://bugrater.com/releases/cve-2026-111829-improper-control-of-filename-for-include-require-statement-in-php-program-php-remote-file-inclusion-vulnerability-in-wp-mailster-wp-mailster-wp-mailster-all2026-10-19 https://bugrater.com/releases/cve-2026-111883-locust-through-2-46-7-contains-a-cross-site-request-forgery-vulnerability-that-allows-remote-attackers-to-stop-load-tests-or-reset-statistics-via-get-requests-t2026-10-19 https://bugrater.com/releases/cve-2026-111899-kitchenowl-through-0-7-10-contains-a-server-side-request-forgery-vulnerability-in-recipe-import-that-allows-authenticated-household-members-to-bypass-ip-filteri2026-10-19 https://bugrater.com/releases/cve-2026-111915-yank-note-before-3-93-1-contains-a-path-traversal-vulnerability-that-allows-unauthenticated-remote-attackers-to-read-arbitrary-files-via-the-path-or-doc-paramet2026-10-19 https://bugrater.com/releases/cve-2026-111925-mopidy-before-4-0-5-contains-a-path-traversal-vulnerability-that-allows-unauthenticated-clients-to-access-local-files-outside-file-media-dirs-because-filelibrar2026-10-19 https://bugrater.com/releases/cve-2026-111935-notegen-through-0-38-3-contains-an-external-control-of-file-path-vulnerability-in-chat-image-analysis-that-allows-attackers-to-read-local-image-files-via-unvali2026-10-19 https://bugrater.com/releases/cve-2026-111936-sigma-file-manager-through-2-2-0-contains-a-server-side-request-forgery-vulnerability-because-validate-remote-url-in-security-rs-never-checks-resolved-ip-addr2026-10-19 https://bugrater.com/releases/cve-2026-111937-frappe-crm-before-1-81-2-contains-a-missing-authorization-vulnerability-that-allows-authenticated-sales-users-to-access-other-users-crm-notification-records-du2026-10-19 https://bugrater.com/releases/cve-2026-111938-frappe-crm-before-1-74-0-contains-a-missing-authorization-vulnerability-that-allows-authenticated-sales-users-to-modify-other-users-call-logs-by-supplying-arbi2026-10-19 https://bugrater.com/releases/cve-2026-111939-frappe-helpdesk-before-1-26-0-contains-an-authorization-bypass-vulnerability-that-allows-authenticated-portal-users-to-create-tickets-impersonating-other-custom2026-10-19 https://bugrater.com/releases/cve-2026-112143-a-security-flaw-has-been-discovered-in-satya-vinay-events-management-system-up-to-437c77ceb69bf9fe2e3f4f46f7871b83f425383a-affected-by-this-issue-is-some-unkno2026-10-19 https://bugrater.com/releases/cve-2026-112144-a-weakness-has-been-identified-in-satya-vinay-events-management-system-up-to-437c77ceb69bf9fe2e3f4f46f7871b83f425383a-this-affects-an-unknown-part-of-the-file2026-10-19 https://bugrater.com/releases/cve-2026-112145-a-security-vulnerability-has-been-detected-in-speaches-ai-speaches-up-to-0-9-0-rc-3-this-vulnerability-affects-the-function-pyannotediarizationmodelmanager-lo2026-10-19 https://bugrater.com/releases/cve-2026-112146-a-vulnerability-was-detected-in-d-link-e15-m32-r15-and-r32-this-issue-affects-some-unknown-processing-of-the-file-etc-emdaemon-passwd-of-the-component-mqtt2026-10-19 https://bugrater.com/releases/cve-2026-112222-missing-authorization-vulnerability-in-surfer-surfer-surferseo-allows-exploiting-incorrectly-configured-access-control-security-levels-this-issue-affects-surfer2026-10-19 https://bugrater.com/releases/cve-2026-112262-risingwave-before-3-1-0-contains-a-missing-authorization-vulnerability-that-allows-low-privileged-sql-users-to-read-and-write-arbitrary-server-files-by-creating2026-10-19 https://bugrater.com/releases/cve-2026-112263-television-tv-0-15-0-through-0-15-9-contains-an-os-command-injection-vulnerability-that-allows-attackers-to-run-shell-commands-through-improperly-escaped-sing2026-10-19 https://bugrater.com/releases/cve-2026-112264-bentoml-through-1-4-39-contains-a-dockerfile-instruction-injection-vulnerability-that-allows-attackers-to-add-arbitrary-build-instructions-by-embedding-newlines2026-10-19 https://bugrater.com/releases/cve-2026-112265-langbot-through-4-11-0-contains-a-missing-authenticity-verification-vulnerability-that-allows-unauthenticated-attackers-to-inject-forged-lark-feishu-events-by-s2026-10-19 https://bugrater.com/releases/cve-2026-112266-sglang-through-0-5-22-contains-a-denial-of-service-vulnerability-that-allows-api-clients-to-abort-other-users-in-flight-generation-requests-by-supplying-a-shor2026-10-19 https://bugrater.com/releases/cve-2026-112267-sglang-through-0-5-22-in-prefill-decode-disaggregation-mode-contains-a-server-side-request-forgery-vulnerability-that-allows-unauthenticated-attackers-to-trigge2026-10-19 https://bugrater.com/releases/cve-2026-112268-sglang-router-sgl-model-gateway-through-0-3-2-contains-an-authorization-bypass-vulnerability-that-allows-holders-of-the-data-plane-api-key-to-access-mesh-ha-m2026-10-19 https://bugrater.com/releases/cve-2026-112269-sglang-through-0-5-22-with-the-mooncake-disaggregation-backend-accepts-unauthenticated-decode-registration-messages-on-the-prefill-rank-zmq-pull-socket-allowin2026-10-19 https://bugrater.com/releases/cve-2026-112270-sglang-through-0-5-22-with-the-mooncake-disaggregation-backend-contains-an-uncontrolled-memory-allocation-vulnerability-in-handle-staging-rsp-that-lets-unauth2026-10-19 https://bugrater.com/releases/cve-2026-112271-libdisplay-info-through-0-4-0-contains-a-heap-out-of-bounds-read-vulnerability-in-the-displayid-v1-section-parser-in-displayid-c-that-occurs-when-a-data-block-s2026-10-19 https://bugrater.com/releases/cve-2026-112272-libdisplay-info-0-4-0-contains-a-heap-out-of-bounds-read-vulnerability-in-the-displayid-v2-section-parser-in-displayid2-c-that-allows-attackers-to-read-past-the2026-10-19 https://bugrater.com/releases/cve-2026-112273-libtins-through-4-6-contains-a-heap-out-of-bounds-read-vulnerability-in-dns-compose-name-in-src-dns-cpp-that-allows-remote-attackers-to-read-past-the-packet-bu2026-10-19 https://bugrater.com/releases/cve-2026-112274-libtins-through-4-6-contains-an-out-of-bounds-read-vulnerability-in-dns-soa-record-init-that-allows-remote-attackers-to-read-past-buffer-bounds-by-supplying-s2026-10-19 https://bugrater.com/releases/cve-2026-112275-netpbm-through-11-16-00-contains-a-heap-out-of-bounds-write-vulnerability-in-the-rasttopnm-sun-rasterfile-run-length-decoder-pr-load-image-in-converter-other-ra2026-10-19 https://bugrater.com/releases/cve-2026-112276-netpbm-through-11-16-00-contains-a-heap-out-of-bounds-read-vulnerability-in-rasttopnm-that-allows-attackers-to-read-heap-memory-by-supplying-sun-rasterfiles-wit2026-10-19 https://bugrater.com/releases/cve-2026-112277-rdesktop-through-1-9-0-contains-a-heap-out-of-bounds-read-vulnerability-in-process-plane-in-bitmap-c-that-allows-malicious-rdp-servers-to-crash-clients-by-sen2026-10-19 https://bugrater.com/releases/cve-2026-112278-rdesktop-through-1-9-0-contains-a-heap-out-of-bounds-read-vulnerability-in-process-raw-bmpcache-in-orders-c-that-allows-malicious-rdp-servers-to-crash-clients2026-10-19 https://bugrater.com/releases/cve-2026-112279-rdesktop-through-1-9-0-contains-a-heap-out-of-bounds-read-vulnerability-in-process-bmpcache2-in-orders-c-that-allows-malicious-rdp-servers-to-crash-clients-vi2026-10-19 https://bugrater.com/releases/cve-2026-112280-libaribb24-aribb24-through-1-0-3-contains-a-heap-based-buffer-overflow-vulnerability-in-src-parser-c-that-allows-attackers-to-corrupt-heap-memory-via-an-overs2026-10-19 https://bugrater.com/releases/cve-2026-112281-libaribb24-aribb24-through-1-0-3-contains-a-stack-based-buffer-overflow-vulnerability-in-decoder-handle-csi-in-src-decoder-c-that-allows-attackers-to-write2026-10-19 https://bugrater.com/releases/cve-2026-112282-videolan-libbluray-through-1-5-1-contains-an-out-of-bounds-read-vulnerability-in-clpi-access-point-that-allows-attackers-to-crash-applications-by-supplying-a2026-10-19 https://bugrater.com/releases/cve-2026-112283-videolan-libbluray-through-1-5-1-contains-an-uncontrolled-memory-allocation-vulnerability-in-parse-extent-start-points-in-clpi-parse-c-that-trusts-the-num-po2026-10-19 https://bugrater.com/releases/cve-2026-112284-libaribcaption-1-1-0-through-1-1-2-contains-a-global-out-of-bounds-read-in-decoderimpl-handleglgr-that-reads-past-the-78-entry-klatinspecialtable-without-an2026-10-19 https://bugrater.com/releases/cve-2026-112285-thelia-before-3-1-5-and-3-2-x-before-3-2-4-contains-a-business-logic-vulnerability-that-allows-authenticated-customers-to-bypass-coupon-usage-limits-because-usa2026-10-19 https://bugrater.com/releases/cve-2026-112286-krayin-crm-before-2-2-7-contains-an-insecure-direct-object-reference-vulnerability-that-allows-scope-restricted-authenticated-users-to-read-other-users-quotes2026-10-19 https://bugrater.com/releases/cve-2026-112287-krayin-crm-before-2-2-7-contains-a-broken-object-level-authorization-vulnerability-in-emailcontroller-write-actions-that-allows-scope-restricted-authenticated-u2026-10-19 https://bugrater.com/releases/cve-2026-112288-krayin-crm-2-2-5-before-2-2-7-contains-a-server-side-request-forgery-filter-bypass-that-allows-users-with-webhook-permissions-to-reach-internal-addresses-via-dn2026-10-19 https://bugrater.com/releases/cve-2026-112289-koalixcrm-through-1-14-0-contains-a-stored-cross-site-scripting-vulnerability-that-allows-staff-users-to-inject-script-by-storing-malicious-task-titles-rendered2026-10-19 https://bugrater.com/releases/cve-2026-112290-intelligence-community-ui-kit-ukic-canary-web-components-3-0-0-canary-12-before-3-0-0-canary-48-contains-a-dom-based-cross-site-scripting-vulnerability-in-ic-t2026-10-19 https://bugrater.com/releases/cve-2026-112291-flarum-extension-manager-2-0-0-beta-1-before-2-0-0-beta-8-lacks-authentication-and-admin-checks-on-the-taskresource-index-endpoint-allowing-unauthenticated-inf2026-10-19 https://bugrater.com/releases/cve-2026-112292-checkcle-through-1-6-0-contains-a-missing-authorization-vulnerability-that-allows-unauthenticated-attackers-to-read-modify-and-delete-records-because-shipped-p2026-10-19 https://bugrater.com/releases/cve-2026-112293-boxyhq-enterprise-saas-starter-kit-through-1-6-0-contains-a-missing-authorization-vulnerability-that-allows-non-owner-team-members-to-manage-billing-because-pay2026-10-19 https://bugrater.com/releases/cve-2026-112294-flycms-through-commit-edfdf724-contains-a-missing-authorization-vulnerability-in-actionservice-counter-that-allows-authenticated-users-to-modify-other-users2026-10-19 https://bugrater.com/releases/cve-2026-112295-flycms-through-commit-edfdf724-contains-a-mass-assignment-vulnerability-that-allows-authenticated-users-to-overwrite-protected-account-columns-by-submitting-ext2026-10-19 https://bugrater.com/releases/cve-2026-112296-flycms-through-commit-edfdf724-contains-a-default-credentials-vulnerability-that-allows-unauthenticated-remote-attackers-to-gain-super-administrator-access-via2026-10-19 https://bugrater.com/releases/cve-2026-112147-a-vulnerability-was-found-in-ai-genius-automations-octoally-up-to-1-0-87-the-impacted-element-is-an-unknown-function-of-the-file-server-src-index-ts-performin2026-10-19 https://bugrater.com/releases/cve-2026-112149-a-vulnerability-was-identified-in-vraj404-criminal-management-system-up-to-2808d057e7ddc5295519a487365b0cacfd0ba8c4-this-impacts-the-function-move-uploaded-fil2026-10-19 https://bugrater.com/releases/cve-2026-112150-a-security-flaw-has-been-discovered-in-vraj404-criminal-management-system-up-to-2808d057e7ddc5295519a487365b0cacfd0ba8c4-affected-is-an-unknown-function-of-the2026-10-19 https://bugrater.com/releases/cve-2026-112151-a-weakness-has-been-identified-in-vraj404-criminal-management-system-up-to-2808d057e7ddc5295519a487365b0cacfd0ba8c4-affected-by-this-vulnerability-is-an-unknow2026-10-19 https://bugrater.com/releases/cve-2026-112328-the-sensei-lms-wordpress-plugin-before-4-26-4-contains-a-broken-access-control-vulnerability-in-the-add-new-module-term-ajax-handler-that-allows-authenticated-t2026-10-19 https://bugrater.com/releases/cve-2026-112329-the-sensei-lms-wordpress-plugin-before-4-26-4-contains-a-broken-access-control-vulnerability-in-the-legacy-save-new-message-handler-hooked-on-the-init-action-w2026-10-19 https://bugrater.com/releases/cve-2026-109431-camunda-7-24-0-before-7-24-14-and-7-23-0-before-7-23-17-contains-a-missing-authorization-check-vulnerability-in-engine-rest-task-sub-resources-that-allows-authe2026-10-19 https://bugrater.com/releases/cve-2026-109432-camunda-7-24-0-before-7-24-14-and-7-23-0-before-7-23-17-contains-an-expression-injection-vulnerability-where-adhocqueryvalidator-validate-fails-to-check-sub-q2026-10-19 https://bugrater.com/releases/cve-2026-109433-camunda-7-24-0-before-7-24-14-and-7-23-0-before-7-23-17-contains-an-authorization-bypass-vulnerability-in-the-cockpit-webapp-that-allows-authenticated-attackers2026-10-19 https://bugrater.com/releases/cve-2026-112152-a-security-vulnerability-has-been-detected-in-vraj404-criminal-management-system-up-to-2808d057e7ddc5295519a487365b0cacfd0ba8c4-affected-by-this-issue-is-the-f2026-10-19 https://bugrater.com/releases/cve-2026-112153-a-vulnerability-was-detected-in-vraj404-criminal-management-system-up-to-2808d057e7ddc5295519a487365b0cacfd0ba8c4-this-affects-the-function-mysqli-error-of-the2026-10-19 https://bugrater.com/releases/cve-2026-112157-a-weakness-has-been-identified-in-memtensor-memmy-agent-up-to-1-0-9-1-1-1-1-2-2-the-impacted-element-is-the-function-requireadminwrite-of-the-file-memory-src-s2026-10-19 https://bugrater.com/releases/cve-2026-112158-a-weakness-has-been-identified-in-mikrotik-routeros-up-to-6-40-5-6-44-7-20-8-impacted-is-the-function-same-check-of-the-file-ipt-same-ko-executing-a-manipulat2026-10-19 https://bugrater.com/releases/cve-2026-112303-gdevelop-desktop-app-through-5-6-284-contains-a-credential-leak-vulnerability-that-allows-attackers-to-steal-the-gd-resource-cookie-by-supplying-attacker-contro2026-10-19 https://bugrater.com/releases/cve-2026-112304-doctr-through-1-1-0-contains-an-unsafe-deserialization-vulnerability-in-load-pretrained-params-that-loads-checkpoints-with-torch-load-without-weights-only-tru2026-10-19 https://bugrater.com/releases/cve-2026-112305-semaphore-ui-through-2-19-16-contains-a-remote-code-execution-vulnerability-that-allows-users-with-the-task-runner-role-to-override-protected-ansible-variables2026-10-19 https://bugrater.com/releases/cve-2026-112306-nocobase-nocobase-plugin-collection-sql-through-2-2-28-contains-an-sql-injection-vulnerability-that-allows-privileged-users-to-store-unvalidated-sql-by-bypassi2026-10-19 https://bugrater.com/releases/cve-2026-112307-sqlparse-through-0-6-0-contains-a-php-code-injection-vulnerability-that-allows-attackers-to-inject-php-expressions-by-supplying-sql-text-containing-unescaped-do2026-10-19 https://bugrater.com/releases/cve-2026-112308-crewai-tools-through-1-15-28-contains-a-server-side-request-forgery-vulnerability-in-seleniumscrapingtool-that-allows-attackers-to-fetch-internal-resources-beca2026-10-19 https://bugrater.com/releases/cve-2026-112309-rvf-set-get-before-7-0-4-contains-a-prototype-pollution-vulnerability-in-setpath-that-allows-unauthenticated-attackers-to-overwrite-properties-of-shared-built2026-10-19 https://bugrater.com/releases/cve-2026-112310-docling-core-through-2-102-0-contains-a-local-file-disclosure-vulnerability-that-allows-attackers-to-read-local-images-by-supplying-plain-filesystem-paths-in-im2026-10-19 https://bugrater.com/releases/cve-2026-112363-crawl4ai-from-0-8-7-through-0-9-5-contains-a-server-side-request-forgery-vulnerability-in-the-docker-api-server-that-allows-unauthenticated-attackers-to-bypass2026-10-19 https://bugrater.com/releases/cve-2026-112366-picomatch-through-4-0-7-contains-a-regular-expression-denial-of-service-vulnerability-that-allows-attackers-to-block-the-event-loop-by-supplying-single-branch-r2026-10-19 https://bugrater.com/releases/cve-2026-12254-netskope-is-notified-about-a-potential-gap-in-its-agent-nsclient-where-a-system-with-netskope-client-while-connecting-to-an-access-point-with-captive-portal-s2026-10-19 https://bugrater.com/releases/cve-2026-103038-pingtools-network-utilities-4-64-free-accepts-an-arbitrary-value-in-the-host-field-of-a-watcher-icmp-service-incorporating-that-value-into-a-command-string-exe2026-10-19 https://bugrater.com/releases/cve-2026-107186-an-unauthenticated-user-can-send-a-dwr-request-with-ispassworduppercase-as-one-call-method-and-the-next-call-method-can-be-set-to-a-run-workflow-rule-this-allo2026-10-19 https://bugrater.com/releases/cve-2026-107187-a-user-can-access-any-database-details-such-as-usernames-and-passwords-by-sending-a-dwr-request-with-a-specified-workflow-rule-the-authentication-bypass-vulne2026-10-19 https://bugrater.com/releases/cve-2026-107188-a-user-can-upload-export-reports-with-any-file-contents-and-specify-any-contents-jsp-code-can-be-uploaded-jspx-can-be-specified-as-the-file-extension-and-any2026-10-19 https://bugrater.com/releases/cve-2026-112159-a-security-vulnerability-has-been-detected-in-jumpserver-up-to-4-10-19-the-affected-element-is-an-unknown-function-of-the-component-template-rendering-the-man2026-10-19 https://bugrater.com/releases/cve-2026-112190-a-security-vulnerability-has-been-detected-in-webkul-aureus-erp-up-to-1-6-0-this-issue-affects-some-unknown-processing-of-the-file-composer-json-such-manipula2026-10-19 https://bugrater.com/releases/cve-2026-112193-a-vulnerability-was-detected-in-webkul-aureus-erp-up-to-1-6-0-impacted-is-an-unknown-function-of-the-file-plugins-webkul-security-src-filament-resources-userre2026-10-19 https://bugrater.com/releases/cve-2026-112195-a-flaw-has-been-found-in-fusionpbx-up-to-5-4-4-5-5-7-5-6-5-the-affected-element-is-an-unknown-function-of-the-file-app-dialplans-resources-classes-dialplan-php2026-10-19 https://bugrater.com/releases/code-projects-security-releases-october-20262026-10-19 https://bugrater.com/releases/red-lion-controls-security-releases-october-20262026-10-19 https://bugrater.com/releases/sipay-electronic-money-and-payment-services-inc-security-releases-october-20262026-10-19 https://bugrater.com/releases/ericlbuehler-security-releases-october-20262026-10-19 https://bugrater.com/releases/linketic-security-releases-october-20262026-10-19 https://bugrater.com/releases/philz1337x-security-releases-october-20262026-10-19 https://bugrater.com/releases/modeltc-security-releases-october-20262026-10-19 https://bugrater.com/releases/repository-security-releases-october-20262026-10-19 https://bugrater.com/releases/imoonlab-security-releases-october-20262026-10-19 https://bugrater.com/releases/rapid7-security-releases-october-20262026-10-19 https://bugrater.com/releases/red-hat-security-releases-may-20262026-10-19 https://bugrater.com/releases/gitlab-security-releases-october-20262026-10-19 https://bugrater.com/releases/yoshitomo-matsubara-security-releases-october-20262026-10-19 https://bugrater.com/releases/k2-fsa-security-releases-october-20262026-10-19 https://bugrater.com/releases/tiiny-ai-security-releases-october-20262026-10-19 https://bugrater.com/releases/opens100-project-security-releases-october-20262026-10-19 https://bugrater.com/releases/himovo-security-releases-october-20262026-10-19 https://bugrater.com/releases/ageerle-security-releases-october-20262026-10-19 https://bugrater.com/releases/mynaparrot-security-releases-october-20262026-10-19 https://bugrater.com/releases/videolan-security-releases-february-20262026-10-19 https://bugrater.com/releases/tinyllava-security-releases-october-20262026-10-19 https://bugrater.com/releases/tensorlayer-security-releases-october-20262026-10-19 https://bugrater.com/releases/red-hat-security-releases-november-20242026-10-19 https://bugrater.com/releases/red-hat-security-releases-january-20252026-10-19 https://bugrater.com/releases/red-hat-security-releases-february-20252026-10-19 https://bugrater.com/releases/red-hat-security-releases-april-20242026-10-19 https://bugrater.com/releases/red-hat-security-releases-october-20242026-10-19 https://bugrater.com/releases/paddlepaddle-security-releases-october-20262026-10-19 https://bugrater.com/releases/storyicon-security-releases-october-20262026-10-19 https://bugrater.com/releases/papercut-security-releases-september-20262026-10-19 https://bugrater.com/releases/itsmeravitejak-security-releases-october-20262026-10-19 https://bugrater.com/releases/d-link-security-releases-october-20262026-10-19 https://bugrater.com/releases/foliovision-security-releases-october-20262026-10-19 https://bugrater.com/releases/idx-broker-security-releases-october-20262026-10-19 https://bugrater.com/releases/wpweaver-security-releases-october-20262026-10-19 https://bugrater.com/releases/griden-security-releases-october-20262026-10-19 https://bugrater.com/releases/wp-testimonials-security-releases-october-20262026-10-19 https://bugrater.com/releases/wp-businessdirectory-security-releases-october-20262026-10-19 https://bugrater.com/releases/datasolution-security-releases-october-20262026-10-19 https://bugrater.com/releases/royal-plugins-security-releases-october-20262026-10-19 https://bugrater.com/releases/inisev-security-releases-october-20262026-10-19 https://bugrater.com/releases/multivendorx-security-releases-august-20262026-10-19 https://bugrater.com/releases/polaris-security-releases-october-20262026-10-19 https://bugrater.com/releases/progress-software-security-releases-october-20262026-10-19 https://bugrater.com/releases/mozilla-security-releases-october-20262026-10-19 https://bugrater.com/releases/wavlink-security-releases-october-20262026-10-19 https://bugrater.com/releases/wpgraphql-security-releases-october-20262026-10-19 https://bugrater.com/releases/bitpressadmin-security-releases-october-20262026-10-19 https://bugrater.com/releases/acyba-security-releases-october-20262026-10-19 https://bugrater.com/releases/zohocorp-security-releases-october-20262026-10-19 https://bugrater.com/releases/wpmart-security-releases-october-20262026-10-19 https://bugrater.com/releases/spacetime-security-releases-october-20262026-10-19 https://bugrater.com/releases/adithyayelloju-security-releases-october-20262026-10-19 https://bugrater.com/releases/themegrill-security-releases-october-20262026-10-19 https://bugrater.com/releases/pluginus-net-security-releases-october-20262026-10-19 https://bugrater.com/releases/ideabox-creations-security-releases-october-20262026-10-19 https://bugrater.com/releases/fullworks-plugins-security-releases-october-20262026-10-19 https://bugrater.com/releases/karol-na-vysko-ilov-security-releases-october-20262026-10-19 https://bugrater.com/releases/brainstorm-force-security-releases-october-20262026-10-19 https://bugrater.com/releases/tms-security-releases-october-20262026-10-19 https://bugrater.com/releases/wp-manageninja-llc-security-releases-october-20262026-10-19 https://bugrater.com/releases/divasoft-software-and-e-commerce-inc-security-releases-october-20262026-10-19 https://bugrater.com/releases/youmind-security-releases-october-20262026-10-19 https://bugrater.com/releases/hossni-mubarak-security-releases-october-20262026-10-19 https://bugrater.com/releases/calcom-security-releases-october-20262026-10-19 https://bugrater.com/releases/link-whisper-inc-security-releases-october-20262026-10-19 https://bugrater.com/releases/wbond-security-releases-october-20262026-10-19 https://bugrater.com/releases/beautifier-security-releases-october-20262026-10-19 https://bugrater.com/releases/typo3-security-releases-october-20262026-10-19 https://bugrater.com/releases/cve-2026-105810-tapo-c320ws-v2-0-contains-an-authenticated-stack-based-buffer-overflow-in-the-local-onboarding-wi-fi-configuration-path-an-authenticated-attacker-on-the-adjace2026-10-19 https://bugrater.com/releases/cve-2026-112247-a-weakness-has-been-identified-in-wuxi-wubang-security-software-five-in-one-safety-production-management-information-system-up-to-3-5-this-affects-an-unknown-f2026-10-19 https://bugrater.com/releases/cve-2026-112248-a-security-vulnerability-has-been-detected-in-grandnode-grandnode2-up-to-2-3-0-this-impacts-the-function-productimportdataobject-prepareproductpictures-of-the2026-10-19 https://bugrater.com/releases/cve-2026-112377-ccc-attestation-sig-attested-tls-poc-through-commit-731ca82-fails-to-bind-early-attestation-evidence-to-the-tls-connection-allowing-attackers-to-relay-valid-ev2026-10-19 https://bugrater.com/releases/cve-2026-11319-ticktick-android-application-com-ticktick-task-8-2-2-0-contains-a-path-traversal-vulnerability-in-its-exported-sharereceiveactivity-that-allows-a-malicious-lo2026-10-19 https://bugrater.com/releases/cve-2026-109434-fenrir-sleipnir-browser-for-android-before-3-9-0-contains-a-ui-spoofing-vulnerability-that-allows-remote-attackers-to-impersonate-the-browser-s-trusted-address2026-10-19 https://bugrater.com/releases/cve-2026-109437-cognition-before-0-13-0-contains-an-unauthenticated-remote-code-execution-vulnerability-due-to-defaulting-its-agent-sandbox-backend-to-local-execution-and-shipp2026-10-19 https://bugrater.com/releases/cve-2026-112249-a-vulnerability-was-detected-in-grandnode-grandnode2-up-to-2-3-0-affected-is-the-function-html-raw-of-the-file-src-web-grand-web-views-product-product-layout-s2026-10-19 https://bugrater.com/releases/cve-2026-112251-a-vulnerability-was-detected-in-antoinersx-clawhost-up-to-0-0-45-this-affects-the-function-handlerequest-of-the-file-apps-clawhostgo-src-main-services-reversep2026-10-19 https://bugrater.com/releases/cve-2026-112252-a-vulnerability-has-been-found-in-wuxi-wubang-security-software-wubang-five-in-one-safety-production-management-information-system-up-to-3-5-affected-is-the-fu2026-10-19 https://bugrater.com/releases/cve-2026-112259-a-flaw-was-found-in-gimp-importing-a-crafted-sbz-palette-without-a-color-model-attribute-can-cause-a-null-pointer-dereference-during-string-comparison-resulti2026-10-19 https://bugrater.com/releases/cve-2026-112254-a-vulnerability-was-found-in-agit8or1-clientst0r-up-to-3-17-586-affected-by-this-vulnerability-is-the-function-fetch-html-of-the-file-locations-services-prope2026-10-19 https://bugrater.com/releases/cve-2026-112260-a-flaw-was-found-in-gimp-opening-a-crafted-xcf-with-a-malformed-text-layer-parasite-can-cause-a-heap-out-of-bounds-read-disclosing-adjacent-heap-data-into-lay2026-10-19 https://bugrater.com/releases/cve-2026-112297-a-flaw-has-been-found-in-ptbsare-anx-calibre-manager-up-to-1-13-12-the-impacted-element-is-the-function-llmclient-chat-of-the-file-blueprints-api-llm-py-of-the2026-10-19 https://bugrater.com/releases/cve-2026-112770-craft-cms-4-x-before-4-18-8-and-5-x-before-5-11-0-contains-a-remote-code-execution-vulnerability-in-the-twig-group-filter-which-invokes-non-string-arrow-argume2026-10-19 https://bugrater.com/releases/cve-2026-112771-craft-cms-4-0-0-before-4-18-8-and-5-0-0-before-5-11-0-contains-a-twig-sandbox-allowlist-bypass-because-the-column-contains-filterbyvalue-index-where-and-mu2026-10-19 https://bugrater.com/releases/cve-2026-112772-craft-cms-from-5-0-0-before-5-11-0-contains-a-remote-code-execution-vulnerability-that-allows-authenticated-control-panel-users-to-escape-the-twig-sandbox-via-a2026-10-19 https://bugrater.com/releases/cve-2026-112773-craft-cms-from-5-0-0-before-5-11-0-contains-a-remote-code-execution-vulnerability-that-allows-authenticated-control-panel-users-to-escape-the-twig-sandbox-by-pa2026-10-19 https://bugrater.com/releases/cve-2026-112774-craft-cms-from-5-8-0-before-5-11-0-contains-a-remote-code-execution-vulnerability-that-allows-authenticated-administrators-to-inject-yii-behaviors-by-supplying2026-10-19 https://bugrater.com/releases/cve-2026-112775-craft-cms-from-5-0-0-before-5-11-0-contains-an-authentication-bypass-vulnerability-that-allows-attackers-to-reuse-verification-codes-because-users-verify-email2026-10-19 https://bugrater.com/releases/cve-2026-112778-traefik-before-2-11-46-3-x-before-3-6-17-and-3-7-0-lack-namespace-validation-for-ingress-and-service-annotations-in-the-kubernetes-ingress-provider-allowing2026-10-19 https://bugrater.com/releases/cve-2026-112779-grav-api-plugin-grav-plugin-api-1-0-40-before-1-0-42-caches-a-full-translation-dictionary-for-every-well-formed-language-code-sent-to-the-unauthenticated-get2026-10-19 https://bugrater.com/releases/cve-2026-112780-grav-from-2-0-15-before-2-2-2-contains-an-allowlist-bypass-vulnerability-that-allows-page-editors-to-call-arbitrary-public-static-methods-by-renaming-flex-form2026-10-19 https://bugrater.com/releases/cve-2026-112781-grav-from-2-0-0-before-2-2-2-contains-an-information-disclosure-vulnerability-that-allows-page-editors-to-read-protected-configuration-by-adding-config-direc2026-10-19 https://bugrater.com/releases/cve-2026-112782-grav-1-7-53-before-1-7-53-5-and-2-0-0-rc-8-before-2-2-2-contains-a-resource-exhaustion-vulnerability-that-allows-anonymous-visitors-to-bypass-the-system-images2026-10-19 https://bugrater.com/releases/cve-2026-112299-a-vulnerability-was-determined-in-smrealms-smr-up-to-f40380c017bc35cd8db6ffdb9d4e78bf65b9d43d-affected-is-the-function-isurlreachable-of-the-file-src-pages-acc2026-10-19 https://bugrater.com/releases/cve-2026-112300-a-vulnerability-was-identified-in-diffsk-configobj-up-to-5-0-9-affected-by-this-vulnerability-is-the-function-sectionmarker-of-the-file-configobj-init-py2026-10-19 https://bugrater.com/releases/cve-2026-112301-a-security-flaw-has-been-discovered-in-orbitale-imagemagick-php-up-to-3-3-5-affected-by-this-issue-is-the-function-command-font-of-the-file-src-command-php-t2026-10-19 https://bugrater.com/releases/cve-2026-112302-a-weakness-has-been-identified-in-kiwilan-php-archive-up-to-2-3-02-this-affects-the-function-archivezip-extract-of-the-file-src-readers-archivezip-php-of-the2026-10-19 https://bugrater.com/releases/cve-2026-112257-a-flaw-was-found-in-gimp-the-psd-thumbnail-resource-loader-performs-a-bgr-to-rgb-channel-swap-with-a-fixed-3-byte-stride-and-does-not-verify-that-the-jpeg-thum2026-10-19 https://bugrater.com/releases/cve-2026-112258-a-flaw-was-found-in-gimp-the-xcf-loader-can-leave-a-dangling-pointer-in-the-linked-channels-list-when-a-linked-channel-is-later-destroyed-via-a-selection-prope2026-10-19 https://bugrater.com/releases/cve-2026-112261-a-flaw-was-found-in-gimp-opening-a-crafted-xcf-that-selects-a-path-and-then-fails-to-load-that-path-can-cause-a-use-after-free-in-the-main-process-leading-to2026-10-19 https://bugrater.com/releases/cve-2026-112358-a-weakness-has-been-identified-in-tibillet-lespass-up-to-10e87909c5d526dffa6d424c104fc12860740537-this-vulnerability-affects-the-function-get-img-from-url-of-t2026-10-19 https://bugrater.com/releases/cve-2026-112360-a-security-vulnerability-has-been-detected-in-netis-eap930-1-250905-115454-this-issue-affects-the-function-return200-of-the-file-cgi-bin-debug-of-the-componen2026-10-19 https://bugrater.com/releases/cve-2026-112361-a-vulnerability-has-been-found-in-dolibarr-up-to-23-0-2-the-impacted-element-is-an-unknown-function-of-the-file-htdocs-document-php-of-the-component-csp-such2026-10-19 https://bugrater.com/releases/cve-2026-53995-mlflow-3-17-1-and-earlier-contains-a-path-traversal-vulnerability-in-the-filestore-tracking-backend-that-allows-unauthenticated-attackers-to-control-filesystem2026-10-19 https://bugrater.com/releases/cve-2026-112370-a-vulnerability-was-found-in-h3c-magic-nx15-100r017-this-issue-affects-the-function-sub-416874-of-the-file-usr-bin-usrlist-performing-a-manipulation-results2026-10-19 https://bugrater.com/releases/cve-2026-112371-a-vulnerability-was-determined-in-h3c-magic-nx15-nx15v100r017-impacted-is-the-function-write-of-the-file-api-esps-of-the-component-rpc-interface-executing-a2026-10-19 https://bugrater.com/releases/cve-2026-112372-a-weakness-has-been-identified-in-h3c-magic-nx15-v100r017-this-affects-the-function-importprofile-of-the-file-api-upload-this-manipulation-of-the-argument-fi2026-10-19 https://bugrater.com/releases/jbardin-security-releases-october-20262026-10-20 https://bugrater.com/releases/mosaicml-security-releases-october-20262026-10-20 https://bugrater.com/releases/deeppavlov-security-releases-october-20262026-10-20 https://bugrater.com/releases/seldonio-security-releases-october-20262026-10-20 https://bugrater.com/releases/trendnet-security-releases-october-20262026-10-20 https://bugrater.com/releases/publiccms-security-releases-october-20262026-10-20 https://bugrater.com/releases/fit2cloud-security-releases-october-20262026-10-20 https://bugrater.com/releases/payload-security-releases-october-20262026-10-20 https://bugrater.com/releases/akhilrex-security-releases-october-20262026-10-20 https://bugrater.com/releases/lektor-security-releases-october-20262026-10-20 https://bugrater.com/releases/aomei-security-releases-june-20262026-10-20 https://bugrater.com/releases/conductor-oss-security-releases-october-20262026-10-20 https://bugrater.com/releases/authtake-technology-inc-security-releases-october-20262026-10-20 https://bugrater.com/releases/kortix-ai-security-releases-october-20262026-10-20 https://bugrater.com/releases/smp46-security-releases-october-20262026-10-20 https://bugrater.com/releases/bender-security-releases-october-20262026-10-20 https://bugrater.com/releases/chenhg5-security-releases-october-20262026-10-20 https://bugrater.com/releases/schlagmichdoch-security-releases-october-20262026-10-20 https://bugrater.com/releases/decolua-security-releases-october-20262026-10-20 https://bugrater.com/releases/floci-io-security-releases-october-20262026-10-20 https://bugrater.com/releases/tabularisdb-security-releases-october-20262026-10-20 https://bugrater.com/releases/jeecgboot-security-releases-october-20262026-10-20 https://bugrater.com/releases/dayforce-security-releases-september-20262026-10-20 https://bugrater.com/releases/macrozheng-security-releases-october-20262026-10-20 https://bugrater.com/releases/54yyyu-security-releases-october-20262026-10-20 https://bugrater.com/releases/studio-saelix-security-releases-october-20262026-10-20 https://bugrater.com/releases/highwarden-security-releases-october-20262026-10-20 https://bugrater.com/releases/instantsoft-security-releases-october-20262026-10-20 https://bugrater.com/releases/furion-security-releases-october-20262026-10-20 https://bugrater.com/releases/berriai-security-releases-october-20262026-10-20 https://bugrater.com/releases/gz-yami-security-releases-october-20262026-10-20 https://bugrater.com/releases/coreunion-security-releases-october-20262026-10-20 https://bugrater.com/releases/1panel-dev-security-releases-october-20262026-10-20 https://bugrater.com/releases/insta-security-releases-august-20262026-10-20 https://bugrater.com/releases/fastify-security-releases-october-20262026-10-20 https://bugrater.com/releases/hbai-ltd-security-releases-october-20262026-10-20 https://bugrater.com/releases/honojs-security-releases-october-20262026-10-20 https://bugrater.com/releases/nltk-security-releases-october-20262026-10-20 https://bugrater.com/releases/espocrm-security-releases-october-20262026-10-20 https://bugrater.com/releases/froxlor-security-releases-october-20262026-10-20 https://bugrater.com/releases/wazuh-security-releases-october-20262026-10-20 https://bugrater.com/releases/orneryd-security-releases-october-20262026-10-20 https://bugrater.com/releases/phpipam-security-releases-october-20262026-10-20 https://bugrater.com/releases/cheshire-cat-ai-security-releases-october-20262026-10-20 https://bugrater.com/releases/the-commit-company-security-releases-october-20262026-10-20 https://bugrater.com/releases/miniflux-security-releases-october-20262026-10-20 https://bugrater.com/releases/arp242-security-releases-october-20262026-10-20 https://bugrater.com/releases/vearch-security-releases-october-20262026-10-20 https://bugrater.com/releases/modu-ai-security-releases-october-20262026-10-20 https://bugrater.com/releases/youtransfer-security-releases-october-20262026-10-20 https://bugrater.com/releases/neterbit-security-releases-october-20262026-10-20 https://bugrater.com/releases/zhayujie-security-releases-october-20262026-10-20 https://bugrater.com/releases/coreshop-security-releases-october-20262026-10-20 https://bugrater.com/releases/unicomai-security-releases-october-20262026-10-20 https://bugrater.com/releases/erpipe-org-security-releases-october-20262026-10-20 https://bugrater.com/releases/ph7software-security-releases-october-20262026-10-20 https://bugrater.com/releases/colorful-security-releases-october-20262026-10-20 https://bugrater.com/releases/oraios-security-releases-october-20262026-10-20 https://bugrater.com/releases/marcopiovanello-security-releases-october-20262026-10-20 https://bugrater.com/releases/abilityai-security-releases-october-20262026-10-20 https://bugrater.com/releases/appwrite-security-releases-october-20262026-10-20 https://bugrater.com/releases/erzhongxmu-security-releases-october-20262026-10-20 https://bugrater.com/releases/david-crty-security-releases-october-20262026-10-20 https://bugrater.com/releases/girishsaraf-security-releases-october-20262026-10-20 https://bugrater.com/releases/commvault-security-releases-october-20262026-10-20 https://bugrater.com/releases/flexera-security-releases-october-20262026-10-20 https://bugrater.com/releases/h3c-security-releases-october-20262026-10-20 https://bugrater.com/releases/huawei-security-releases-october-20262026-10-20 https://bugrater.com/releases/cve-2026-112373-a-security-vulnerability-has-been-detected-in-h3c-magic-nx15-nx15v100r017-this-impacts-the-function-sub-416874-of-the-file-usr-bin-usrlist-such-manipulation2026-10-20 https://bugrater.com/releases/cve-2026-105297-summary-before-version-0-8-1-pingora-s-http-2-server-used-the-h2-crate-s-default-limits-unless-the-application-set-its-own-16-mib-decoded-header-list-size-a2026-10-20 https://bugrater.com/releases/cve-2026-105298-summary-before-version-0-9-0-pingora-accepted-http-2-requests-whose-host-header-differed-from-the-authority-pseudo-header-request-filters-cache-keys-and2026-10-20 https://bugrater.com/releases/cve-2026-109395-ning-compress-lzf-before-1-2-0-contains-an-out-of-bounds-memory-access-vulnerability-in-the-sun-misc-unsafe-based-unsafechunkdecoder-that-fails-to-validate-back2026-10-20 https://bugrater.com/releases/cve-2026-109440-langalpha-through-2026-09-07-contains-an-indirect-prompt-injection-vulnerability-that-allows-remote-attackers-to-execute-shell-commands-or-python-by-planting-in2026-10-20 https://bugrater.com/releases/cve-2026-109441-langalpha-through-2026-09-07-contains-an-improper-isolation-vulnerability-that-places-all-tenants-sandbox-containers-on-docker-s-shared-default-bridge-network2026-10-20 https://bugrater.com/releases/cve-2026-109442-piflow-2-0-0-through-2-0-1-contains-a-remote-code-execution-vulnerability-in-its-deepagents-chat-agent-whose-post-chat-and-post-chat-stream-endpoints-lack-au2026-10-20 https://bugrater.com/releases/cve-2026-109443-joysafeter-through-1-0-0-contains-a-remote-code-execution-vulnerability-that-allows-authenticated-users-to-run-operating-system-commands-via-an-unsandboxed-exec2026-10-20 https://bugrater.com/releases/cve-2026-109444-opensre-through-0-1-2026-10-19-contains-an-approval-gate-bypass-vulnerability-that-allows-attackers-to-execute-shell-run-commands-without-confirmation-because-t2026-10-20 https://bugrater.com/releases/cve-2026-75128-langchain-chatchat-through-0-3-1-3-exposes-a-post-tools-call-api-endpoint-that-invokes-any-registered-tool-by-name-without-authentication-leaving-the-always-r2026-10-20 https://bugrater.com/releases/cve-2026-77926-aix-db-1-2-4-contains-a-remote-code-execution-vulnerability-that-allows-authenticated-non-admin-users-to-run-operating-system-commands-through-the-chatbi-common2026-10-20 https://bugrater.com/releases/cve-2026-77930-evoscientist-0-1-0-before-0-2-5-contains-an-approval-bypass-vulnerability-that-allows-attackers-to-run-host-shell-commands-by-delegating-them-to-async-sub-agent2026-10-20 https://bugrater.com/releases/cve-2026-77932-db-gpt-through-0-8-2-contains-an-unauthenticated-remote-code-execution-vulnerability-because-the-api-v1-chat-react-agent-endpoint-relies-on-a-mock-get-user-fro2026-10-20 https://bugrater.com/releases/cve-2026-77933-db-gpt-through-0-8-2-contains-a-hardcoded-credentials-vulnerability-in-its-default-docker-compose-yml-that-sets-a-static-mysql-root-password-and-publishes-port2026-10-20 https://bugrater.com/releases/cve-2026-77934-coze-studio-before-0-5-0-contains-an-insecure-default-configuration-that-allows-any-registered-user-to-execute-commands-by-running-workflow-code-nodes-in-an-uns2026-10-20 https://bugrater.com/releases/cve-2026-77935-coze-studio-through-0-5-1-contains-an-insecure-direct-object-reference-vulnerability-in-workflow-go-that-allows-authenticated-users-to-access-other-spaces-work2026-10-20 https://bugrater.com/releases/cve-2026-77936-letta-through-0-16-8-ships-a-compose-yaml-that-does-not-enable-letta-server-secure-so-the-password-middleware-is-never-added-and-all-api-routes-are-unauthentic2026-10-20 https://bugrater.com/releases/cve-2026-77937-letta-through-0-16-8-contains-an-authentication-bypass-vulnerability-that-allows-api-callers-to-impersonate-other-users-by-supplying-a-self-asserted-user-id-htt2026-10-20 https://bugrater.com/releases/cve-2026-77938-letta-through-0-16-8-contains-an-information-disclosure-vulnerability-that-allows-users-running-tools-to-read-server-secrets-because-localsandbox-subprocesses-i2026-10-20 https://bugrater.com/releases/drupal-security-releases-july-20222026-10-20 https://bugrater.com/releases/drupal-security-releases-november-20242026-10-20 https://bugrater.com/releases/drupal-security-releases-february-20252026-10-20 https://bugrater.com/releases/drupal-security-releases-november-20252026-10-20 https://bugrater.com/releases/drupal-security-releases-april-20262026-10-20 https://bugrater.com/releases/drupal-security-releases-june-20262026-10-20 https://bugrater.com/releases/drupal-security-releases-july-20262026-10-20 https://bugrater.com/releases/drupal-security-releases-august-20262026-10-20 https://bugrater.com/releases/drupal-security-releases-september-20262026-10-20 https://bugrater.com/releases/cve-2026-105299-summary-before-version-0-9-0-the-http-1-upstream-path-in-pingora-proxy-passed-the-downstream-request-through-upstream-request-filter-and-wrote-it-to-the-ups2026-10-20 https://bugrater.com/releases/cve-2026-86467-apache-airflow-amazon-provider-the-aws-auth-manager-s-saml-login-flow-does-not-bind-the-authentication-response-to-the-browser-that-began-it-the-login-handler2026-10-20 https://bugrater.com/releases/cve-2026-113386-roundcube-webmail-before-1-6-20-and-1-7-x-before-1-7-5-are-affected-by-imap-command-injection-a-remote-authenticated-attacker-can-exploit-this-via-crlf-sequenc2026-10-20 https://bugrater.com/releases/deepseek-ai-security-releases-october-20262026-10-20 https://bugrater.com/releases/zkteco-security-releases-october-20262026-10-20 https://bugrater.com/releases/sahlberg-security-releases-october-20262026-10-20 https://bugrater.com/releases/dragonflydb-security-releases-october-20262026-10-20 https://bugrater.com/releases/netgear-security-releases-october-20262026-10-20 https://bugrater.com/releases/jackq-security-releases-october-20262026-10-20 https://bugrater.com/releases/y-security-releases-october-20262026-10-20 https://bugrater.com/releases/makeplane-security-releases-october-20262026-10-20 https://bugrater.com/releases/xen-security-releases-october-20262026-10-20 https://bugrater.com/releases/slackero-security-releases-october-20262026-10-20 https://bugrater.com/releases/colinhacks-security-releases-october-20262026-10-20 https://bugrater.com/releases/cisa-security-releases-october-20262026-10-20 https://bugrater.com/releases/banq-security-releases-october-20262026-10-20 https://bugrater.com/releases/wp-chill-security-releases-october-20262026-10-20 https://bugrater.com/releases/opencats-security-releases-october-20262026-10-20 https://bugrater.com/releases/edgarrojas-security-releases-october-20262026-10-20 https://bugrater.com/releases/serhii-pasyuk-security-releases-october-20262026-10-20 https://bugrater.com/releases/themeum-security-releases-october-20262026-10-20 https://bugrater.com/releases/netgear-security-releases-september-20262026-10-20 https://bugrater.com/releases/jumpserver-security-releases-october-20262026-10-20 https://bugrater.com/releases/gpac-security-releases-october-20262026-10-20 https://bugrater.com/releases/danielbrendel-security-releases-october-20262026-10-20 https://bugrater.com/releases/dell-security-releases-october-20262026-10-20 https://bugrater.com/releases/libsndfile-security-releases-october-20262026-10-20 https://bugrater.com/releases/ikaros-dev-security-releases-october-20262026-10-20 https://bugrater.com/releases/jorani-security-releases-october-20262026-10-20 https://bugrater.com/releases/benjaminjonard-security-releases-october-20262026-10-20 https://bugrater.com/releases/romkatv-security-releases-october-20262026-10-20 https://bugrater.com/releases/mlogclub-security-releases-october-20262026-10-20 https://bugrater.com/releases/xxyopen-security-releases-october-20262026-10-20 https://bugrater.com/releases/b3log-security-releases-october-20262026-10-20 https://bugrater.com/releases/mateaix-security-releases-october-20262026-10-20 https://bugrater.com/releases/jetlinks-security-releases-october-20262026-10-20 https://bugrater.com/releases/sanluan-security-releases-october-20262026-10-20 https://bugrater.com/releases/fj-oms-security-releases-october-20262026-10-20 https://bugrater.com/releases/risesoft-y9-security-releases-october-20262026-10-20 https://bugrater.com/releases/pickmall-security-releases-october-20262026-10-20 https://bugrater.com/releases/makunet-security-releases-october-20262026-10-20 https://bugrater.com/releases/kerwincui-security-releases-october-20262026-10-20 https://bugrater.com/releases/wayn111-security-releases-october-20262026-10-20 https://bugrater.com/releases/fushengqian-security-releases-october-20262026-10-20 https://bugrater.com/releases/liuyuyang01-security-releases-october-20262026-10-20 https://bugrater.com/releases/xerial-security-releases-october-20262026-10-20 https://bugrater.com/releases/ilias-elearning-e-v-security-releases-october-20262026-10-20 https://bugrater.com/releases/iflytek-security-releases-october-20262026-10-20 https://bugrater.com/releases/hyper-mcp-rs-security-releases-october-20262026-10-20 https://bugrater.com/releases/lightdash-security-releases-october-20262026-10-20 https://bugrater.com/releases/jupyterhub-security-releases-october-20262026-10-20 https://bugrater.com/releases/nexting-security-releases-october-20262026-10-20 https://bugrater.com/releases/ovidijusparsiunas-security-releases-october-20262026-10-20 https://bugrater.com/releases/hugging-face-security-releases-october-20262026-10-20 https://bugrater.com/releases/apiparklab-security-releases-october-20262026-10-20 https://bugrater.com/releases/red-hat-security-releases-april-20262026-10-20 https://bugrater.com/releases/plastic-labs-security-releases-october-20262026-10-20 https://bugrater.com/releases/punkpeye-security-releases-october-20262026-10-20 https://bugrater.com/releases/ifuryst-security-releases-october-20262026-10-20 https://bugrater.com/releases/glpi-project-security-releases-october-20262026-10-20 https://bugrater.com/releases/alexjustesen-security-releases-october-20262026-10-20 https://bugrater.com/releases/shepherd-agents-security-releases-october-20262026-10-20 https://bugrater.com/releases/falkordb-security-releases-october-20262026-10-20 https://bugrater.com/releases/odt2spip-security-releases-october-20262026-10-20 https://bugrater.com/releases/docker-security-releases-october-20262026-10-20 https://bugrater.com/releases/jfrog-security-releases-october-20262026-10-20 https://bugrater.com/releases/swann-communications-security-releases-october-20262026-10-20 https://bugrater.com/releases/mistralai-security-releases-october-20262026-10-20 https://bugrater.com/releases/opentext-security-releases-october-20262026-10-20 https://bugrater.com/releases/spotweb-security-releases-october-20262026-10-20 https://bugrater.com/releases/ferdikoomen-security-releases-october-20262026-10-20 https://bugrater.com/releases/1mcp-app-security-releases-october-20262026-10-20 https://bugrater.com/releases/cve-2026-93300-the-eventon-subscriber-plugin-for-wordpress-is-vulnerable-to-generic-sql-injection-via-the-email-parameter-in-all-versions-up-to-and-including-1-4-5-due-t2026-10-20 https://bugrater.com/releases/cve-2026-96902-the-easy-property-listings-wordpress-plugin-before-3-5-28-does-not-restrict-which-listing-fields-it-adds-to-the-public-rest-api-output-allowing-unauthenticated2026-10-20 https://bugrater.com/releases/cve-2026-96903-the-easy-property-listings-wordpress-plugin-before-3-5-27-does-not-perform-authorisation-checks-on-several-of-its-contact-management-read-ajax-actions-allowing2026-10-20 https://bugrater.com/releases/cve-2026-110095-fast-uri-is-a-dependency-free-rfc-3986-uri-parser-and-serializer-for-node-js-in-versions-before-2-4-8-from-3-0-0-through-3-1-8-and-from-4-0-0-through-4-2-22026-10-20 https://bugrater.com/releases/cve-2026-110180-fast-uri-is-a-dependency-free-rfc-3986-uri-parser-and-serializer-for-node-js-in-versions-from-2-4-2-through-2-4-7-from-3-1-3-through-3-1-8-and-from-4-0-1-thr2026-10-20 https://bugrater.com/releases/cve-2026-110306-fast-uri-is-a-dependency-free-rfc-3986-uri-parser-and-serializer-for-node-js-in-versions-before-2-4-8-from-3-0-0-through-3-1-8-and-from-4-0-0-through-4-2-22026-10-20 https://bugrater.com/releases/cve-2026-110725-fast-uri-is-a-dependency-free-rfc-3986-uri-parser-and-serializer-for-node-js-in-versions-before-2-4-8-from-3-0-0-through-3-1-8-and-from-4-0-0-through-4-2-22026-10-20 https://bugrater.com/releases/cve-2026-93878-the-divigear-carousel-plugin-for-wordpress-is-vulnerable-to-stored-cross-site-scripting-via-update-license-ajax-action-in-all-versions-up-to-and-including-5-22026-10-20 https://bugrater.com/releases/cve-2026-112177-a-flaw-was-found-in-ghostscript-as-shipped-with-red-hat-enterprise-linux-8-the-correction-for-cve-2019-14869-was-omitted-during-the-rebase-from-version-9-25-to2026-10-20 https://bugrater.com/releases/cve-2026-43834-a-stack-based-buffer-overflow-vulnerability-in-the-logs-settings-functionality-could-allow-an-authenticated-attacker-to-achieve-code-execution2026-10-20 https://bugrater.com/releases/cve-2026-43835-a-vulnerability-in-the-firmware-upgrade-functionality-could-allow-an-authenticated-attacker-to-upload-a-forged-firmware-upgrade-file-potentially-compromising-t2026-10-20 https://bugrater.com/releases/cve-2026-113465-it-is-possible-to-execute-a-dom-based-cross-site-scripting-attack-against-stormshield-s-web-administration-panel-to-exploit-this-vulnerability-an-attacker2026-10-20 https://bugrater.com/releases/cve-2026-11959-stored-cross-site-scripting-xss-in-facturascripts-version-2025-61-caused-by-a-lack-of-adequate-validation-or-sanitisation-of-user-input-in-the-city-and-p2026-10-20 https://bugrater.com/releases/cve-2026-11960-enumeration-of-unauthenticated-users-in-facturascripts-version-2025-61-the-application-returns-different-responses-when-attempting-to-log-in-with-a-valid-user2026-10-20 https://bugrater.com/releases/cve-2026-43836-a-vulnerability-could-allow-an-attacker-to-forge-a-packet-to-execute-arbitrary-commands-with-maximum-privileges2026-10-20 https://bugrater.com/releases/cve-2026-43837-a-buffer-overflow-vulnerability-in-the-password-verification-functionality-could-allow-an-attacker-with-guest-authentication-to-achieve-code-execution2026-10-20 https://bugrater.com/releases/cve-2026-43838-a-stack-based-buffer-overflow-vulnerability-in-the-login-functionality-could-allow-an-attacker-to-achieve-code-execution2026-10-20 https://bugrater.com/releases/cve-2026-43839-a-null-pointer-dereference-vulnerability-in-the-logs-management-functionality-could-allow-an-unauthenticated-attacker-to-crash-the-service2026-10-20 https://bugrater.com/releases/cve-2026-43840-a-null-pointer-dereference-vulnerability-in-the-license-manager-service-could-allow-an-unauthenticated-attacker-to-crash-the-service-via-the-on-disconnected-cal2026-10-20 https://bugrater.com/releases/cve-2026-43841-a-null-pointer-dereference-vulnerability-in-the-license-manager-service-could-allow-an-unauthenticated-attacker-to-crash-the-service-via-the-rpc-rx-fsm-function2026-10-20 https://bugrater.com/releases/cve-2026-43842-a-null-pointer-dereference-vulnerability-in-the-license-manager-service-could-allow-an-unauthenticated-attacker-to-crash-the-service-via-the-rpc-rx-fsm-function2026-10-20 https://bugrater.com/releases/cve-2026-43843-an-integer-overflow-vulnerability-in-the-license-manager-service-could-allow-an-unauthenticated-attacker-to-crash-the-service2026-10-20 https://bugrater.com/releases/cve-2026-43844-a-vulnerability-in-the-proprietary-protocol-could-allow-an-attacker-to-bypass-the-authentication-mechanism2026-10-20 https://bugrater.com/releases/cve-2026-43845-a-vulnerability-in-the-password-reset-mechanism-could-allow-an-attacker-to-bypass-the-authentication-mechanism2026-10-20 https://bugrater.com/releases/cve-2026-43846-a-stack-based-buffer-overflow-vulnerability-in-a-non-functional-feature-could-allow-an-authenticated-attacker-to-achieve-code-execution2026-10-20 https://bugrater.com/releases/cve-2026-43847-a-vulnerability-in-the-proprietary-protocol-could-allow-an-attacker-to-brute-force-the-administrator-password-without-restrictions-even-when-the-safeenhancemen2026-10-20 https://bugrater.com/releases/cve-2026-43848-a-vulnerability-in-the-bulk-port-configuration-functionality-could-allow-an-unauthenticated-attacker-to-crash-the-service2026-10-20 https://bugrater.com/releases/cve-2026-92287-pass-through-of-unvalidated-kms-urls-to-kms-clients-in-apache-c-parquet-and-pyarrow-versions-4-0-0-to-25-0-1-this-affects-users-who-read-parquet-files-an2026-10-20 https://bugrater.com/releases/cve-2026-111844-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-vulnerability-in-brizy-brizy-brizy-allows-stored-xss-this-issue-affects-bri2026-10-20 https://bugrater.com/releases/cve-2026-112064-the-backend-module-for-reviewing-the-consent-history-accepted-sorting-grouping-and-index-options-from-the-request-and-used-them-in-a-database-query-without-val2026-10-20 https://bugrater.com/releases/cve-2026-112067-the-extension-hides-the-correct-answer-to-each-captcha-inside-the-image-data-of-the-captcha-itself-anyone-who-can-request-a-captcha-image-can-read-the-answer-f2026-10-20 https://bugrater.com/releases/cve-2026-112068-the-backend-module-does-not-check-whether-a-backend-user-has-access-to-the-requested-site-users-with-access-to-the-module-can-therefore-open-the-analytics-dash2026-10-20 https://bugrater.com/releases/cve-2026-112069-the-extension-no-longer-applied-its-access-protection-to-files-in-file-storages-that-use-a-non-default-relative-base-path-these-files-were-served-directly-by-t2026-10-20 https://bugrater.com/releases/cve-2026-112071-the-order-cancellation-function-accepts-an-order-identifier-from-the-request-and-acts-on-that-order-without-checking-that-the-caller-owns-it-any-site-visitor-c2026-10-20 https://bugrater.com/releases/cve-2026-112237-the-extension-provides-a-public-proxy-endpoint-that-fetches-a-url-on-behalf-of-the-visitor-for-one-http-request-method-the-endpoint-does-not-apply-the-authori2026-10-20 https://bugrater.com/releases/cve-2026-112238-the-file-search-of-the-extension-builds-its-database-conditions-by-wrapping-the-search-term-in-quotes-itself-only-the-wildcard-characters-of-the-like-operator2026-10-20 https://bugrater.com/releases/cve-2026-112239-the-extension-provides-a-backend-endpoint-that-writes-a-submitted-value-into-a-submitted-field-of-a-submitted-page-record-it-neither-checks-the-user-s-permissi2026-10-20 https://bugrater.com/releases/cve-2026-112240-the-download-link-for-files-uploaded-through-a-form-relied-on-a-token-that-could-be-predicted-the-file-name-in-the-request-was-also-not-verified-in-a-way-that2026-10-20 https://bugrater.com/releases/cve-2026-113378-a-security-flaw-has-been-discovered-in-mcollina-mcp-ripgrep-up-to-0-4-0-affected-is-an-unknown-function-of-the-file-src-index-ts-of-the-component-advanced-sear2026-10-20 https://bugrater.com/releases/cve-2026-113381-a-weakness-has-been-identified-in-osclass-up-to-8-3-1-affected-by-this-vulnerability-is-the-function-item-finduseritems-of-the-file-oc-includes-osclass-model2026-10-20 https://bugrater.com/releases/cve-2026-113442-values-entered-by-visitors-were-placed-into-the-html-summary-email-without-being-escaped-an-unauthenticated-attacker-could-use-this-to-inject-html-into-an-emai2026-10-20 https://bugrater.com/releases/cve-2026-113459-in-versions-running-on-typo3-10-and-11-the-configured-openai-api-key-is-embedded-in-every-backend-page-so-that-the-editor-plugin-can-contact-the-openai-servic2026-10-20 https://bugrater.com/releases/cve-2026-113468-the-payment-notification-endpoint-for-paypal-accepts-incoming-data-without-verifying-that-it-comes-from-the-payment-provider-any-site-visitor-can-overwrite-the2026-10-20 https://bugrater.com/releases/cve-2026-43849-a-heap-memory-read-vulnerability-could-allow-an-attacker-to-exfiltrate-sensitive-data2026-10-20 https://bugrater.com/releases/cve-2026-43850-a-command-injection-vulnerability-could-allow-an-authenticated-attacker-to-achieve-root-level-code-execution-on-the-system2026-10-20 https://bugrater.com/releases/cve-2026-43851-a-path-traversal-vulnerability-could-allow-an-authenticated-attacker-to-read-arbitrary-files-on-the-system2026-10-20 https://bugrater.com/releases/cve-2026-43852-a-vulnerability-could-allow-an-authenticated-attacker-to-write-files-to-arbitrary-locations-on-the-system2026-10-20 https://bugrater.com/releases/cve-2026-43853-a-vulnerability-could-allow-an-attacker-to-send-a-crafted-message-to-trigger-an-assertion-fault-causing-the-service-to-crash2026-10-20 https://bugrater.com/releases/cve-2026-43854-a-vulnerability-could-allow-an-attacker-with-access-to-an-encrypted-project-file-to-retrieve-administrator-credentials-for-edgelink-enabled-devices2026-10-20 https://bugrater.com/releases/cve-2026-43855-a-heap-based-buffer-overflow-vulnerability-could-allow-a-remote-authenticated-attacker-to-achieve-arbitrary-code-execution2026-10-20 https://bugrater.com/releases/cve-2026-43856-a-stack-based-buffer-overflow-vulnerability-in-the-fileprocess-checkdir-function-could-allow-a-remote-authenticated-attacker-to-achieve-arbitrary-code-executio2026-10-20 https://bugrater.com/releases/cve-2026-43857-a-vulnerability-could-allow-a-remote-authenticated-attacker-to-achieve-arbitrary-code-execution-with-privileges-on-the-service2026-10-20 https://bugrater.com/releases/cve-2026-43858-a-stack-based-buffer-overflow-vulnerability-could-allow-a-remote-authenticated-attacker-to-achieve-arbitrary-code-execution2026-10-20 https://bugrater.com/releases/cve-2026-85267-a-cross-site-websocket-hijacking-vulnerability-in-cloud-shell-prior-to-2026-07-22-on-google-cloud-platform-allows-an-unauthenticated-attacker-to-hijack-an-activ2026-10-20 https://bugrater.com/releases/cve-2026-108086-unsupported-when-assigned-improper-restriction-of-recursive-entity-references-in-dtds-xml-entity-expansion-vulnerability-in-apache-cocoon-this-iss2026-10-20 https://bugrater.com/releases/cve-2026-108087-unsupported-when-assigned-improper-neutralization-of-special-elements-used-in-an-sql-command-sql-injection-vulnerability-in-apache-cocoon-this-iss2026-10-20 https://bugrater.com/releases/cve-2026-108088-unsupported-when-assigned-use-of-cache-containing-sensitive-information-vulnerability-in-apache-cocoon-when-using-the-cache-on-a-multi-user-application2026-10-20 https://bugrater.com/releases/cve-2026-108089-unsupported-when-assigned-exposure-of-sensitive-system-information-to-an-unauthorized-control-sphere-vulnerability-in-apache-cocoon-an-unauthenticated-us2026-10-20 https://bugrater.com/releases/cve-2026-112783-opencats-before-0-10-0-contains-a-missing-authorization-vulnerability-in-ajax-deleteactivity-php-and-ajax-editactivity-php-that-allows-read-level-users-to-edit2026-10-20 https://bugrater.com/releases/cve-2026-112784-opencats-before-0-10-0-contains-a-missing-authorization-vulnerability-in-ajax-testemailsettings-php-that-allows-any-authenticated-user-to-send-mail-through-the2026-10-20 https://bugrater.com/releases/cve-2026-112785-opencats-before-0-10-0-contains-a-missing-authorization-vulnerability-that-allows-read-level-users-to-create-rename-delete-and-populate-saved-lists-via-ajax2026-10-20 https://bugrater.com/releases/cve-2026-112786-opencats-before-0-10-0-contains-a-missing-authorization-vulnerability-in-importui-handlerequest-that-allows-low-privileged-authenticated-users-to-roll-back-d2026-10-20 https://bugrater.com/releases/cve-2026-112787-opencats-before-0-10-0-contains-a-missing-authorization-vulnerability-in-reportsui-handlerequest-that-allows-authenticated-users-to-view-eeo-demographic-repo2026-10-20 https://bugrater.com/releases/cve-2026-113349-opencats-before-0-10-0-contains-a-missing-authorization-vulnerability-in-calendarui-oneditevent-and-ondeleteevent-that-allows-authenticated-users-to-modify2026-10-20 https://bugrater.com/releases/cve-2026-113350-react-admin-before-5-15-5-contains-a-stored-cross-site-scripting-vulnerability-that-allows-attackers-to-inject-scripts-by-storing-javascript-uris-in-record-fie2026-10-20 https://bugrater.com/releases/cve-2026-113351-libexpat-2-7-2-through-2-9-0-contains-a-denial-of-service-vulnerability-because-xml-parserreset-zeroes-the-direct-byte-count-but-never-offsets-tracked-heap-allo2026-10-20 https://bugrater.com/releases/cve-2026-113352-utox-through-0-18-1-contains-a-path-traversal-vulnerability-that-allows-tox-friends-to-write-arbitrary-files-by-sending-absolute-or-file-names-to-victims-wi2026-10-20 https://bugrater.com/releases/cve-2026-113353-learnpress-before-4-4-10-contains-a-missing-authorization-vulnerability-in-the-admin-course-editor-admin-quiz-editor-and-admin-question-editor-lp-ajax-actions2026-10-20 https://bugrater.com/releases/cve-2026-113354-dockhand-before-1-0-46-contains-an-arbitrary-file-read-vulnerability-that-allows-non-admin-users-with-stacks-edit-permission-to-read-files-through-the-path-para2026-10-20 https://bugrater.com/releases/cve-2026-113355-chatwoot-before-4-14-0-contains-a-stored-cross-site-scripting-vulnerability-that-allows-account-administrators-to-inject-javascript-by-crafting-video-embed-link2026-10-20 https://bugrater.com/releases/cve-2026-113356-dokuwiki-before-2026-07-14c-contains-a-php-object-injection-vulnerability-in-draft-getdrafttext-that-passes-draft-file-contents-to-unserialize-without-rest2026-10-20 https://bugrater.com/releases/cve-2026-113357-e2e-dev-github-before-0-4-1-contains-an-improper-authorization-vulnerability-that-allows-pull-request-commenters-to-hijack-ci-test-reports-by-posting-comments2026-10-20 https://bugrater.com/releases/cve-2026-113358-lavalite-cms-through-10-1-2-contains-a-missing-authentication-vulnerability-in-the-filer-module-that-allows-unauthenticated-attackers-to-download-stored-files-t2026-10-20 https://bugrater.com/releases/cve-2026-113382-a-security-vulnerability-has-been-detected-in-arizu-id-fast-tunnel-1-0-0-affected-by-this-issue-is-the-function-ziparchive-extractto-of-the-file-backend-api-p2026-10-20 https://bugrater.com/releases/cve-2026-113383-a-vulnerability-was-detected-in-optimal-idm-optimalcloud-5-0-this-affects-an-unknown-part-of-the-file-v5-0-webapps-pages-public-login-performing-a-manipulati2026-10-20 https://bugrater.com/releases/cve-2026-113384-a-flaw-has-been-found-in-optimal-idm-optimalcloud-5-0-this-vulnerability-affects-unknown-code-of-the-file-v5-0-social-executing-a-manipulation-of-the-argumen2026-10-20 https://bugrater.com/releases/cve-2026-9589-missing-authorization-in-the-configuration-cascade-operations-of-the-collaboration-server-in-unblu-inc-unblu-spark-7-0-through-8-36-1-hotfix-0-on-on-premises2026-10-20 https://bugrater.com/releases/go-vikunja-security-releases-october-20262026-10-20 https://bugrater.com/releases/roocodeinc-security-releases-october-20262026-10-20 https://bugrater.com/releases/wukongopensource-security-releases-october-20262026-10-20 https://bugrater.com/releases/stonewuu-security-releases-october-20262026-10-20 https://bugrater.com/releases/phase-security-releases-october-20262026-10-20 https://bugrater.com/releases/xiaonuobase-security-releases-october-20262026-10-20 https://bugrater.com/releases/youlaitech-security-releases-october-20262026-10-20 https://bugrater.com/releases/lenve-security-releases-october-20262026-10-20 https://bugrater.com/releases/kubeflow-security-releases-october-20262026-10-20 https://bugrater.com/releases/razorpay-security-releases-october-20262026-10-20 https://bugrater.com/releases/kareadita-security-releases-october-20262026-10-20 https://bugrater.com/releases/shaarli-security-releases-october-20262026-10-20 https://bugrater.com/releases/wallabag-security-releases-october-20262026-10-20 https://bugrater.com/releases/sergix44-security-releases-october-20262026-10-20 https://bugrater.com/releases/mucommander-security-releases-october-20262026-10-20 https://bugrater.com/releases/fossify-security-releases-october-20262026-10-20 https://bugrater.com/releases/nspc911-security-releases-october-20262026-10-20 https://bugrater.com/releases/elio-fm-security-releases-october-20262026-10-20 https://bugrater.com/releases/abdurazaaq-mohammed-security-releases-october-20262026-10-20 https://bugrater.com/releases/kde-security-releases-october-20262026-10-20 https://bugrater.com/releases/vifm-security-releases-october-20262026-10-20 https://bugrater.com/releases/duke-git-security-releases-october-20262026-10-20 https://bugrater.com/releases/phoenixthrush-security-releases-october-20262026-10-20 https://bugrater.com/releases/pulseaiclub-security-releases-october-20262026-10-20 https://bugrater.com/releases/open-multi-agent-security-releases-october-20262026-10-20 https://bugrater.com/releases/vatesfr-security-releases-october-20262026-10-20 https://bugrater.com/releases/finsys-security-releases-october-20262026-10-20 https://bugrater.com/releases/cve-2026-113385-a-vulnerability-has-been-found-in-leedroid-labs-shortcutter-2-app-9-0-48-on-android-this-issue-affects-the-function-class-forname-of-the-file-togglegeneric-jav2026-10-20 https://bugrater.com/releases/cve-2026-113388-a-security-flaw-has-been-discovered-in-opensource-socialnetwork-up-to-9-11-10-1-this-affects-the-function-input-of-the-file-actions-administrator-cache-dynamic2026-10-20 https://bugrater.com/releases/cve-2026-113389-a-vulnerability-was-detected-in-draytek-vigor2960-1-5-1-6-revision-8218-affected-by-this-vulnerability-is-the-function-set-table-of-the-file-cgi-bin-mainfunct2026-10-20 https://bugrater.com/releases/cve-2026-113495-a-flaw-was-found-in-cockpit-machines-red-hat-subscription-management-rhsm-authentication-tokens-are-passed-as-command-line-arguments-to-background-helper-pro2026-10-20 https://bugrater.com/releases/cve-2026-113496-a-flaw-was-found-in-cockpit-machines-when-saving-virtual-network-computing-vnc-console-settings-the-configured-password-is-passed-directly-as-a-command-line2026-10-20 https://bugrater.com/releases/cve-2026-113583-cypht-webmail-2-0-0-through-2-12-2-contains-a-dom-based-cross-site-scripting-vulnerability-that-allows-remote-attackers-to-execute-arbitrary-javascript-by-craft2026-10-20 https://bugrater.com/releases/cve-2026-14933-cross-site-scripting-in-the-embedded-co-browsing-feature-in-unblu-inc-unblu-spark-7-0-through-7-57-7-and-8-0-through-8-39-2-on-on-premises-and-cloud-deploymen2026-10-20 https://bugrater.com/releases/cve-2026-18205-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-vulnerability-in-ticimax-informatics-technologies-inc-ticimax-e-commerce-p2026-10-20 https://bugrater.com/releases/cve-2026-113390-a-flaw-has-been-found-in-draytek-vigor2960-1-5-1-6-revision-8218-affected-by-this-issue-is-the-function-sub-182b0-of-the-file-cgi-bin-mainfunction-cgi-of-the2026-10-20 https://bugrater.com/releases/cve-2026-113391-a-vulnerability-has-been-found-in-draytek-vigor2960-1-5-1-6-revision-8218-this-affects-the-function-uploadlangs-of-the-file-cgi-bin-mainfunction-cgi-of-the-co2026-10-20 https://bugrater.com/releases/cve-2026-113392-a-vulnerability-was-found-in-draytek-vigor2960-1-5-1-6-revision-8218-this-vulnerability-affects-unknown-code-of-the-file-cgi-bin-mainfunction-cgi-of-the-compo2026-10-20 https://bugrater.com/releases/cve-2026-113619-in-eclipse-iofog-controller-versions-3-8-0-through-3-9-1-post-put-and-patch-bodies-on-routes-that-enable-template-substitution-are-rendered-by-an-uncapped-li2026-10-20 https://bugrater.com/releases/cve-2026-113620-in-eclipse-iofog-controller-versions-3-8-0-through-3-9-1-operator-websocket-upgrades-on-the-exec-and-log-routes-do-not-verify-the-bearer-jwt-the-payload-is-de2026-10-20 https://bugrater.com/releases/cve-2026-101296-a-missing-critical-step-in-authentication-vulnerability-in-apache-tomcat-when-the-jndi-realm-was-configured-with-with-a-non-gssapi-sasl-authentication-mechanism2026-10-20 https://bugrater.com/releases/cve-2026-103119-buffer-under-read-vulnerability-in-apache-tomcat-meant-that-a-large-non-blocking-write-could-result-in-the-response-body-being-split-between-the-current-request2026-10-20 https://bugrater.com/releases/cve-2026-113393-a-vulnerability-was-determined-in-draytek-vigor2960-1-5-1-6-revision-8218-this-issue-affects-some-unknown-processing-of-the-file-cgi-bin-mainfunction-cgi-of-t2026-10-20 https://bugrater.com/releases/cve-2026-113394-a-vulnerability-was-identified-in-draytek-vigor2960-1-5-1-6-revision-8218-impacted-is-the-function-setswmprofile-of-the-file-cgi-bin-mainfunction-cgi-the-man2026-10-20 https://bugrater.com/releases/cve-2026-113395-a-security-flaw-has-been-discovered-in-draytek-vigor2960-1-5-1-6-revision-8218-the-affected-element-is-the-function-cgiescape-of-the-file-cgi-bin-mainfunction2026-10-20 https://bugrater.com/releases/cve-2026-113396-a-weakness-has-been-identified-in-draytek-vigor2960-1-5-1-6-revision-8218-the-impacted-element-is-the-function-rename-table-of-the-file-cgi-bin-mainfunction-c2026-10-20 https://bugrater.com/releases/cve-2026-74048-not-failing-securely-failing-open-vulnerability-in-apache-tomcat-if-the-openssllifecyclelistener-is-configured-to-use-fips-mode-but-fips-activation-fails2026-10-20 https://bugrater.com/releases/cve-2026-74049-execution-after-redirect-ear-vulnerability-in-apache-tomcat-this-issue-affects-apache-tomcat-from-11-0-0-m1-through-11-0-26-from-10-1-0-m1-through-10-12026-10-20 https://bugrater.com/releases/cve-2026-80353-time-of-check-time-of-use-toctou-race-condition-vulnerability-in-apache-tomcat-when-creating-unix-domain-sockets-for-the-apr-native-connector-allows-an-unauth2026-10-20 https://bugrater.com/releases/cve-2026-88041-incomplete-cleanup-vulnerability-in-apache-tomcat-allowed-an-trailer-information-from-a-previous-request-to-leak-into-a-subsequent-request-this-issue-affect2026-10-20 https://bugrater.com/releases/cve-2026-91041-mounting-an-attacker-controlled-fat-image-with-fault-tolerance-enabled-causes-an-out-of-bounds-heap-write-during-log-replay-the-write-is-attacker-positioned-an2026-10-20 https://bugrater.com/releases/cve-2026-93446-incomplete-cleanup-vulnerability-in-apache-tomcat-could-cause-tls-1-3-connections-to-fail-intermittently-this-issue-affects-apache-tomcat-from-11-0-0-m21-t2026-10-20 https://bugrater.com/releases/cve-2026-96406-a-videostreaming-interface-reports-the-size-of-its-whole-class-specific-descriptor-block-in-the-wtotallength-field-of-its-input-header-the-usbx-host-recorded2026-10-20 https://bugrater.com/releases/cve-2026-96582-a-hid-report-descriptor-is-a-sequence-of-items-each-declaring-in-its-header-how-many-data-bytes-follow-the-usbx-host-walks-that-sequence-by-advancing-over-eac2026-10-20 https://bugrater.com/releases/cve-2026-112833-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-vulnerability-in-castos-seriously-simple-podcasting-seriously-simple-podcas2026-10-20 https://bugrater.com/releases/cve-2026-112834-missing-authorization-vulnerability-in-castos-seriously-simple-podcasting-seriously-simple-podcasting-allows-exploiting-incorrectly-configured-access-control-se2026-10-20 https://bugrater.com/releases/cve-2026-113397-a-security-vulnerability-has-been-detected-in-draytek-vigor2960-1-5-1-6-revision-8218-this-affects-the-function-ruequest-certificate-of-the-file-cgi-bin-mainf2026-10-20 https://bugrater.com/releases/cve-2026-113411-a-vulnerability-was-found-in-nerimity-desktop-up-to-2-2-2-affected-by-this-issue-is-the-function-shell-openexternal-of-the-file-src-mainwindow-js-of-the-compon2026-10-20 https://bugrater.com/releases/cve-2026-113466-a-security-vulnerability-has-been-detected-in-minio-up-to-release-2025-10-15t17-29-55z-this-issue-affects-the-function-globaldeploymentid-sessiontokenauthentic2026-10-20 https://bugrater.com/releases/cve-2026-91059-the-guix-jpeg-software-decoder-enforces-no-ordering-on-jpeg-markers-a-file-that-places-a-second-sof0-frame-header-after-sos-re-runs-the-frame-header-parser2026-10-20 https://bugrater.com/releases/cve-2026-91186-the-png-chunk-reader-has-no-notion-of-chunk-ordering-it-records-whether-an-idat-has-been-seen-and-whether-a-trns-has-already-supplied-transparency-but-nothing2026-10-20 https://bugrater.com/releases/cve-2026-91189-the-guix-binary-resource-loader-never-checks-that-a-font-page-s-glyph-range-is-well-formed-gx-page-header-first-glyph-and-gx-page-header-last-glyph-are-rea2026-10-20 https://bugrater.com/releases/cve-2026-92446-gx-binres-theme-load-and-gx-binres-font-load-take-the-resource-as-a-bare-gx-ubyte-with-no-length-and-gx-binres-data-info-has-no-field-to-carry-on2026-10-20 https://bugrater.com/releases/cve-2026-92449-gx-binres-pixelmap-table-load-in-the-guix-binary-resource-theme-loader-indexes-the-pixelmap-table-with-a-value-read-verbatim-from-the-resource-file-and-n2026-10-20 https://bugrater.com/releases/cve-2026-92454-the-guix-software-jpeg-decoder-reads-four-kinds-of-marker-segment-without-checking-that-each-is-long-enough-to-hold-what-it-reads-a-truncated-segment-is-theref2026-10-20 https://bugrater.com/releases/cve-2026-95111-a-memory-protected-threadx-module-s-queue-request-reaches-the-module-manager-s-dispatch-layer-which-decides-how-much-of-the-module-s-buffer-the-privileged-queu2026-10-20 https://bugrater.com/releases/cve-2026-96402-a-malicious-usb-mtp-ptp-device-can-cause-the-usbx-host-to-read-past-a-heap-buffer-during-ordinary-object-enumeration-leaking-adjacent-heap-contents-to-the-appl2026-10-20 https://bugrater.com/releases/cve-2026-97400-in-eclipse-openj9-versions-up-to-0-63-opening-a-supplied-diagnostic-dump-bundle-with-the-jdmpview-tool-or-equivalent-dtfj-code-may-cause-the-analyst-s-machin2026-10-20 https://bugrater.com/releases/cve-2025-71436-raptor-rdf-syntax-library-from-2-0-15-through-2-0-16-contains-a-heap-based-buffer-overflow-vulnerability-in-raptor-new-term-from-counted-literal-caused-by-tru2026-10-20 https://bugrater.com/releases/cve-2026-107755-insufficient-filtering-of-credentials-in-the-replicator-database-in-apache-couchdb-3-5-2-and-below-on-all-platforms-allows-an-authenticated-user-to-read-replic2026-10-20 https://bugrater.com/releases/cve-2026-109700-missing-authorization-vulnerability-in-elightup-meta-box-wordpress-custom-fields-framework-meta-box-allows-exploiting-incorrectly-configured-access-control-se2026-10-20 https://bugrater.com/releases/cve-2026-111843-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-vulnerability-in-cozythemes-rootblox-rootblox-allows-stored-xss-this-issue2026-10-20 https://bugrater.com/releases/cve-2026-112823-missing-authorization-vulnerability-in-wp-user-manager-wp-user-manager-wp-user-manager-allows-manipulating-user-state-this-issue-affects-wp-user-manager-from-n2026-10-20 https://bugrater.com/releases/cve-2026-112824-missing-authorization-vulnerability-in-magepeople-inc-bus-ticket-booking-with-seat-reservation-bus-ticket-booking-with-seat-reservation-allows-exploiting-incor2026-10-20 https://bugrater.com/releases/cve-2026-112829-missing-authorization-vulnerability-in-arraytics-booktics-booktics-allows-exploiting-incorrectly-configured-access-control-security-levels-this-issue-affects-bo2026-10-20 https://bugrater.com/releases/cve-2026-112836-cross-site-request-forgery-csrf-vulnerability-in-e4jvikwp-vikrentcar-vikrentcar-allows-cross-site-request-forgery-this-issue-affects-vikrentcar-from-n-a-thro2026-10-20 https://bugrater.com/releases/cve-2026-112840-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-vulnerability-in-brainstorm-force-surecart-surecart-allows-stored-xss-this2026-10-20 https://bugrater.com/releases/cve-2026-113359-baserow-before-2-3-0-contains-a-missing-authorization-vulnerability-that-allows-any-authenticated-user-to-read-field-values-from-other-workspaces-via-the-unique2026-10-20 https://bugrater.com/releases/cve-2026-113594-sharkord-before-0-0-8-contains-a-missing-authorization-vulnerability-that-allows-any-authenticated-member-to-change-server-wide-settings-by-calling-the-others-u2026-10-20 https://bugrater.com/releases/cve-2026-113595-sharkord-before-0-0-26-contains-a-missing-authorization-vulnerability-in-the-others-changelogo-trpc-mutation-that-allows-any-authenticated-member-to-modify-the2026-10-20 https://bugrater.com/releases/cve-2026-113596-webstudio-before-0-256-0-contains-a-missing-authorization-vulnerability-that-allows-authenticated-users-to-read-other-users-project-data-via-the-publishedbuild2026-10-20 https://bugrater.com/releases/cve-2026-113597-blinko-through-1-8-8-contains-an-insecure-direct-object-reference-vulnerability-in-the-tag-trpc-router-that-allows-authenticated-users-to-read-and-modify-other2026-10-20 https://bugrater.com/releases/cve-2026-113598-modoboa-before-2-8-0-contains-an-insecure-direct-object-reference-vulnerability-that-allows-authenticated-users-to-delete-alarms-of-other-domains-via-the-post2026-10-20 https://bugrater.com/releases/cve-2026-113599-modoboa-before-2-8-0-contains-an-insecure-direct-object-reference-vulnerability-that-allows-authenticated-users-to-create-auto-reply-messages-for-arbitrary-mail2026-10-20 https://bugrater.com/releases/cve-2026-113600-fat-free-crm-before-0-26-0-contains-an-insecure-direct-object-reference-vulnerability-that-allows-authenticated-users-to-modify-or-delete-other-users-comments2026-10-20 https://bugrater.com/releases/cve-2026-113601-memos-before-0-27-0-contains-a-missing-authorization-vulnerability-in-the-activityservice-listactivities-and-getactivity-api-methods-that-allows-authenticated-u2026-10-20 https://bugrater.com/releases/cve-2026-113602-json-smart-through-2-6-0-contains-an-input-validation-bypass-vulnerability-that-allows-attackers-to-evade-strict-mode-trailing-data-checks-by-inserting-a-litera2026-10-20 https://bugrater.com/releases/cve-2026-113603-the-x402-siwx-server-extension-in-x402-extensions-2-3-1-through-2-28-0-x402-pypi-2-11-0-through-2-25-0-and-go-module-2-16-0-through-2-28-0-contains-an-author2026-10-20 https://bugrater.com/releases/cve-2026-113604-ghidra-10-2-through-12-1-4-contains-a-denial-of-service-vulnerability-in-the-elf-loader-s-elfheader-class-that-allocates-arrays-sized-by-unvalidated-extended-se2026-10-20 https://bugrater.com/releases/cve-2026-113605-stirling-pdf-from-2-13-2-through-3-2-0-contains-an-incomplete-denylist-in-databaseservice-validatesqlcontent-that-allows-administrators-to-bypass-h2-import-re2026-10-20 https://bugrater.com/releases/cve-2026-113606-stirling-pdf-3-0-0-through-3-2-0-contains-an-authorization-bypass-vulnerability-that-allows-authenticated-users-to-access-other-users-stored-files-by-pointing2026-10-20 https://bugrater.com/releases/cve-2026-113607-configurable-reports-block-for-moodle-before-5-3-0-contains-an-authorization-bypass-vulnerability-that-allows-authenticated-users-to-read-restricted-reports-thr2026-10-20 https://bugrater.com/releases/cve-2026-113608-configurable-reports-block-for-moodle-moodle-block-configurablereports-before-5-3-1-contains-an-sql-injection-vulnerability-in-report-sql-prepare-sql-via-t2026-10-20 https://bugrater.com/releases/cve-2026-113609-bandisoft-bandizip-before-7-47-fails-to-propagate-mark-of-the-web-to-extracted-ps1-and-psm1-files-allowing-attackers-to-bypass-zone-based-execution-protectio2026-10-20 https://bugrater.com/releases/cve-2026-113610-xen-orchestra-before-6-9-0-contains-an-authorization-bypass-vulnerability-in-the-xo-server-user-set-api-method-that-allows-low-privileged-authenticated-users-to2026-10-20 https://bugrater.com/releases/cve-2026-113611-outline-before-1-8-0-contains-an-improper-access-revocation-vulnerability-that-allows-deleted-administrators-to-keep-receiving-document-contents-because-userdel2026-10-20 https://bugrater.com/releases/cve-2026-113612-sparkyfitness-before-0-17-0-contains-a-missing-authorization-vulnerability-that-allows-authenticated-users-to-delete-other-users-food-variants-via-the-delete2026-10-20 https://bugrater.com/releases/cve-2026-113613-flexget-before-3-20-7-contains-a-path-traversal-vulnerability-in-the-decompress-plugin-that-allows-remote-attackers-to-write-arbitrary-files-by-supplying-malici2026-10-20 https://bugrater.com/releases/cve-2026-113676-froxlor-from-0-10-0-before-2-3-15-contains-an-authorization-bypass-vulnerability-in-the-admins-get-api-command-that-allows-resellers-to-read-any-admin-record-vi2026-10-20 https://bugrater.com/releases/cve-2026-113677-froxlor-from-0-10-0-before-2-3-15-contains-a-missing-authorization-vulnerability-in-the-subdomains-delete-api-command-that-allows-authenticated-customers-to-del2026-10-20 https://bugrater.com/releases/cve-2026-113678-froxlor-before-2-3-15-contains-a-symlink-following-vulnerability-in-statistics-makechownwithnewstats-that-allows-authenticated-customers-to-take-ownership-of-a2026-10-20 https://bugrater.com/releases/cve-2026-113679-harfbuzz-8-0-0-through-14-6-0-contains-an-out-of-bounds-write-vulnerability-in-the-experimental-webassembly-shaper-because-the-font-glyph-to-string-import-has-a2026-10-20 https://bugrater.com/releases/cve-2026-113680-harfbuzz-from-8-0-0-through-14-6-0-contains-a-null-pointer-dereference-vulnerability-in-the-experimental-webassembly-shaper-host-imports-buffer-set-contents-fa2026-10-20 https://bugrater.com/releases/cve-2026-113681-openimageio-before-3-0-20-0-3-1-x-before-3-1-15-0-and-3-2-x-before-3-2-0-3-beta1-contains-an-integer-overflow-in-cineon-codec-read-that-undersizes-the-scanl2026-10-20 https://bugrater.com/releases/cve-2026-113682-networknt-light-4j-from-2-1-5-before-2-4-0-contains-an-authentication-bypass-vulnerability-in-basicauthhandler-that-allows-unauthenticated-attackers-to-log-in-a2026-10-20 https://bugrater.com/releases/cve-2026-113683-vpl-virtual-programming-lab-for-moodle-before-5-0-0-contains-a-reflected-cross-site-scripting-vulnerability-that-allows-remote-attackers-to-inject-script-via2026-10-20 https://bugrater.com/releases/cve-2026-113703-suggestarr-before-3-0-0-contains-an-authentication-bypass-vulnerability-in-its-local-bypass-authentication-mode-where-enforce-authentication-in-api-service-au2026-10-20 https://bugrater.com/releases/cve-2026-90797-an-unlimited-gzip-decompression-routine-in-chttpd-in-apache-couchdb-3-5-2-and-below-on-all-platforms-allows-any-remote-client-to-cause-a-denial-of-service-via-m2026-10-20 https://bugrater.com/releases/cve-2026-90798-a-missing-circuit-breaker-in-the-replicator-in-apache-couchdb-3-5-2-and-below-on-all-platforms-allows-the-owner-of-a-replication-source-or-target-to-cause-a-den2026-10-20 https://bugrater.com/releases/cve-2026-90799-unsafe-binary-deserialisation-in-chttpd-in-apache-couchdb-3-5-2-and-below-on-all-platforms-allows-an-authenticated-user-to-cause-a-denial-of-service-via-memory2026-10-20 https://bugrater.com/releases/cve-2026-90800-missing-authorisation-checks-in-chttpd-in-apache-couchdb-3-5-2-and-below-on-all-platforms-allows-any-request-to-read-the-full-contents-of-a-prefixed-user-or-r2026-10-20 https://bugrater.com/releases/cve-2026-91057-gx-multi-line-text-view-display-info-get-reads-one-byte-past-the-end-of-the-application-s-text-buffer-when-the-string-it-is-given-ends-with-a-carriage-retu2026-10-20 https://bugrater.com/releases/cve-2026-92843-a-missing-bounds-check-in-the-tls-1-3-certificate-message-parser-of-netx-secure-lets-a-malicious-tls-1-3-server-trigger-an-unsigned-integer-underflow-and-a-subs2026-10-20 https://bugrater.com/releases/cve-2026-92853-the-tls-1-3-certificate-message-parser-in-netx-secure-decrements-the-message-length-to-skip-a-context-byte-without-first-establishing-that-the-message-has-a-byt2026-10-20 https://bugrater.com/releases/cve-2026-93003-the-web-add-on-s-http-server-searches-the-entire-request-packet-for-header-fields-instead-of-stopping-at-the-end-of-the-header-section-a-header-field-name-plac2026-10-20 https://bugrater.com/releases/cve-2026-93475-the-x-509-parser-in-netx-secure-accepts-an-rsa-public-key-of-any-size-but-every-signature-verification-path-decrypts-into-fixed-size-buffers-dimensioned-for-th2026-10-20 https://bugrater.com/releases/cve-2026-94018-the-web-add-on-s-http-server-dereferences-and-releases-an-uninitialized-pointer-when-it-detects-a-content-length-underflow-while-processing-a-put-request-t2026-10-20 https://bugrater.com/releases/cve-2026-94023-a-threadx-module-reaches-a-kernel-object-s-delete-service-through-the-module-manager-s-dispatch-layer-which-asked-one-question-about-the-pointer-does-the-obje2026-10-20 https://bugrater.com/releases/cve-2026-94024-the-module-manager-s-object-lookup-validated-one-byte-of-a-memory-protected-module-s-search-name-and-then-walked-as-much-of-it-as-the-module-declared-in-privil2026-10-20 https://bugrater.com/releases/cve-2026-94192-a-threadx-module-allocates-the-control-blocks-of-its-kernel-objects-from-the-module-manager-s-object-pool-and-can-ask-for-that-memory-back-by-address-with-txm2026-10-20 https://bugrater.com/releases/cve-2026-94202-the-module-manager-s-block-pool-create-dispatcher-proved-that-two-align-type-words-of-the-extra-parameter-array-a-memory-protected-module-supplies-lay-inside2026-10-20 https://bugrater.com/releases/cve-2026-95107-a-threadx-module-chooses-object-size-when-it-calls-txm-module-object-allocate-the-module-manager-adds-its-own-16-byte-private-header-to-that-size-and-asked2026-10-20 https://bugrater.com/releases/cve-2026-95108-one-logical-thread-of-a-user-mode-threadx-module-costs-the-module-manager-s-shared-object-pool-two-allocations-not-one-the-module-asks-for-a-tx-thread-contr2026-10-20 https://bugrater.com/releases/cve-2026-95109-the-cortex-a7-mmu-modules-port-validates-a-caller-supplied-buffer-by-translating-one-address-the-first-byte-the-common-module-manager-hands-its-range-che2026-10-20 https://bugrater.com/releases/cve-2026-113505-a-flaw-has-been-found-in-aapanel-up-to-8-25-0-impacted-is-the-function-send-file-of-the-file-btpanel-routes-v2-py-of-the-component-download-endpoint-executing2026-10-20 https://bugrater.com/releases/cve-2026-28328-solarwinds-observability-self-hosted-was-found-to-be-affected-by-a-broken-authorization-schema-that-can-allow-low-privileged-users-to-access-and-modify-informat2026-10-20 https://bugrater.com/releases/cve-2026-28329-solarwinds-observability-self-hosted-was-found-to-be-affected-by-a-server-side-request-forgery-ssrf-vulnerability-that-allows-authenticated-attackers-to-cause2026-10-20 https://bugrater.com/releases/cve-2026-28330-solarwinds-observability-self-hosted-was-found-to-be-affected-by-a-stored-cross-site-scripting-xss-vulnerability-that-allows-authenticated-attackers-to-inject2026-10-20 https://bugrater.com/releases/cve-2026-28331-solarwinds-patch-manager-exposes-sensitive-information-accessible-to-local-users-which-could-be-used-to-gain-elevated-privileges2026-10-20 https://bugrater.com/releases/cve-2026-105772-path-traversal-cwe-22-in-fileartifactservice-in-google-adk-typescript-google-adk-versions-0-4-0-before-0-6-0-allows-a-remote-unauthenticated-attacker-to-re2026-10-20 https://bugrater.com/releases/cve-2026-112861-authorization-bypass-through-user-controlled-key-vulnerability-in-xnau-webdesign-participants-database-participants-database-allows-exploiting-incorrectly-confi2026-10-20 https://bugrater.com/releases/cve-2026-113506-a-vulnerability-has-been-found-in-aapanel-up-to-8-25-0-the-affected-element-is-the-function-execshell-of-the-file-class-public-common-py-of-the-component-file2026-10-20 https://bugrater.com/releases/cve-2026-113507-a-vulnerability-was-found-in-aapanel-up-to-8-25-0-the-impacted-element-is-the-function-getclientip-of-the-file-class-public-common-py-the-manipulation-of-the2026-10-20 https://bugrater.com/releases/cve-2026-113802-wavlink-wl-wn530be1-a-firmware-through-m30be1-v251117-contains-an-os-command-injection-vulnerability-in-the-sub-23b54-function-of-the-ioos-binary-which-passes2026-10-20 https://bugrater.com/releases/cve-2026-113643-a-vulnerability-was-found-in-espocrm-up-to-9-3-10-10-0-10-this-affects-the-function-imagesourceprovider-get-of-the-file-application-espo-tools-pdf-dompdf-imag2026-10-20 https://bugrater.com/releases/cve-2026-86409-setting-curlopt-aws-sigv4-to-null-but-does-not-disable-sigv4-authentication-contrary-to-expectations-and-documentation-a-subsequent-transfer-on-the-same-han2026-10-20 https://bugrater.com/releases/cve-2026-86410-a-flaw-in-the-curl-command-line-tool-s-logic-makes-it-only-set-ssh-host-verification-options-when-interacting-directly-using-sftp-or-scp-and-not-as-a-result-of2026-10-20 https://bugrater.com/releases/cve-2026-86411-an-ftp-transfer-configured-with-curlusessl-none-can-reuse-a-pooled-ftp-control-connection-that-a-previous-easy-handle-upgraded-with-starttls-and-authen2026-10-20 https://bugrater.com/releases/cve-2026-86412-a-remote-http-server-can-set-a-cookie-that-curl-accepts-and-writes-to-a-netscape-cookie-jar-but-cannot-reload-on-the-next-invocation-using-the-same-path-for2026-10-20 https://bugrater.com/releases/cve-2026-86413-when-using-an-ambient-user-in-a-first-transfer-doing-negotiate-authentication-and-asked-to-follow-redirects-curl-could-pass-on-its-credential-details-to-an-u2026-10-20 https://bugrater.com/releases/cve-2012-20002-tinymce-thumbnail-gallery-plugin-for-wordpress-before-1-1-0-contains-a-path-traversal-vulnerability-that-allows-unauthenticated-attackers-to-read-arbitrary-file2026-10-20 https://bugrater.com/releases/cve-2012-20003-custom-tables-plugin-for-wordpress-before-3-4-6-contains-a-reflected-cross-site-scripting-vulnerability-that-allows-unauthenticated-attackers-to-inject-scripts2026-10-20 https://bugrater.com/releases/cve-2012-20004-k-news-plugin-for-wordpress-before-1-1-1-contains-a-reflected-cross-site-scripting-vulnerability-that-allows-unauthenticated-attackers-to-inject-script-by-suppl2026-10-20 https://bugrater.com/releases/cve-2012-20005-socialfit-plugin-for-wordpress-through-1-2-2-contains-a-reflected-cross-site-scripting-vulnerability-that-allows-unauthenticated-attackers-to-inject-scripts-via2026-10-20 https://bugrater.com/releases/cve-2014-125131-dedecms-5-6-and-5-7-contains-a-reflected-cross-site-scripting-vulnerability-that-allows-unauthenticated-attackers-to-inject-script-by-supplying-unsanitized-inpu2026-10-20 https://bugrater.com/releases/cve-2014-125132-blogroll-fun-plugin-for-wordpress-before-0-8-5-contains-a-reflected-cross-site-scripting-vulnerability-that-allows-unauthenticated-attackers-to-inject-scripts-t2026-10-20 https://bugrater.com/releases/cve-2014-125133-nativechurch-theme-for-wordpress-before-1-6-2-contains-a-path-traversal-vulnerability-that-allows-unauthenticated-attackers-to-download-arbitrary-files-through2026-10-20 https://bugrater.com/releases/cve-2014-125134-churchope-theme-for-wordpress-before-2-2-contains-a-path-traversal-vulnerability-that-allows-unauthenticated-attackers-to-download-arbitrary-files-through-the2026-10-20 https://bugrater.com/releases/cve-2015-20123-aspose-doc-exporter-plugin-for-wordpress-before-2-0-contains-a-path-traversal-vulnerability-that-allows-unauthenticated-attackers-to-download-arbitrary-files-by2026-10-20 https://bugrater.com/releases/cve-2015-20124-aspose-importer-exporter-plugin-for-wordpress-before-3-0-contains-a-path-traversal-vulnerability-that-allows-unauthenticated-attackers-to-download-arbitrary-f2026-10-20 https://bugrater.com/releases/cve-2015-20125-aspose-pdf-exporter-plugin-for-wordpress-before-2-0-contains-a-path-traversal-vulnerability-that-allows-unauthenticated-attackers-to-download-files-through-the2026-10-20 https://bugrater.com/releases/cve-2015-20128-foosun-dotnetcms-1-0-and-2-0-contains-an-sql-injection-vulnerability-that-allows-unauthenticated-attackers-to-manipulate-mssql-queries-through-the-cityid-parame2026-10-20 https://bugrater.com/releases/cve-2016-20100-memphis-documents-library-plugin-for-wordpress-before-3-1-6-contains-a-path-traversal-vulnerability-that-allows-unauthenticated-attackers-to-read-arbitrary-file2026-10-20 https://bugrater.com/releases/cve-2016-20101-issuu-panel-plugin-for-wordpress-before-1-6-6-contains-a-php-file-inclusion-vulnerability-that-allows-unauthenticated-attackers-to-include-remote-or-local-files2026-10-20 https://bugrater.com/releases/cve-2016-20102-javamelody-before-1-60-0-contains-a-reflected-cross-site-scripting-vulnerability-that-allows-unauthenticated-attackers-to-inject-script-by-supplying-crafted-val2026-10-20 https://bugrater.com/releases/cve-2016-20103-cherry-plugin-for-wordpress-before-1-2-7-contains-a-path-traversal-vulnerability-that-allows-unauthenticated-attackers-to-download-arbitrary-files-via-the-file2026-10-20 https://bugrater.com/releases/cve-2016-20104-eyelock-nano-nxt-3-05-1193-3-04-1108-3-03-944-and-3-01-646-contain-a-path-traversal-vulnerability-that-allows-unauthenticated-attackers-to-read-arbitrary-fil2026-10-20 https://bugrater.com/releases/cve-2026-101103-the-peak-system-pcan-diagnostic-call-did-not-validate-that-the-caller-supplied-output-buffer-was-large-enough-to-hold-the-output-record2026-10-20 https://bugrater.com/releases/cve-2026-103672-the-peak-system-pcan-parser-indexes-a-length-table-using-attacker-controlled-dlc-without-enforcing-dlc-0x0f-then-copies-attacker-payload-from-record-0x1c-in2026-10-20 https://bugrater.com/releases/cve-2026-105960-peak-system-pcan-contains-a-vulnerable-operation-involving-a-variable-length-receive-record-copy-the-driver-uses-a-requested-or-queued-record-count-without-suf2026-10-20 https://bugrater.com/releases/cve-2026-107928-when-curl-is-built-with-gnutls-a-malicious-websocket-server-can-make-curl-send-memory-past-its-send-buffer-this-is-due-to-an-out-of-bounds-read-following-when2026-10-20 https://bugrater.com/releases/cve-2026-107929-when-curlopt-interface-or-the-command-line-tool-s-interface-option-is-set-with-one-of-the-documented-prefixes-if-host-ifhost-that-binding2026-10-20 https://bugrater.com/releases/cve-2026-109576-the-parser-in-peak-system-pcan-driver-correctly-detected-the-malformed-record-but-the-loop-iterating-the-record-list-advanced-its-processed-bytes-counter-even2026-10-20 https://bugrater.com/releases/cve-2026-10131-an-os-command-injection-vulnerability-exists-in-the-boa-formpasswordsetup-functionality-of-x2000r-version-s-totolink-x2000r-gh-v1-0-0-b20250421-1327-a-spec2026-10-20 https://bugrater.com/releases/cve-2026-10132-a-stack-based-buffer-overflow-vulnerability-exists-in-the-boa-formipqos-mac-functionality-of-x2000r-version-s-totolink-x2000r-gh-v1-0-0-b20250421-1327-a-sp2026-10-20 https://bugrater.com/releases/cve-2026-10133-a-stack-based-buffer-overflow-vulnerability-exists-in-the-batchupg-functionality-of-x2000r-version-s-totolink-x2000r-gh-v1-0-0-b20250421-1327-a-specially-c2026-10-20 https://bugrater.com/releases/cve-2026-10135-a-os-command-injection-vulnerability-exists-in-the-batchupg-functionality-of-x2000r-version-s-totolink-x2000r-gh-v1-0-0-b20250421-1327-a-specially-crafted2026-10-20 https://bugrater.com/releases/cve-2026-10136-a-heap-based-buffer-overflow-vulnerability-exists-in-the-boa-formupload-functionality-of-x2000r-version-s-totolink-x2000r-gh-v1-0-0-b20250421-1327-a-spec2026-10-20 https://bugrater.com/releases/cve-2026-10137-a-stack-based-buffer-overflow-vulnerability-exists-in-the-boa-formupload-functionality-of-x2000r-version-s-totolink-x2000r-gh-v1-0-0-b20250421-1327-a-spe2026-10-20 https://bugrater.com/releases/cve-2026-10138-a-os-command-injection-vulnerability-exists-in-the-boa-formupload-functionality-of-x2000r-version-s-totolink-x2000r-gh-v1-0-0-b20250421-1327-a-specially2026-10-20 https://bugrater.com/releases/cve-2026-10139-a-stack-based-buffer-overflow-vulnerability-exists-in-the-mcli-functionality-of-x2000r-version-s-totolink-x2000r-gh-v1-0-0-b20250421-1327-a-specially-craft2026-10-20 https://bugrater.com/releases/cve-2026-10141-a-unsigned-firmware-vulnerability-exists-in-the-boa-firmware-update-functionality-of-x2000r-version-s-totolink-x2000r-gh-v1-0-0-b20250421-1327-a-specially2026-10-20 https://bugrater.com/releases/cve-2026-110322-the-peak-system-pcan-type-0x4030-processing-path-fails-to-validate-a-selected-returned-object-pointer-before-dereferencing-fixed-fields-during-post-processing2026-10-20 https://bugrater.com/releases/cve-2026-112407-incorrect-privilege-assignment-in-the-iam-policy-of-aws-cicd-toolchain-for-serverless-applications-1-0-7-through-1-0-10-allows-remote-authenticated-users-with-p2026-10-20 https://bugrater.com/releases/cve-2026-112712-fastify-middie-is-the-express-style-middleware-engine-for-fastify-in-versions-from-9-0-0-through-9-3-5-the-use-function-joined-a-path-scoped-middleware-s-m2026-10-20 https://bugrater.com/releases/cve-2026-28763-a-stack-based-buffer-overflow-vulnerability-exists-in-the-boa-formmapdeldevice-hostname-functionality-of-x2000r-version-s-totolink-x2000r-gh-v1-0-0-b202504212026-10-20 https://bugrater.com/releases/cve-2026-33568-a-os-command-injection-vulnerability-exists-in-the-boa-formmapdeldevice-macstr-functionality-of-x2000r-version-s-totolink-x2000r-gh-v1-0-0-b20250421-1327-a2026-10-20 https://bugrater.com/releases/cve-2026-35499-an-os-command-injection-vulnerability-exists-in-the-boa-formwsc-peerrptpin-functionality-of-totolink-x2000r-totolink-x2000r-gh-v1-0-0-b20250421-1327-a-speciall2026-10-20 https://bugrater.com/releases/cve-2026-40615-a-stack-based-buffer-overflow-vulnerability-exists-in-the-boa-formparentcontrol-devicename-functionality-of-x2000r-version-s-totolink-x2000r-gh-v1-0-0-b202502026-10-20 https://bugrater.com/releases/cve-2026-40627-an-os-command-injection-vulnerability-exists-in-the-boa-formwsc-targetapssid-functionality-of-totolink-x2000r-totolink-x2000r-gh-v1-0-0-b20250421-1327-a-specia2026-10-20 https://bugrater.com/releases/cve-2026-41222-a-stack-based-buffer-overflow-vulnerability-exists-in-the-boa-formparentcontrol-url-functionality-of-x2000r-version-s-totolink-x2000r-gh-v1-0-0-b20250421-1322026-10-20 https://bugrater.com/releases/cve-2026-41223-a-stack-based-buffer-overflow-vulnerability-exists-in-the-boa-formmapdeldevice-macstr-functionality-of-x2000r-version-s-totolink-x2000r-gh-v1-0-0-b20250421-12026-10-20 https://bugrater.com/releases/cve-2026-42019-multiple-stack-based-buffer-overflow-vulnerabilities-exist-in-the-boa-formipv6setup-pppoe-functionality-of-totolink-x2000r-totolink-x2000r-gh-v1-0-0-b20250421-12026-10-20 https://bugrater.com/releases/cve-2026-42020-multiple-stack-based-buffer-overflow-vulnerabilities-exist-in-the-boa-formipv6setup-pppoe-functionality-of-totolink-x2000r-totolink-x2000r-gh-v1-0-0-b20250421-12026-10-20 https://bugrater.com/releases/cve-2026-42021-multiple-stack-based-buffer-overflow-vulnerabilities-exist-in-the-boa-formipv6setup-static-network-configuration-functionality-of-totolink-x2000r-totolink-x20002026-10-20 https://bugrater.com/releases/cve-2026-42022-multiple-stack-based-buffer-overflow-vulnerabilities-exist-in-the-boa-formipv6setup-static-network-configuration-functionality-of-totolink-x2000r-totolink-x20002026-10-20 https://bugrater.com/releases/cve-2026-42023-multiple-stack-based-buffer-overflow-vulnerabilities-exist-in-the-boa-formipv6setup-static-network-configuration-functionality-of-totolink-x2000r-totolink-x20002026-10-20 https://bugrater.com/releases/cve-2026-42024-multiple-stack-based-buffer-overflow-vulnerabilities-exist-in-the-boa-formipv6setup-static-network-configuration-functionality-of-totolink-x2000r-totolink-x20002026-10-20 https://bugrater.com/releases/cve-2026-42025-multiple-exploitable-stack-based-buffer-overflow-vulnerabilities-exist-in-the-boa-formipv6setup-dhcp-dns-functionality-of-x2000r-version-s-totolink-x2000r-gh2026-10-20 https://bugrater.com/releases/cve-2026-42026-multiple-exploitable-stack-based-buffer-overflow-vulnerabilities-exist-in-the-boa-formipv6setup-dhcp-dns-functionality-of-x2000r-version-s-totolink-x2000r-gh2026-10-20 https://bugrater.com/releases/cve-2026-86414-an-http-proxy-can-trick-libcurl-into-sending-the-origin-s-credentials-basic-password-or-a-negotiate-kerberos-ticket-to-the-proxy-itself-by-answering-the-co2026-10-20 https://bugrater.com/releases/cve-2026-86415-libcurl-s-connection-cache-match-function-never-considers-the-automatic-client-certificate-option-so-a-cached-already-authenticated-schannel-connection-can-be2026-10-20 https://bugrater.com/releases/cve-2026-87861-when-using-ambient-user-credentials-an-http-request-directed-to-one-origin-may-be-dispatched-over-a-connection-previously-authenticated-via-negotiate-for-a-dif2026-10-20 https://bugrater.com/releases/cve-2026-87862-importing-a-includesubdomains-parent-hsts-entry-before-a-longer-lived-child-entry-silently-drops-the-child-consequently-when-the-parent-expires-the-child2026-10-20 https://bugrater.com/releases/cve-2026-87863-an-authenticated-https-origin-can-supply-an-hsts-max-age-value-that-the-parser-accepts-but-time-serialization-later-fails-to-process-on-64-bit-systems-extr2026-10-20 https://bugrater.com/releases/cve-2026-87864-enabling-curlopt-crlf-causes-curl-to-advertise-the-raw-input-byte-count-in-the-imap-append-n-literal-while-transmitting-line-ending-expanded-data-the-ser2026-10-20 https://bugrater.com/releases/cve-2026-87865-when-libcurl-uses-libssh2-with-a-hashed-known-hosts-file-an-unrelated-initial-entry-can-cause-host-key-validation-to-report-a-key-mismatch-as-a-missing-k2026-10-20 https://bugrater.com/releases/cve-2026-87866-when-built-with-wolfssl-curl-can-successfully-validate-a-pinned-public-key-hash-against-a-key-the-tls-peer-does-not-possess-during-the-tls-handshake-wolfssl2026-10-20 https://bugrater.com/releases/cve-2026-92386-when-writing-a-long-cookie-name-and-value-to-a-netscape-cookie-jar-a-remote-http-server-can-make-curl-write-a-record-that-exceeds-its-line-length-parsing-lim2026-10-20 https://bugrater.com/releases/cve-2026-92387-by-permanently-omitting-the-final-control-response-line-a-malicious-ftp-imap-pop3-or-smtp-server-can-exploit-libcurl-and-completely-bypass-its-configured-tr2026-10-20 https://bugrater.com/releases/cve-2026-92388-when-an-ftp-wildcard-list-operation-fails-libcurl-omits-the-restoration-path-meant-for-successful-listings-leaving-the-write-callback-set-to-the-internal-li2026-10-20 https://bugrater.com/releases/cve-2026-92389-libcurl-s-tftp-state-machine-fails-to-validate-state-transitions-against-the-requested-transfer-direction-accepting-opening-server-responses-for-both-reads-and2026-10-20 https://bugrater.com/releases/cve-2026-92390-when-invoked-with-remote-header-name-j-curl-fails-to-preserve-its-documented-anti-clobbering-protection-if-an-intermediate-103-early-hints-response-pr2026-10-20 https://bugrater.com/releases/cve-2026-92391-a-deeply-nested-multipart-mime-structure-constructed-via-the-public-api-causes-a-stack-overflow-in-libcurl-during-normal-cleanup-operations-an-excessive-recurs2026-10-20 https://bugrater.com/releases/cve-2026-94265-when-processing-an-http-redirect-to-a-url-containing-userinfo-a-username-password-component-curl-might-erroneously-retain-and-re-transmit-the-original-host2026-10-20 https://bugrater.com/releases/cve-2026-94266-libcurl-could-accidentally-return-a-url-for-curl-easy-getinfo-s-curlinfo-effective-url-option-containing-credentials-even-though-neither-the-url-provided2026-10-20 https://bugrater.com/releases/cve-2026-9659-multiple-exploitable-stack-based-buffer-overflow-vulnerabilities-exist-in-the-boa-formfilter-functionality-of-x2000r-version-s-totolink-x2000r-gh-v1-0-0-b2022026-10-20 https://bugrater.com/releases/cve-2026-9660-multiple-exploitable-stack-based-buffer-overflow-vulnerabilities-exist-in-the-boa-formfilter-functionality-of-x2000r-version-s-totolink-x2000r-gh-v1-0-0-b2022026-10-20 https://bugrater.com/releases/cve-2026-9814-an-os-command-injection-vulnerability-exists-in-the-boa-formwizard-newpass-functionality-of-x2000r-version-s-totolink-x2000r-gh-v1-0-0-b20250421-1327-a-spe2026-10-20 https://bugrater.com/releases/cve-2026-9817-a-stack-based-buffer-overflow-vulnerability-exists-in-the-boa-formuploadfile-functionality-of-x2000r-version-s-totolink-x2000r-gh-v1-0-0-b20250421-1327-a-s2026-10-20 https://bugrater.com/releases/cve-2026-9827-a-arbitrary-file-write-vulnerability-exists-in-the-boa-formuploadfile-functionality-of-x2000r-version-s-totolink-x2000r-gh-v1-0-0-b20250421-1327-a-speciall2026-10-20 https://bugrater.com/releases/cve-2026-9869-a-stack-based-buffer-overflow-vulnerability-exists-in-the-boa-formtr069config-functionality-of-x2000r-version-s-totolink-x2000r-gh-v1-0-0-b20250421-1327-a2026-10-20 https://bugrater.com/releases/stable-channel-update-for-desktop-42026-10-21 https://bugrater.com/releases/drupal-security-releases-october-20262026-10-21 https://bugrater.com/releases/easy-property-listings-security-releases-october-20262026-10-21 https://bugrater.com/releases/elementsready-addons-for-elementor-security-releases-october-20262026-10-21 https://bugrater.com/releases/emersion-security-releases-october-20262026-10-21 https://bugrater.com/releases/eosphoros-ai-security-releases-october-20262026-10-21 https://bugrater.com/releases/eptura-security-releases-october-20262026-10-21 https://bugrater.com/releases/security-vulnerabilities-fixed-in-thunderbird-153-5-12026-10-21 https://bugrater.com/releases/security-vulnerabilities-fixed-in-thunderbird-158-0-12026-10-21 https://bugrater.com/releases/security-vulnerabilities-fixed-in-firefox-esr-115-43-12026-10-21 https://bugrater.com/releases/prasathmani-security-releases-october-20262026-10-21 https://bugrater.com/releases/prvtpro-security-releases-october-20262026-10-21 https://bugrater.com/releases/houtini-ai-security-releases-october-20262026-10-21 https://bugrater.com/releases/westboy-security-releases-october-20262026-10-21 https://bugrater.com/releases/omnispace-security-releases-october-20262026-10-21 https://bugrater.com/releases/predibase-security-releases-october-20262026-10-21 https://bugrater.com/releases/katanemo-security-releases-october-20262026-10-21 https://bugrater.com/releases/traccar-security-releases-october-20262026-10-21 https://bugrater.com/releases/dbeaver-security-releases-october-20262026-10-21 https://bugrater.com/releases/quarkiverse-security-releases-october-20262026-10-21 https://bugrater.com/releases/agnaistic-security-releases-october-20262026-10-21 https://bugrater.com/releases/elunez-security-releases-october-20262026-10-21 https://bugrater.com/releases/suitecrm-security-releases-october-20262026-10-21 https://bugrater.com/releases/combodo-security-releases-october-20262026-10-21 https://bugrater.com/releases/e2b-dev-security-releases-october-20262026-10-21 https://bugrater.com/releases/ag2ai-security-releases-october-20262026-10-21 https://bugrater.com/releases/casdoor-security-releases-october-20262026-10-21 https://bugrater.com/releases/tozed-security-releases-october-20262026-10-21 https://bugrater.com/releases/broadcom-security-releases-october-20262026-10-21 https://bugrater.com/releases/xorbitsai-security-releases-october-20262026-10-21 https://bugrater.com/releases/alextselegidis-security-releases-october-20262026-10-21 https://bugrater.com/releases/red-hat-security-releases-march-20242026-10-21 https://bugrater.com/releases/google-security-releases-october-20262026-10-21 https://bugrater.com/releases/libraw-security-releases-april-20262026-10-21 https://bugrater.com/releases/stable-channel-update-for-chromeos-chromeos-flex-22026-10-22 https://bugrater.com/releases/the-libreswan-project-security-releases-october-20262026-10-22 https://bugrater.com/releases/hypr-security-releases-october-20262026-10-22 https://bugrater.com/releases/inductive-automation-security-releases-october-20262026-10-22 https://bugrater.com/releases/tp-link-systems-inc-security-releases-october-20262026-10-22 https://bugrater.com/releases/onlyoffice-security-releases-october-20262026-10-22 https://bugrater.com/releases/python-software-foundation-security-releases-august-20262026-10-22 https://bugrater.com/releases/ffmpeg-security-releases-october-20262026-10-22 https://bugrater.com/releases/masaakitanaka-security-releases-october-20262026-10-22 https://bugrater.com/releases/davefx-security-releases-october-20262026-10-22 https://bugrater.com/releases/dontdream-security-releases-october-20262026-10-22 https://bugrater.com/releases/arshidkv12-security-releases-october-20262026-10-22 https://bugrater.com/releases/wpwax-security-releases-october-20262026-10-22 https://bugrater.com/releases/holithemes-security-releases-october-20262026-10-22 https://bugrater.com/releases/printcart-security-releases-october-20262026-10-22 https://bugrater.com/releases/tvu-networks-security-releases-october-20262026-10-22 https://bugrater.com/releases/tzwm-security-releases-october-20262026-10-22 https://bugrater.com/releases/mit-security-releases-october-20262026-10-22 https://bugrater.com/releases/winsiderss-security-releases-october-20262026-10-22 https://bugrater.com/releases/samsung-open-source-security-releases-october-20262026-10-22 https://bugrater.com/releases/syed-balkhi-security-releases-october-20262026-10-22 https://bugrater.com/releases/open5gs-security-releases-october-20262026-10-22 https://bugrater.com/releases/samsung-opensource-security-releases-october-20262026-10-22 https://bugrater.com/releases/hotspotbilling-security-releases-october-20262026-10-22 https://bugrater.com/releases/netease-youdao-security-releases-october-20262026-10-22 https://bugrater.com/releases/tyche-softwares-security-releases-october-20262026-10-22 https://bugrater.com/releases/ateshabaev-security-releases-october-20262026-10-22 https://bugrater.com/releases/snazzyplugins-security-releases-october-20262026-10-22 https://bugrater.com/releases/epic-games-security-releases-october-20262026-10-22 https://bugrater.com/releases/strapi-security-releases-october-20262026-10-22 https://bugrater.com/releases/fusionpbx-security-releases-october-20262026-10-22 https://bugrater.com/releases/pdfmathtranslate-security-releases-october-20262026-10-22 https://bugrater.com/releases/genspark-ai-security-releases-october-20262026-10-22 https://bugrater.com/releases/swe-agent-security-releases-october-20262026-10-22 https://bugrater.com/releases/cohere-ai-security-releases-october-20262026-10-22 https://bugrater.com/releases/addsumtech-security-releases-october-20262026-10-22 https://bugrater.com/releases/openspug-security-releases-october-20262026-10-22 https://bugrater.com/releases/lippu-security-releases-october-20262026-10-22 https://bugrater.com/releases/open-asset-import-library-security-releases-october-20262026-10-22 https://bugrater.com/releases/red-hat-security-releases-march-20262026-10-22 https://bugrater.com/releases/gnome-security-releases-december-20252026-10-22 https://bugrater.com/releases/red-hat-security-releases-may-20252026-10-22 https://bugrater.com/releases/red-hat-security-releases-january-20262026-10-22 https://bugrater.com/releases/p11-glue-security-releases-march-20262026-10-22 https://bugrater.com/releases/ice00-security-releases-october-20262026-10-22 https://bugrater.com/releases/streetforce1-security-releases-october-20262026-10-22 https://bugrater.com/releases/wpdevart-security-releases-october-20262026-10-22 https://bugrater.com/releases/danrossiter-security-releases-october-20262026-10-22 https://bugrater.com/releases/ntbyk-security-releases-october-20262026-10-22 https://bugrater.com/releases/doctorwp-security-releases-october-20262026-10-22 https://bugrater.com/releases/blackworks1-security-releases-october-20262026-10-22 https://bugrater.com/releases/monster-menus-critical-php-object-injection-sa-contrib-2026-2532026-10-22 https://bugrater.com/releases/rabbit-hole-moderately-critical-access-bypass-sa-contrib-2026-2522026-10-22 https://bugrater.com/releases/ai-file-to-text-moderately-critical-access-bypass-sa-contrib-2026-2512026-10-22 https://bugrater.com/releases/data-field-moderately-critical-cross-site-scripting-sa-contrib-2026-2502026-10-22 https://bugrater.com/releases/domain-login-restrict-moderately-critical-access-bypass-sa-contrib-2026-2492026-10-22 https://bugrater.com/releases/shield-moderately-critical-access-bypass-sa-contrib-2026-2482026-10-22 https://bugrater.com/releases/imageapi-optimize-webp-moderately-critical-information-disclosure-sa-contrib-2026-2472026-10-22 https://bugrater.com/releases/tinypng-moderately-critical-information-disclosure-sa-contrib-2026-2462026-10-22 https://bugrater.com/releases/avisverifies-security-releases-october-20262026-10-22 https://bugrater.com/releases/10web-security-releases-october-20262026-10-22 https://bugrater.com/releases/pasyuk-security-releases-october-20262026-10-22 https://bugrater.com/releases/dougwollison-security-releases-october-20262026-10-22 https://bugrater.com/releases/themefusion-security-releases-october-20262026-10-22 https://bugrater.com/releases/vbulletin-security-releases-july-20262026-10-22 https://bugrater.com/releases/webpros-security-releases-september-20262026-10-22 https://bugrater.com/releases/wireshark-foundation-security-releases-september-20262026-10-22 https://bugrater.com/releases/gitlab-security-releases-september-20232026-10-22 https://bugrater.com/releases/hyyan-security-releases-october-20262026-10-22 https://bugrater.com/releases/joaoromao-security-releases-october-20262026-10-22 https://bugrater.com/releases/netbird-security-releases-october-20262026-10-22 https://bugrater.com/releases/walletdoc-payment-gateway-for-woocommerce-security-releases-october-20262026-10-22 https://bugrater.com/releases/image-photo-gallery-final-tiles-grid-security-releases-october-20262026-10-22 https://bugrater.com/releases/rank-math-seo-security-releases-october-20262026-10-22 https://bugrater.com/releases/schedule-post-changes-with-publishpress-future-unpublish-delete-change-status-trash-change-categories-security-releases-october-20262026-10-22 https://bugrater.com/releases/codeatoz-b2b-suite-for-woocommerce-security-releases-october-20262026-10-22 https://bugrater.com/releases/campay-shortcode-payment-gateway-security-releases-october-20262026-10-22 https://bugrater.com/releases/wp-data-access-security-releases-october-20262026-10-22 https://bugrater.com/releases/nex-forms-security-releases-october-20262026-10-22 https://bugrater.com/releases/gutenverse-form-security-releases-october-20262026-10-22 https://bugrater.com/releases/classified-listing-security-releases-october-20262026-10-22 https://bugrater.com/releases/wp-booking-system-security-releases-october-20262026-10-22 https://bugrater.com/releases/ltl-freight-quotes-security-releases-october-20262026-10-22 https://bugrater.com/releases/gamipress-security-releases-october-20262026-10-22 https://bugrater.com/releases/ultimate-multisite-security-releases-october-20262026-10-22 https://bugrater.com/releases/file-upload-to-order-security-releases-october-20262026-10-22 https://bugrater.com/releases/wp-encryption-security-releases-october-20262026-10-22 https://bugrater.com/releases/wp-2fa-security-releases-october-20262026-10-22 https://bugrater.com/releases/sunshine-photo-cart-security-releases-october-20262026-10-22 https://bugrater.com/releases/embedpress-security-releases-october-20262026-10-22 https://bugrater.com/releases/fv-flowplayer-video-player-security-releases-october-20262026-10-22 https://bugrater.com/releases/affiliate-toolkit-security-releases-october-20262026-10-22 https://bugrater.com/releases/pricing-table-security-releases-october-20262026-10-22 https://bugrater.com/releases/forms-security-releases-october-20262026-10-22 https://bugrater.com/releases/trust-payments-gateway-for-woocommerce-security-releases-october-20262026-10-22 https://bugrater.com/releases/product-feed-for-google-shopping-microsoft-advertising-and-40-channels-for-woocommerce-merchant-security-releases-october-20262026-10-22 https://bugrater.com/releases/asaas-gateway-for-woocommerce-security-releases-october-20262026-10-22 https://bugrater.com/releases/rtmedia-for-wordpress-buddypress-and-bbpress-security-releases-october-20262026-10-22 https://bugrater.com/releases/fast-courier-security-releases-october-20262026-10-22 https://bugrater.com/releases/tainacan-security-releases-october-20262026-10-22 https://bugrater.com/releases/robokassa-payment-gateway-for-woocommerce-security-releases-october-20262026-10-22 https://bugrater.com/releases/donation-thermometer-security-releases-october-20262026-10-22 https://bugrater.com/releases/yith-woocommerce-popup-security-releases-october-20262026-10-22 https://bugrater.com/releases/sellkit-security-releases-october-20262026-10-22 https://bugrater.com/releases/sifalo-pay-security-releases-october-20262026-10-22 https://bugrater.com/releases/paymentfor-gateway-for-woocommerce-security-releases-october-20262026-10-22 https://bugrater.com/releases/cart-abandonment-recovery-for-woocommerce-security-releases-october-20262026-10-22 https://bugrater.com/releases/awp-classifieds-security-releases-october-20262026-10-22 https://bugrater.com/releases/cve-2026-114381-a-vulnerability-was-determined-in-itsourcecode-online-cake-ordering-system-1-0-the-affected-element-is-an-unknown-function-of-the-file-orderdetail-php-execut2026-10-22 https://bugrater.com/releases/cve-2026-114382-a-security-flaw-has-been-discovered-in-totolink-ex200-5-2-3c-7200-this-affects-the-function-setstaticdhcpconfig-of-the-file-cgi-bin-cstecgi-cgi-of-the-compone2026-10-22 https://bugrater.com/releases/cve-2026-114383-a-weakness-has-been-identified-in-totolink-ex200-5-2-3c-7200-this-impacts-the-function-setwifiacladdconfig-of-the-file-cgi-bin-cstecgi-cgi-of-the-component-wi2026-10-22 https://bugrater.com/releases/cve-2026-114384-a-security-vulnerability-has-been-detected-in-itsourcecode-online-cake-ordering-system-1-0-affected-is-an-unknown-function-of-the-file-transactionsave-php-su2026-10-22 https://bugrater.com/releases/cve-2026-103090-missing-authentication-for-critical-function-cwe-306-and-insufficiently-protected-credentials-cwe-522-in-the-control-plane-enrollment-status-handler-handle2026-10-22 https://bugrater.com/releases/cve-2026-114439-a-vulnerability-was-determined-in-oretnom23-php-travel-agency-system-affected-by-this-issue-is-some-unknown-functionality-of-the-file-admin-session-php-of-the2026-10-22 https://bugrater.com/releases/cve-2026-114440-a-vulnerability-was-identified-in-oretnom23-php-travel-agency-system-this-affects-an-unknown-part-of-the-file-admin-delete-php-the-manipulation-of-the-argumen2026-10-22 https://bugrater.com/releases/cve-2026-114441-a-weakness-has-been-identified-in-oretnom23-php-travel-agency-system-this-issue-affects-some-unknown-processing-of-the-file-admin-update-php-this-manipulation2026-10-22 https://bugrater.com/releases/cve-2026-76287-in-splunk-enterprise-versions-below-10-4-4-a-user-that-holds-a-role-with-the-preview-data-management-pipeline-capability-or-edit-data-management-pipeline-job-c2026-10-22 https://bugrater.com/releases/cve-2026-76288-in-splunk-enterprise-versions-below-10-4-4-10-2-8-10-0-11-and-9-4-16-an-unauthenticated-user-could-send-a-single-crafted-request-to-the-splunk-web-javascrip2026-10-22 https://bugrater.com/releases/cve-2026-76289-in-splunk-enterprise-versions-below-10-4-4-10-2-8-10-0-11-and-9-4-16-a-user-who-does-not-hold-the-admin-or-power-splunk-roles-could-make-the-splunk-ente2026-10-22 https://bugrater.com/releases/cve-2026-76290-in-splunk-enterprise-versions-below-10-4-4-10-2-8-and-10-0-11-an-unauthenticated-user-could-send-repeated-requests-to-the-edge-processor-package-download-end2026-10-22 https://bugrater.com/releases/cve-2026-76291-in-splunk-enterprise-versions-below-10-4-4-10-2-8-10-0-11-and-9-4-16-a-user-that-holds-a-role-with-the-schedule-search-capability-could-bypass-the-expected2026-10-22 https://bugrater.com/releases/cve-2026-76292-in-splunk-enterprise-versions-below-10-4-4-10-2-8-10-0-11-and-9-4-16-and-splunk-secure-gateway-versions-below-3-10-12-3-9-26-and-3-8-73-a-low-privileged2026-10-22 https://bugrater.com/releases/cve-2026-76293-in-splunk-enterprise-versions-below-10-4-3-10-2-8-10-0-11-and-9-4-16-a-user-that-holds-a-role-with-the-edit-manager-xml-capability-could-execute-arbitrary-o2026-10-22 https://bugrater.com/releases/cve-2026-76294-in-splunk-enterprise-versions-below-10-4-4-10-2-8-10-0-11-and-9-4-16-a-user-who-does-not-hold-the-admin-or-power-splunk-roles-could-move-field-extractio2026-10-22 https://bugrater.com/releases/cve-2026-76295-in-splunk-enterprise-versions-below-10-4-4-10-2-8-10-0-11-and-9-4-16-and-splunk-secure-gateway-versions-below-3-10-12-3-9-26-and-3-8-73-a-user-who-does-n2026-10-22 https://bugrater.com/releases/cve-2026-76296-in-splunk-enterprise-versions-below-10-4-4-10-2-8-10-0-11-and-9-4-16-a-user-who-does-not-hold-the-admin-or-power-splunk-roles-could-create-move-edit2026-10-22 https://bugrater.com/releases/cve-2026-76297-in-splunk-enterprise-versions-below-10-4-4-10-2-8-10-0-11-and-9-4-16-an-unauthenticated-user-could-trick-a-user-that-holds-a-role-with-the-edit-federated-pr2026-10-22 https://bugrater.com/releases/cve-2026-76298-in-splunk-enterprise-versions-below-10-4-4-and-10-2-8-a-user-who-does-not-hold-the-admin-or-power-splunk-roles-could-derive-the-postgresql-sidecar-database2026-10-22 https://bugrater.com/releases/cve-2026-76303-in-splunk-soar-versions-below-8-7-0-a-user-that-holds-a-role-with-the-install-apps-capability-could-store-attacker-controlled-content-that-splunk-soar-displays2026-10-22 https://bugrater.com/releases/cve-2026-76304-in-splunk-soar-versions-below-8-7-0-an-authenticated-user-who-does-not-hold-a-role-with-permission-to-edit-automation-brokers-could-download-the-splunk-soar-au2026-10-22 https://bugrater.com/releases/cve-2026-76305-in-splunk-soar-versions-below-8-7-0-an-authenticated-user-who-does-not-hold-a-role-with-permission-to-view-apps-could-download-an-archive-of-an-installed-app2026-10-22 https://bugrater.com/releases/cve-2026-76306-in-splunk-soar-versions-below-8-7-0-a-user-that-has-the-observer-role-could-use-query-filters-in-the-representational-state-transfer-rest-api-to-infer-pass2026-10-22 https://bugrater.com/releases/cve-2026-76307-in-splunk-soar-versions-below-8-7-0-a-user-that-holds-a-role-with-the-users-and-roles-view-permission-could-use-the-representational-state-transfer-rest-api2026-10-22 https://bugrater.com/releases/cve-2026-76308-in-splunk-soar-versions-below-8-7-0-an-authenticated-user-could-change-the-enterprise-security-edition-through-the-representational-state-transfer-rest-api-a2026-10-22 https://bugrater.com/releases/cve-2026-76406-in-splunk-soar-versions-below-8-7-0-an-unauthenticated-user-with-access-to-encrypted-credential-data-from-an-affected-splunk-soar-instance-could-submit-basic-a2026-10-22 https://bugrater.com/releases/cve-2026-89052-a-hardcoded-cryptographic-key-management-vulnerability-exists-in-archer-c6-due-to-the-use-of-a-universal-cryptographic-key-shared-across-devices-an-attacker-wh2026-10-22 https://bugrater.com/releases/jenkins-security-advisory-2017-11-082026-10-22 https://bugrater.com/releases/gitlab-critical-patch-release-19-5-1-19-4-3-19-3-6-19-2-9-19-1-9-19-0-10-18-11-132026-10-22 https://bugrater.com/releases/security-vulnerabilities-fixed-in-firefox-for-android-158-0-22026-10-22 https://bugrater.com/releases/security-vulnerabilities-fixed-in-firefox-esr-153-5-12026-10-22 https://bugrater.com/releases/security-vulnerabilities-fixed-in-firefox-158-0-12026-10-22 https://bugrater.com/releases/erik-debye-security-releases-october-20262026-10-22 https://bugrater.com/releases/facturascripts-security-releases-october-20262026-10-22 https://bugrater.com/releases/fast-uri-security-releases-october-20262026-10-22 https://bugrater.com/releases/cve-2026-114574-a-security-vulnerability-has-been-detected-in-masscodeio-masscode-5-10-affected-is-an-unknown-function-of-the-file-src-main-api-index-ts-of-the-component-local2026-10-22 https://bugrater.com/releases/cve-2026-114575-a-flaw-has-been-found-in-totolink-a950rg-4-1-2cu-5268-b20221104-affected-by-this-issue-is-the-function-uploadcustommodule-of-the-file-lib-cste-modules-product2026-10-22 https://bugrater.com/releases/cve-2026-114714-roundcube-webmail-before-1-6-20-and-1-7-x-before-1-7-5-is-affected-by-a-path-traversal-vulnerability-in-the-squirrelmail-usercopy-plugin-with-the-file-based-ba2026-10-22 https://bugrater.com/releases/cve-2026-114576-a-vulnerability-has-been-found-in-linksys-re6250-1-0-04-001-this-affects-the-function-strcmp-of-the-component-web-management-interface-the-manipulation-of-the2026-10-22 https://bugrater.com/releases/cve-2026-114577-a-vulnerability-was-found-in-oretnom23-php-travel-agency-system-this-vulnerability-affects-unknown-code-of-the-file-admin-insert-php-of-the-component-insertion2026-10-22 https://bugrater.com/releases/cve-2026-114633-wwbn-avideo-before-29-4-0-contains-an-incorrect-authorization-vulnerability-that-allows-delegated-users-admin-accounts-to-delete-or-modify-administrator-account2026-10-22 https://bugrater.com/releases/cve-2026-114634-wwbn-avideo-before-29-4-0-contains-a-blind-server-side-request-forgery-vulnerability-in-getheadercontenttypefromurl-because-get-headers-follows-redirects-wi2026-10-22 https://bugrater.com/releases/cve-2026-114635-traefik-before-v2-11-58-and-v3-7-14-contains-an-authentication-bypass-vulnerability-in-its-sni-check-which-is-skipped-when-request-tls-state-is-nil-unauthenti2026-10-22 https://bugrater.com/releases/cve-2026-114637-traefik-from-v3-2-0-before-v3-7-14-contains-an-authentication-bypass-vulnerability-in-the-experimental-fastproxy-connection-pool-which-fails-to-pin-ntlm-negoti2026-10-22 https://bugrater.com/releases/cve-2026-114638-traefik-v3-7-0-before-v3-7-14-contains-an-improper-authentication-vulnerability-in-the-kubernetes-ingress-nginx-provider-that-merges-client-cas-when-auth-tls-se2026-10-22 https://bugrater.com/releases/cve-2026-114639-traefik-2-11-0-before-2-11-58-and-3-0-0-before-3-7-14-contains-an-authentication-bypass-because-a-first-request-preauthenticated-with-an-authorization-negotiat2026-10-22 https://bugrater.com/releases/cve-2026-114640-traefik-from-v3-7-0-before-v3-7-14-contains-an-authentication-bypass-vulnerability-in-its-kubernetes-ingress-nginx-provider-that-forwards-client-supplied-ssl-cl2026-10-22 https://bugrater.com/releases/cve-2026-114658-grav-login-plugin-from-3-6-0-before-3-9-13-contains-a-missing-authorization-vulnerability-in-the-login-invite-task-that-allows-page-authors-to-obtain-super-user2026-10-22 https://bugrater.com/releases/cve-2026-114659-grav-flex-objects-plugin-1-4-0-before-1-4-17-contains-an-authorization-bypass-because-its-generic-api-v1-flex-objects-pages-api-routes-check-only-directory-lev2026-10-22 https://bugrater.com/releases/cve-2026-114660-grav-from-2-0-0-before-2-2-5-contains-an-improper-access-control-vulnerability-in-flexdirectory-dynamicflexfield-that-allows-page-authors-to-call-arbitrary-f2026-10-22 https://bugrater.com/releases/cve-2026-114661-openremote-1-2-0-before-1-31-0-contains-a-missing-authorization-vulnerability-in-gatewayserviceresource-that-allows-any-authenticated-user-to-start-stop-and-qu2026-10-22 https://bugrater.com/releases/cve-2026-114662-obot-before-0-26-0-contains-an-authentication-bypass-vulnerability-in-the-cli-login-flow-that-allows-unauthenticated-attackers-to-steal-api-keys-by-choosing-tok2026-10-22 https://bugrater.com/releases/cve-2026-114664-frappe-framework-before-16-33-0-contains-a-blind-sql-injection-vulnerability-in-the-frappe-desk-doctype-event-event-get-events-method-which-fails-to-properly-n2026-10-22 https://bugrater.com/releases/cve-2026-114715-roundcube-webmail-before-1-6-20-and-1-7-x-before-1-7-5-is-affected-by-an-incorrect-authorization-vulnerability-in-the-modoboa-driver-of-the-password-plugin-the2026-10-22 https://bugrater.com/releases/cve-2026-114716-roundcube-webmail-before-1-6-20-and-1-7-x-before-1-7-5-is-affected-by-a-mail-header-injection-vulnerability-rcmail-sendmail-extract-inline-images-used-the-m2026-10-22 https://bugrater.com/releases/cve-2026-114717-roundcube-webmail-before-1-6-20-and-1-7-x-before-1-7-5-is-affected-by-a-mail-header-injection-vulnerability-when-a-message-is-forwarded-as-an-attachment-the-su2026-10-22 https://bugrater.com/releases/cve-2026-114718-roundcube-webmail-before-1-6-20-and-1-7-x-before-1-7-5-is-affected-by-a-cross-site-scripting-vulnerability-in-the-password-plugin-error-text-returned-by-a-pass2026-10-22 https://bugrater.com/releases/cve-2026-114719-roundcube-webmail-before-1-6-20-and-1-7-x-before-1-7-5-is-affected-by-a-csrf-validation-bypass-in-the-mark-as-junk-action-of-the-markasjunk-plugin-the-plugin-r2026-10-22 https://bugrater.com/releases/cve-2026-114720-roundcube-webmail-before-1-6-20-and-1-7-x-before-1-7-5-is-affected-by-an-imap-command-injection-vulnerability-a-remote-authenticated-attacker-can-exploit-this2026-10-22 https://bugrater.com/releases/cve-2026-114721-roundcube-webmail-before-1-6-20-and-1-7-x-before-1-7-5-allows-the-disabled-actions-configuration-setting-to-be-bypassed-the-check-compared-only-the-action-name2026-10-22 https://bugrater.com/releases/cve-2026-114722-roundcube-webmail-before-1-6-20-and-1-7-x-before-1-7-5-is-affected-by-a-css-scoping-bypass-in-html-messages-rcube-utils-mod-css-styles-did-not-treat-an-at-r2026-10-22 https://bugrater.com/releases/cve-2026-114723-roundcube-webmail-before-1-6-20-and-1-7-x-before-1-7-5-allows-the-imagemagick-resource-limits-to-be-bypassed-during-thumbnail-generation-when-rcube-image-falls2026-10-22 https://bugrater.com/releases/cve-2026-114724-roundcube-webmail-before-1-6-20-and-1-7-x-before-1-7-5-contains-an-object-injection-primitive-in-rcube-session-unserialize-a-session-key-prefixed-with-w2026-10-22 https://bugrater.com/releases/cve-2026-114725-roundcube-webmail-before-1-6-20-and-1-7-x-before-1-7-5-is-affected-by-a-mail-header-injection-vulnerability-rcmail-sendmail-stripped-newline-characters-only-fr2026-10-22 https://bugrater.com/releases/cve-2026-114726-roundcube-webmail-before-1-6-20-and-1-7-x-before-1-7-5-is-affected-by-a-mail-header-injection-vulnerability-in-the-bounce-resend-action-rcube-mime-decode-ad2026-10-22 https://bugrater.com/releases/cve-2026-114727-roundcube-webmail-before-1-6-20-and-1-7-x-before-1-7-5-passes-potentially-unsafe-content-into-imagemagick-when-resizing-images-svg-and-eps-were-accepted-as-val2026-10-22 https://bugrater.com/releases/cve-2026-114728-roundcube-webmail-before-1-6-20-and-1-7-x-before-1-7-5-is-affected-by-a-remote-content-blocking-bypass-in-the-handling-of-funciri-attributes-rcube-washtml-dete2026-10-22 https://bugrater.com/releases/cve-2026-16648-insertion-of-sensitive-information-into-log-file-vulnerability-in-drupal-mailer-plus-log-allows-remote-services-with-stolen-credentials-this-issue-affects-mail2026-10-22 https://bugrater.com/releases/cve-2026-81163-improper-limitation-of-a-pathname-to-a-restricted-directory-path-traversal-vulnerability-in-drupal-media-library-importer-allows-path-traversal-this-issue2026-10-22 https://bugrater.com/releases/cve-2026-84910-missing-authorization-vulnerability-in-drupal-advanced-search-allows-forceful-browsing-this-issue-affects-advanced-search-versions-from-0-0-0-to-2-4-52026-10-22 https://bugrater.com/releases/cve-2026-84911-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-vulnerability-in-drupal-ai-artificial-intelligence-allows-stored-xss-thi2026-10-22 https://bugrater.com/releases/cve-2026-84912-missing-authorization-vulnerability-in-drupal-ai-artificial-intelligence-allows-forceful-browsing-this-issue-affects-ai-artificial-intelligence-versions-f2026-10-22 https://bugrater.com/releases/cve-2026-84913-missing-authorization-vulnerability-in-drupal-ai-translate-allows-forceful-browsing-this-issue-affects-ai-translate-versions-from-0-0-0-to-1-3-2-from-1-4-0-t2026-10-22 https://bugrater.com/releases/cve-2026-84914-missing-authorization-vulnerability-in-drupal-calculate-working-days-allows-forceful-browsing-this-issue-affects-calculate-working-days-versions-from-0-0-0-to2026-10-22 https://bugrater.com/releases/cve-2026-84915-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-vulnerability-in-drupal-component-blocks-allows-stored-xss-this-issue-affe2026-10-22 https://bugrater.com/releases/cve-2026-84916-missing-authorization-vulnerability-in-drupal-islandora-allows-forceful-browsing-this-issue-affects-islandora-versions-from-0-0-0-to-2-19-02026-10-22 https://bugrater.com/releases/cve-2026-84917-incorrect-authorization-vulnerability-in-drupal-jsonapi-role-access-allows-forceful-browsing-this-issue-affects-jsonapi-role-access-versions-from-0-0-0-to-22026-10-22 https://bugrater.com/releases/cve-2026-84918-improper-verification-of-cryptographic-signature-vulnerability-in-drupal-monobank-payment-api-allows-signature-spoof-this-issue-affects-monobank-payment-api-ve2026-10-22 https://bugrater.com/releases/cve-2026-84919-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-vulnerability-in-drupal-photoswipe-responsive-javascript-modal-image-gall2026-10-22 https://bugrater.com/releases/cve-2026-84920-incorrect-authorization-vulnerability-in-drupal-unpublished-node-permissions-allows-forceful-browsing-this-issue-affects-unpublished-node-permissions-versions2026-10-22 https://bugrater.com/releases/cve-2026-84921-missing-authorization-vulnerability-in-drupal-webform-submissions-delete-allows-forceful-browsing-this-issue-affects-webform-submissions-delete-versions-from2026-10-22 https://bugrater.com/releases/cve-2026-84923-authentication-bypass-using-an-alternate-path-or-channel-vulnerability-in-drupal-email-verification-sms-verification-otp-verification-allows-authentication2026-10-22 https://bugrater.com/releases/cve-2026-84924-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-vulnerability-in-drupal-email-verification-sms-verification-otp-verific2026-10-22 https://bugrater.com/releases/cve-2026-87936-improper-neutralization-of-special-elements-used-in-an-sql-command-sql-injection-vulnerability-in-drupal-amazee-ai-private-ai-provider-allows-sql-injection2026-10-22 https://bugrater.com/releases/cve-2026-87937-url-redirection-to-untrusted-site-open-redirect-vulnerability-in-drupal-central-authentication-system-cas-server-allows-fake-the-source-of-data-this-issu2026-10-22 https://bugrater.com/releases/cve-2026-87938-improper-neutralization-of-special-elements-used-in-an-sql-command-sql-injection-vulnerability-in-drupal-csp-log-allows-sql-injection-this-issue-affects-cs2026-10-22 https://bugrater.com/releases/cve-2026-87939-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-vulnerability-in-drupal-feed-block-allows-stored-xss-this-issue-affects-fe2026-10-22 https://bugrater.com/releases/cve-2026-87940-use-of-web-browser-cache-containing-sensitive-information-vulnerability-in-drupal-key-auth-allows-exploiting-incorrectly-configured-access-control-security-leve2026-10-22 https://bugrater.com/releases/cve-2026-87941-vulnerability-in-drupal-patreon-this-issue-affects-patreon-versions-7-x2026-10-22 https://bugrater.com/releases/cve-2026-87942-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-vulnerability-in-drupal-safedelete-allows-stored-xss-this-issue-affects-sa2026-10-22 https://bugrater.com/releases/cve-2026-87943-missing-authorization-vulnerability-in-drupal-saml-sso-service-provider-allows-forceful-browsing-this-issue-affects-saml-sso-service-provider-versions-f2026-10-22 https://bugrater.com/releases/cve-2026-87944-improper-certificate-validation-vulnerability-in-drupal-saml-sso-service-provider-allows-adversary-in-the-middle-aitm-this-issue-affects-saml-sso-servic2026-10-22 https://bugrater.com/releases/cve-2026-87945-url-redirection-to-untrusted-site-open-redirect-vulnerability-in-drupal-saml-sso-service-provider-allows-fake-the-source-of-data-this-issue-affects-saml2026-10-22 https://bugrater.com/releases/cve-2026-87946-observable-timing-discrepancy-vulnerability-in-drupal-saml-sso-service-provider-allows-brute-force-this-issue-affects-saml-sso-service-provider-versions2026-10-22 https://bugrater.com/releases/cve-2026-87947-improper-verification-of-cryptographic-signature-vulnerability-in-drupal-saml-sso-service-provider-allows-signature-spoof-this-issue-affects-saml-sso-serv2026-10-22 https://bugrater.com/releases/cve-2026-87948-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-vulnerability-in-drupal-saml-sso-service-provider-allows-cross-site-scri2026-10-22 https://bugrater.com/releases/cve-2026-87949-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-vulnerability-in-drupal-saml-sso-service-provider-allows-cross-site-scri2026-10-22 https://bugrater.com/releases/cve-2026-87950-use-of-hard-coded-credentials-vulnerability-in-drupal-saml-sso-service-provider-allows-retrieve-embedded-sensitive-data-this-issue-affects-saml-sso-servic2026-10-22 https://bugrater.com/releases/cve-2026-87951-insecure-storage-of-sensitive-information-vulnerability-in-drupal-saml-sso-service-provider-allows-retrieve-embedded-sensitive-data-this-issue-affects-saml2026-10-22 https://bugrater.com/releases/cve-2026-87952-authentication-bypass-by-capture-replay-vulnerability-in-drupal-saml-sso-service-provider-allows-remote-services-with-stolen-credentials-this-issue-affects2026-10-22 https://bugrater.com/releases/cve-2026-87953-server-side-request-forgery-ssrf-vulnerability-in-drupal-saml-sso-service-provider-allows-server-side-request-forgery-this-issue-affects-saml-sso-servic2026-10-22 https://bugrater.com/releases/cve-2026-87954-missing-authorization-vulnerability-in-drupal-taxonomy-term-glossary-allows-forceful-browsing-this-issue-affects-taxonomy-term-glossary-versions-from-0-0-0-to2026-10-22 https://bugrater.com/releases/cve-2026-87955-missing-authorization-vulnerability-in-drupal-ultimate-table-field-allows-forceful-browsing-this-issue-affects-ultimate-table-field-versions-from-0-0-0-to-1-12026-10-22 https://bugrater.com/releases/cve-2026-96355-improper-neutralization-of-special-elements-used-in-a-template-engine-vulnerability-in-drupal-webform-allows-code-injection-this-issue-affects-webform-versions2026-10-22 https://bugrater.com/releases/cve-2026-96356-incorrect-authorization-vulnerability-in-drupal-webform-allows-forceful-browsing-this-issue-affects-webform-versions-from-0-0-0-to-6-2-12-from-6-3-0-to-6-3-12026-10-22 https://bugrater.com/releases/cve-2026-96357-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-vulnerability-in-drupal-webform-allows-stored-xss-this-issue-affects-webfo2026-10-22 https://bugrater.com/releases/cve-2026-96358-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-vulnerability-in-drupal-webform-allows-cross-site-scripting-xss-this-iss2026-10-22 https://bugrater.com/releases/cve-2026-96359-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-vulnerability-in-drupal-webform-allows-cross-site-scripting-xss-this-iss2026-10-22 https://bugrater.com/releases/cve-2026-96360-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-vulnerability-in-drupal-webform-allows-cross-site-scripting-xss-this-iss2026-10-22 https://bugrater.com/releases/cve-2026-96361-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-vulnerability-in-drupal-webform-allows-cross-site-scripting-xss-this-iss2026-10-22 https://bugrater.com/releases/cve-2026-96362-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-vulnerability-in-drupal-webform-allows-cross-site-scripting-xss-this-iss2026-10-22 https://bugrater.com/releases/cve-2026-96363-privilege-defined-with-unsafe-actions-vulnerability-in-drupal-webform-allows-stored-xss-this-issue-affects-webform-versions-from-0-0-0-to-6-2-12-from-6-3-0-t2026-10-22 https://bugrater.com/releases/cve-2026-96364-improper-control-of-interaction-frequency-vulnerability-in-drupal-webform-allows-functionality-misuse-this-issue-affects-webform-versions-from-0-0-0-to-6-2-122026-10-22 https://bugrater.com/releases/cve-2026-96365-allocation-of-resources-without-limits-or-throttling-vulnerability-in-drupal-webform-allows-excessive-allocation-this-issue-affects-webform-versions-from-0-02026-10-22 https://bugrater.com/releases/cve-2026-96366-incorrect-authorization-vulnerability-in-drupal-webform-allows-forceful-browsing-this-issue-affects-webform-versions-from-0-0-0-to-6-2-12-from-6-3-0-to-6-3-12026-10-22 https://bugrater.com/releases/cve-2026-96367-privilege-defined-with-unsafe-actions-vulnerability-in-drupal-webform-allows-stored-xss-this-issue-affects-webform-versions-from-0-0-0-to-6-2-12-from-6-3-0-t2026-10-22 https://bugrater.com/releases/cve-2026-96368-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-vulnerability-in-drupal-webform-allows-stored-xss-this-issue-affects-webfo2026-10-22 https://bugrater.com/releases/cve-2026-96369-use-of-web-browser-cache-containing-sensitive-information-vulnerability-in-drupal-webform-allows-exploiting-incorrectly-configured-access-control-security-level2026-10-22 https://bugrater.com/releases/cve-2026-96370-incorrect-authorization-vulnerability-in-drupal-webform-allows-server-side-request-forgery-this-issue-affects-webform-versions-from-0-0-0-to-6-2-12-from-6-32026-10-22 https://bugrater.com/releases/cve-2026-96371-privilege-defined-with-unsafe-actions-vulnerability-in-drupal-webform-allows-stored-xss-this-issue-affects-webform-versions-from-0-0-0-to-6-2-12-from-6-3-0-t2026-10-22 https://bugrater.com/releases/cve-2026-96372-insufficient-granularity-of-access-control-vulnerability-in-drupal-webform-allows-forceful-browsing-this-issue-affects-webform-versions-from-0-0-0-to-6-2-122026-10-22 https://bugrater.com/releases/cve-2026-96373-incorrect-authorization-vulnerability-in-drupal-webform-allows-forceful-browsing-this-issue-affects-webform-versions-from-0-0-0-to-6-2-12-from-6-3-0-to-6-3-12026-10-22 https://bugrater.com/releases/cve-2026-96374-cross-site-request-forgery-csrf-vulnerability-in-drupal-project-browser-allows-cross-site-request-forgery-this-issue-affects-project-browser-versions-from-02026-10-22 https://bugrater.com/releases/cve-2026-96375-improper-certificate-validation-vulnerability-in-drupal-cloud-allows-adversary-in-the-middle-aitm-this-issue-affects-cloud-versions-from-0-0-0-to-7-0-12026-10-22 https://bugrater.com/releases/cve-2026-96376-improper-neutralization-of-special-elements-used-in-an-os-command-os-command-injection-vulnerability-in-drupal-cloud-allows-os-command-injection-this-issue2026-10-22 https://bugrater.com/releases/cve-2026-96377-allocation-of-resources-without-limits-or-throttling-vulnerability-in-drupal-combined-image-style-allows-excessive-allocation-this-issue-affects-combined-image2026-10-22 https://bugrater.com/releases/cve-2026-96378-improperly-controlled-modification-of-dynamically-determined-object-attributes-vulnerability-in-drupal-commerce-decoupled-checkout-allows-object-injection-this2026-10-22 https://bugrater.com/releases/cve-2026-96379-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-vulnerability-in-drupal-cookiecuttr-allows-stored-xss-this-issue-affects-c2026-10-22 https://bugrater.com/releases/cve-2026-96380-missing-authorization-vulnerability-in-drupal-css-usage-analyzer-allows-forceful-browsing-this-issue-affects-css-usage-analyzer-versions-from-1-0-0-to-1-0-22026-10-22 https://bugrater.com/releases/cve-2026-96382-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-vulnerability-in-drupal-diba-carousel-slider-allows-stored-xss-this-issue2026-10-22 https://bugrater.com/releases/cve-2026-96384-incorrect-authorization-vulnerability-in-drupal-mermaid-diagram-field-allows-forceful-browsing-this-issue-affects-mermaid-diagram-field-versions-from-1-0-4-to2026-10-22 https://bugrater.com/releases/cve-2026-96385-authentication-bypass-using-an-alternate-path-or-channel-vulnerability-in-drupal-rest-json-api-authentication-for-drupal-allows-authentication-bypass-this-is2026-10-22 https://bugrater.com/releases/cve-2026-96386-missing-authorization-vulnerability-in-drupal-smart-content-allows-forceful-browsing-this-issue-affects-smart-content-versions-from-0-0-0-to-3-2-12026-10-22 https://bugrater.com/releases/cve-2026-96387-authentication-bypass-using-an-alternate-path-or-channel-vulnerability-in-drupal-stop-administrator-login-allows-authentication-bypass-this-issue-affects-stop2026-10-22 https://bugrater.com/releases/cve-2026-96388-cross-site-request-forgery-csrf-vulnerability-in-drupal-tawk-to-live-chat-application-allows-cross-site-request-forgery-this-issue-affects-tawk-to-live-c2026-10-22 https://bugrater.com/releases/cve-2026-96390-privilege-defined-with-unsafe-actions-vulnerability-in-drupal-editoria11y-accessibility-checker-allows-privilege-escalation-this-issue-affects-editoria11y-acce2026-10-22 https://bugrater.com/releases/cve-2026-96391-missing-authorization-vulnerability-in-drupal-webform-rest-allows-forceful-browsing-this-issue-affects-webform-rest-versions-from-0-0-0-to-4-2-12026-10-22 https://bugrater.com/releases/cve-2026-96392-improper-neutralization-of-special-elements-used-in-a-template-engine-vulnerability-in-drupal-ai-ckeditor-allows-code-injection-this-issue-affects-ai-ckeditor2026-10-22 https://bugrater.com/releases/cve-2026-96398-incorrect-authorization-vulnerability-in-drupal-webform-allows-forceful-browsing-this-issue-affects-webform-versions-from-0-0-0-to-6-2-12-from-6-3-0-to-6-3-12026-10-22 https://bugrater.com/releases/cve-2026-114729-roundcube-webmail-before-1-6-20-and-1-7-x-before-1-7-5-is-affected-by-a-remote-content-blocking-bypass-rcube-washtml-inspected-the-svg-smil-animation-attribute2026-10-22 https://bugrater.com/releases/cve-2026-114730-roundcube-webmail-1-6-14-before-1-6-20-and-1-7-0-before-1-7-5-is-affected-by-a-server-side-request-forgery-filter-bypass-the-network-blocklist-used-by-rcube-ut2026-10-22 https://bugrater.com/releases/cve-2026-114731-roundcube-webmail-before-1-6-20-and-1-7-x-before-1-7-5-is-affected-by-an-uncontrolled-resource-consumption-vulnerability-in-the-css-proxy-the-utils-modcss-acti2026-10-22 https://bugrater.com/releases/cve-2026-114732-roundcube-webmail-before-1-6-20-and-1-7-x-before-1-7-5-is-affected-by-an-improper-authentication-vulnerability-in-multi-host-installations-when-a-user-logs-in2026-10-22 https://bugrater.com/releases/koha-community-security-releases-october-20262026-10-22 https://bugrater.com/releases/codepeople-security-releases-october-20262026-10-22 https://bugrater.com/releases/10up-security-releases-october-20262026-10-22 https://bugrater.com/releases/peprodev-security-releases-october-20262026-10-22 https://bugrater.com/releases/latepoint-security-releases-october-20262026-10-22 https://bugrater.com/releases/wpdesk-security-releases-october-20262026-10-22 https://bugrater.com/releases/jegtheme-security-releases-october-20262026-10-22 https://bugrater.com/releases/wpazleen-security-releases-october-20262026-10-22 https://bugrater.com/releases/kitae-park-security-releases-october-20262026-10-22 https://bugrater.com/releases/davidevalerio-security-releases-october-20262026-10-22 https://bugrater.com/releases/paoltaia-security-releases-october-20262026-10-22 https://bugrater.com/releases/tigroumeow-security-releases-october-20262026-10-22 https://bugrater.com/releases/lifterlms-security-releases-october-20262026-10-22 https://bugrater.com/releases/curl-security-releases-october-20262026-10-22 https://bugrater.com/releases/copart-security-releases-october-20262026-10-22 https://bugrater.com/releases/ninenines-security-releases-june-20262026-10-22 https://bugrater.com/releases/grafana-security-releases-september-20262026-10-22 https://bugrater.com/releases/wpcode-security-releases-october-20262026-10-22 https://bugrater.com/releases/visma-pay-for-woocommerce-security-releases-october-20262026-10-22 https://bugrater.com/releases/jtl-software-gmbh-security-releases-october-20262026-10-22 https://bugrater.com/releases/wpforms-lite-security-releases-october-20262026-10-22 https://bugrater.com/releases/tickera-security-releases-october-20262026-10-22 https://bugrater.com/releases/responsive-blocks-security-releases-october-20262026-10-22 https://bugrater.com/releases/gnome-security-releases-september-20262026-10-22 https://bugrater.com/releases/nlnet-labs-security-releases-october-20262026-10-22 https://bugrater.com/releases/tsplus-security-releases-october-20262026-10-22 https://bugrater.com/releases/webnus-security-releases-october-20262026-10-22 https://bugrater.com/releases/google-cloud-security-releases-october-20262026-10-22 https://bugrater.com/releases/python-cpython-security-releases-february-20212026-10-22 https://bugrater.com/releases/super-forms-security-releases-august-20262026-10-22 https://bugrater.com/releases/axew3-com-security-releases-october-20262026-10-22 https://bugrater.com/releases/m-a-vinoth-kumar-security-releases-october-20262026-10-22 https://bugrater.com/releases/cve-2026-100142-the-fluentcart-a-new-era-of-ecommerce-wordpress-plugin-before-2-2-0-does-not-verify-that-a-stored-customer-address-selected-during-checkout-belongs-to-the-requ2026-10-22 https://bugrater.com/releases/cve-2026-103234-the-wp-ultimate-review-wordpress-plugin-before-2-4-5-does-not-neutralise-shortcodes-in-all-of-the-review-fields-submitted-through-its-public-review-form-which2026-10-22 https://bugrater.com/releases/cve-2026-109927-the-hipaa-forms-wordpress-plugin-before-3-3-2-does-not-perform-a-capability-check-when-handling-a-request-that-rebuilds-its-own-custom-user-role-allowing-a-use2026-10-22 https://bugrater.com/releases/cve-2026-109931-the-infility-global-wordpress-plugin-before-2-16-25-does-not-perform-any-authorisation-or-nonce-check-on-an-ajax-action-available-to-unauthenticated-users-allo2026-10-22 https://bugrater.com/releases/cve-2026-110010-the-mb-custom-post-types-custom-taxonomies-wordpress-plugin-before-2-12-3-does-not-perform-any-capability-or-authentication-check-before-allowing-an-unauthent2026-10-22 https://bugrater.com/releases/cve-2026-110011-the-mb-custom-post-types-custom-taxonomies-wordpress-plugin-before-2-12-3-does-not-perform-a-capability-check-in-its-export-feature-allowing-users-with-a-rol2026-10-22 https://bugrater.com/releases/cve-2026-111958-the-royal-mcp-wordpress-plugin-before-1-5-7-does-not-limit-a-preview-link-token-to-the-single-preview-it-was-issued-for-so-any-party-that-obtains-a-valid-toke2026-10-22 https://bugrater.com/releases/cve-2026-111971-the-photo-engine-media-organizer-lightroom-wordpress-plugin-before-6-5-8-does-not-sanitise-and-escape-collection-and-gallery-names-before-storing-them-and-o2026-10-22 https://bugrater.com/releases/cve-2026-111972-the-photo-engine-media-organizer-lightroom-wordpress-plugin-before-6-5-8-does-not-verify-that-a-user-is-authorised-to-act-on-the-targeted-media-attachment2026-10-22 https://bugrater.com/releases/cve-2026-114570-wordpress-core-is-vulnerable-to-stored-cross-site-scripting-via-quick-edit-in-all-versions-up-to-and-including-7-0-2-due-to-insufficient-escaping-of-user-disp2026-10-22 https://bugrater.com/releases/cve-2026-78392-the-link-library-wordpress-plugin-before-7-9-6-does-not-sanitise-and-escape-a-link-field-before-outputting-it-inside-an-attribute-of-a-link-preview-allowing-us2026-10-22 https://bugrater.com/releases/cve-2026-88849-the-masterstudy-lms-wordpress-plugin-wordpress-plugin-before-3-7-55-does-not-verify-that-a-user-targeted-through-its-student-enrolment-feature-has-any-relation2026-10-22 https://bugrater.com/releases/cve-2026-97328-the-webp-express-wordpress-plugin-before-0-25-16-does-not-escape-values-that-its-bundled-html-parser-re-emits-into-element-attributes-when-a-non-default-image-d2026-10-22 https://bugrater.com/releases/cve-2026-103634-out-of-bounds-read-and-write-in-the-count-min-sketch-deserialization-of-apache-datasketches-c-repo-datasketches-cpp-count-min-sketch-deserialize-did-n2026-10-22 https://bugrater.com/releases/cve-2026-105270-allocation-of-resources-without-limits-or-throttling-vulnerability-in-esaml-binding-in-dropbox-esaml-allows-an-unauthenticated-attacker-to-exhaust-the-erlang-vm2026-10-22 https://bugrater.com/releases/cve-2026-111847-missing-authorization-vulnerability-in-kings-plugins-marketking-marketking-multivendor-marketplace-for-woocommerce-allows-exploiting-incorrectly-configured-acce2026-10-22 https://bugrater.com/releases/cve-2026-112826-missing-authorization-vulnerability-in-elightup-falcon-wordpress-optimizations-tweaks-falcon-allows-exploiting-incorrectly-configured-access-control-securit2026-10-22 https://bugrater.com/releases/cve-2026-112843-missing-authorization-vulnerability-in-wp-chill-strong-testimonials-strong-testimonials-allows-exploiting-incorrectly-configured-access-control-security-levels2026-10-22 https://bugrater.com/releases/cve-2026-112867-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-vulnerability-in-h5p-h5p-h5p-allows-stored-xss-this-issue-affects-h5p-from2026-10-22 https://bugrater.com/releases/cve-2026-114175-missing-authorization-vulnerability-in-digitalme-eroom-eroom-zoom-meetings-webinar-allows-exploiting-incorrectly-configured-access-control-security-levels-this2026-10-22 https://bugrater.com/releases/cve-2026-114177-cross-site-request-forgery-csrf-vulnerability-in-xpro-xpro-elementor-addons-xpro-elementor-addons-allows-cross-site-request-forgery-this-issue-affects-xpro-el2026-10-22 https://bugrater.com/releases/cve-2026-114180-missing-authorization-vulnerability-in-wpmet-metform-metform-allows-exploiting-incorrectly-configured-access-control-security-levels-this-issue-affects-metform2026-10-22 https://bugrater.com/releases/cve-2026-114182-missing-authorization-vulnerability-in-ideabox-creations-powerpack-addons-for-elementor-powerpack-lite-for-elementor-allows-exploiting-incorrectly-configured-ac2026-10-22 https://bugrater.com/releases/cve-2026-114184-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-vulnerability-in-wpvibes-elementor-addon-elements-addon-elements-for-elemen2026-10-22 https://bugrater.com/releases/cve-2026-114457-a-flaw-was-found-in-mod-qos-an-unauthenticated-remote-attacker-could-cause-a-denial-of-service-dos-by-sending-a-specially-crafted-json-request-when-json-body2026-10-22 https://bugrater.com/releases/cve-2026-114458-a-flaw-was-found-in-mod-qos-an-unauthenticated-remote-attacker-can-cause-a-denial-of-service-dos-by-maintaining-numerous-concurrent-low-rate-connections-to-a2026-10-22 https://bugrater.com/releases/cve-2026-114459-a-flaw-was-found-in-mod-qos-when-inspecting-http-response-bodies-improper-boundary-checking-can-cause-the-module-to-read-memory-outside-allocated-buffer-bound2026-10-22 https://bugrater.com/releases/cve-2026-114460-a-flaw-was-found-in-mod-qos-an-off-by-one-pointer-calculation-error-occurs-when-merging-request-body-parameters-with-an-existing-url-query-which-truncates-the2026-10-22 https://bugrater.com/releases/cve-2026-110893-missing-authorization-vulnerability-in-brainstorm-force-suredash-suredash-allows-exploiting-incorrectly-configured-access-control-security-levels-this-issue-aff2026-10-22 https://bugrater.com/releases/cve-2026-110894-missing-authorization-vulnerability-in-brainstorm-force-suredash-suredash-allows-exploiting-incorrectly-configured-access-control-security-levels-this-issue-aff2026-10-22 https://bugrater.com/releases/cve-2026-110974-the-org-json-parser-in-com-vaadin-external-google-android-json-recurses-once-per-nesting-level-with-no-depth-limit-jsontokener-nextvalue-calls-readarray-an2026-10-22 https://bugrater.com/releases/cve-2026-111830-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-vulnerability-in-wp-mailster-wp-mailster-wp-mailster-allows-stored-xss-this2026-10-22 https://bugrater.com/releases/cve-2026-111842-missing-authorization-vulnerability-in-wp-sunshine-sunshine-photo-cart-sunshine-photo-cart-allows-exploiting-incorrectly-configured-access-control-security-leve2026-10-22 https://bugrater.com/releases/cve-2026-111851-use-of-externally-controlled-input-to-select-classes-or-code-unsafe-reflection-vulnerability-in-wproyal-royal-elementor-addons-royal-elementor-addons-allows2026-10-22 https://bugrater.com/releases/cve-2026-112218-missing-authorization-vulnerability-in-ahmad-majestic-support-majestic-support-allows-exploiting-incorrectly-configured-access-control-security-levels-this-issu2026-10-22 https://bugrater.com/releases/cve-2026-112241-authentication-bypass-by-spoofing-vulnerability-in-brainstorm-force-surecart-surecart-allows-authentication-abuse-this-issue-affects-surecart-from-n-a-through2026-10-22 https://bugrater.com/releases/cve-2026-112242-incorrect-privilege-assignment-vulnerability-in-cozmoslabs-profile-builder-profile-builder-allows-privilege-escalation-this-issue-affects-profile-builder-from2026-10-22 https://bugrater.com/releases/cve-2026-112311-improper-limitation-of-a-pathname-to-a-restricted-directory-path-traversal-vulnerability-in-acf-extended-acf-extended-acf-extended-allows-path-traversal-thi2026-10-22 https://bugrater.com/releases/cve-2026-112312-missing-authorization-vulnerability-in-acf-extended-acf-extended-acf-extended-allows-exploiting-incorrectly-configured-access-control-security-levels-this-issue2026-10-22 https://bugrater.com/releases/cve-2026-112327-improper-neutralization-of-special-elements-used-in-an-sql-command-sql-injection-vulnerability-in-tms-amelia-ameliabooking-allows-sql-injection-this-issue-a2026-10-22 https://bugrater.com/releases/cve-2026-112379-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-vulnerability-in-codepeople-contact-form-email-contact-form-to-email-allows2026-10-22 https://bugrater.com/releases/cve-2026-112845-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-vulnerability-in-jory-hogeveen-off-canvas-sidebars-menus-slidebars-off2026-10-22 https://bugrater.com/releases/cve-2026-114195-insertion-of-sensitive-information-into-externally-accessible-file-or-directory-vulnerability-in-wp-desk-shopmagic-shopmagic-for-woocommerce-allows-retrieve-emb2026-10-22 https://bugrater.com/releases/cve-2026-114696-missing-authorization-vulnerability-in-miniorange-page-restriction-wordpress-wp-page-and-post-restriction-allows-exploiting-incorrectly-configured-access-cont2026-10-22 https://bugrater.com/releases/cve-2026-114698-authorization-bypass-through-user-controlled-key-vulnerability-in-mycred-mycred-mycred-allows-exploiting-incorrectly-configured-access-control-security-levels-t2026-10-22 https://bugrater.com/releases/cve-2026-114699-missing-authorization-vulnerability-in-yoomoney-kassa-woocommerce-yookassa-allows-exploiting-incorrectly-configured-access-control-security-levels-this-iss2026-10-22 https://bugrater.com/releases/cve-2026-114700-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-vulnerability-in-gloriafood-restaurant-menu-food-ordering-system-table2026-10-22 https://bugrater.com/releases/cve-2026-114701-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-vulnerability-in-xootix-waitlist-woocommerce-back-in-stock-notifier-wai2026-10-22 https://bugrater.com/releases/cve-2026-114702-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-vulnerability-in-nicdark-nd-shortcodes-for-visual-composer-nd-shortcodes-al2026-10-22 https://bugrater.com/releases/cve-2026-114703-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-vulnerability-in-hupe13-extensions-for-leaflet-map-extensions-leaflet-map-a2026-10-22 https://bugrater.com/releases/cve-2026-115253-an-incorrect-permission-assignment-vulnerability-in-the-watchguard-agent-s-log-directory-allows-a-local-authenticated-non-administrative-user-to-create-modify2026-10-22 https://bugrater.com/releases/cve-2026-86696-allocation-of-resources-without-limits-or-throttling-vulnerability-in-esaml-in-dropbox-esaml-allows-an-unauthenticated-attacker-to-exhaust-the-erlang-vm-atom-ta2026-10-22 https://bugrater.com/releases/cve-2026-93471-improper-handling-of-highly-compressed-data-data-amplification-in-esaml-binding-in-dropbox-esaml-allows-an-unauthenticated-attacker-to-exhaust-server-memory-a2026-10-22 https://bugrater.com/releases/cve-2026-96293-a-cleartext-storage-of-sensitive-information-vulnerability-in-watchguard-endpoint-security-s-full-disk-encryption-feature-for-macos-allows-a-local-unprivileged2026-10-22 https://bugrater.com/releases/cve-2026-112085-webpack-dev-server-is-a-development-server-that-provides-live-reloading-for-webpack-projects-in-versions-before-5-2-7-and-in-version-6-0-0-when-a-proxy-entry2026-10-22 https://bugrater.com/releases/cve-2026-114348-webpack-dev-server-is-a-development-server-that-provides-live-reloading-for-webpack-projects-in-versions-from-5-1-0-before-5-2-7-and-in-version-6-0-0-the-unau2026-10-22 https://bugrater.com/releases/magepeople-inc-security-releases-october-20262026-10-22 https://bugrater.com/releases/miniorange-security-releases-october-20262026-10-22 https://bugrater.com/releases/itthinx-security-releases-october-20262026-10-22 https://bugrater.com/releases/wp-syntex-security-releases-october-20262026-10-22 https://bugrater.com/releases/linux-security-releases-february-20242026-10-22 https://bugrater.com/releases/openssl-security-releases-march-20222026-10-22 https://bugrater.com/releases/dev-institute-security-releases-october-20262026-10-22 https://bugrater.com/releases/tr7-cyber-defense-inc-security-releases-october-20262026-10-22 https://bugrater.com/releases/skyhook-io-security-releases-october-20262026-10-22 https://bugrater.com/releases/openssl-security-releases-may-20222026-10-22 https://bugrater.com/releases/openssl-security-releases-june-20222026-10-22 https://bugrater.com/releases/muralidharan-ramasamy-security-releases-october-20262026-10-22 https://bugrater.com/releases/openssl-security-releases-july-20222026-10-22 https://bugrater.com/releases/the-linux-kernel-organization-security-releases-january-20242026-10-22 https://bugrater.com/releases/modelcontextprotocol-security-releases-october-20262026-10-22 https://bugrater.com/releases/theopenco-security-releases-october-20262026-10-22 https://bugrater.com/releases/sylius-security-releases-october-20262026-10-22 https://bugrater.com/releases/cortezaproject-security-releases-october-20262026-10-22 https://bugrater.com/releases/openagents-org-security-releases-october-20262026-10-22 https://bugrater.com/releases/opendocman-security-releases-october-20262026-10-22 https://bugrater.com/releases/channel-software-security-releases-october-20262026-10-22 https://bugrater.com/releases/coderaiser-security-releases-october-20262026-10-22 https://bugrater.com/releases/7-zip-security-releases-october-20262026-10-22 https://bugrater.com/releases/l-smash-security-releases-october-20262026-10-22 https://bugrater.com/releases/dentonw-security-releases-october-20262026-10-22 https://bugrater.com/releases/gravitee-security-releases-october-20262026-10-22 https://bugrater.com/releases/vworld4u-security-releases-october-20262026-10-22 https://bugrater.com/releases/icculus-security-releases-october-20262026-10-22 https://bugrater.com/releases/usekaneo-security-releases-october-20262026-10-22 https://bugrater.com/releases/ow2-security-releases-october-20262026-10-22 https://bugrater.com/releases/micropyramid-security-releases-october-20262026-10-22 https://bugrater.com/releases/dlbeer-security-releases-october-20262026-10-22 https://bugrater.com/releases/syoyo-security-releases-october-20262026-10-22 https://bugrater.com/releases/libyal-security-releases-october-20262026-10-22 https://bugrater.com/releases/brechtsanders-security-releases-october-20262026-10-22 https://bugrater.com/releases/saitoha-security-releases-october-20262026-10-22 https://bugrater.com/releases/kyz-security-releases-october-20262026-10-22 https://bugrater.com/releases/rapidlasso-security-releases-october-20262026-10-22 https://bugrater.com/releases/michael-r-sweet-security-releases-october-20262026-10-22 https://bugrater.com/releases/tomolt-security-releases-october-20262026-10-22 https://bugrater.com/releases/librecad-security-releases-october-20262026-10-22 https://bugrater.com/releases/bizspring-security-releases-october-20262026-10-22 https://bugrater.com/releases/yunaiv-security-releases-october-20262026-10-22 https://bugrater.com/releases/getrebuild-security-releases-october-20262026-10-22 https://bugrater.com/releases/wwwlike-security-releases-october-20262026-10-22 https://bugrater.com/releases/yiuman-security-releases-october-20262026-10-22 https://bugrater.com/releases/nullclaw-security-releases-october-20262026-10-22 https://bugrater.com/releases/rachelos-security-releases-october-20262026-10-22 https://bugrater.com/releases/pppscn-security-releases-october-20262026-10-22 https://bugrater.com/releases/fatedier-security-releases-october-20262026-10-22 https://bugrater.com/releases/formbricks-security-releases-october-20262026-10-22 https://bugrater.com/releases/swetrix-security-releases-october-20262026-10-22 https://bugrater.com/releases/papermerge-security-releases-october-20262026-10-22 https://bugrater.com/releases/macwarrior-security-releases-october-20262026-10-22 https://bugrater.com/releases/kanbn-security-releases-october-20262026-10-22 https://bugrater.com/releases/venturedrake-security-releases-october-20262026-10-22 https://bugrater.com/releases/moghtech-security-releases-october-20262026-10-22 https://bugrater.com/releases/report-one-security-releases-october-20262026-10-22 https://bugrater.com/releases/danday74-security-releases-october-20262026-10-22 https://bugrater.com/releases/scionoftech-security-releases-october-20262026-10-22 https://bugrater.com/releases/revolunet-security-releases-october-20262026-10-22 https://bugrater.com/releases/wastemobile-security-releases-october-20262026-10-22 https://bugrater.com/releases/zepspaiva-security-releases-october-20262026-10-22 https://bugrater.com/releases/mborne-security-releases-october-20262026-10-22 https://bugrater.com/releases/ariym-security-releases-october-20262026-10-22 https://bugrater.com/releases/runnerty-security-releases-october-20262026-10-22 https://bugrater.com/releases/xhtml2pdf-security-releases-october-20262026-10-22 https://bugrater.com/releases/kky-ykk-security-releases-october-20262026-10-22 https://bugrater.com/releases/chetanxpro-security-releases-october-20262026-10-22 https://bugrater.com/releases/arsalandotme-security-releases-october-20262026-10-22 https://bugrater.com/releases/beganovich-security-releases-october-20262026-10-22 https://bugrater.com/releases/jinghaihan-security-releases-october-20262026-10-22 https://bugrater.com/releases/adamarcanov-security-releases-october-20262026-10-22 https://bugrater.com/releases/shahkashani-security-releases-october-20262026-10-22 https://bugrater.com/releases/anshulkharb-security-releases-october-20262026-10-22 https://bugrater.com/releases/openssl-security-releases-february-20232026-10-22 https://bugrater.com/releases/liquid-web-stellarwp-security-releases-september-20262026-10-22 https://bugrater.com/releases/gitea-security-releases-october-20262026-10-22 https://bugrater.com/releases/f5-security-releases-october-20262026-10-22 https://bugrater.com/releases/zapping-vbi-security-releases-october-20262026-10-22 https://bugrater.com/releases/miniupnp-project-security-releases-october-20262026-10-22 https://bugrater.com/releases/khronos-group-security-releases-october-20262026-10-22 https://bugrater.com/releases/freeswitch-security-releases-october-20262026-10-22 https://bugrater.com/releases/serge1-security-releases-october-20262026-10-22 https://bugrater.com/releases/vgmstream-security-releases-october-20262026-10-22 https://bugrater.com/releases/cgns-security-releases-october-20262026-10-22 https://bugrater.com/releases/artifex-software-security-releases-october-20262026-10-22 https://bugrater.com/releases/twogood-security-releases-october-20262026-10-22 https://bugrater.com/releases/turbodocx-security-releases-october-20262026-10-22 https://bugrater.com/releases/portkey-ai-security-releases-october-20262026-10-22 https://bugrater.com/releases/cve-2017-20287-javo-spot-theme-for-wordpress-before-3-0-0-contains-a-path-traversal-vulnerability-that-allows-unauthenticated-attackers-to-read-arbitrary-files-via-the-fn-para2026-10-22 https://bugrater.com/releases/cve-2017-20288-qcubed-2-2-0-through-3-1-1-contains-a-reflected-cross-site-scripting-vulnerability-that-allows-unauthenticated-attackers-to-inject-scripts-through-the-installat2026-10-22 https://bugrater.com/releases/cve-2017-20289-broadstreet-ad-widget-plugin-for-wordpress-2-2-0-before-2-12-0-contains-a-local-file-inclusion-vulnerability-that-allows-authenticated-users-to-execute-attacker2026-10-22 https://bugrater.com/releases/cve-2017-20290-discourse-1-9-0-beta2-before-1-9-0-beta13-contains-a-reflected-cross-site-scripting-vulnerability-that-allows-unauthenticated-attackers-to-inject-scripts-throug2026-10-22 https://bugrater.com/releases/cve-2018-25438-intermesh-group-office-3-3-0-before-3-5-5-contains-an-unauthenticated-path-traversal-vulnerability-in-compress-php-that-allows-remote-attackers-to-read-arbitrar2026-10-22 https://bugrater.com/releases/cve-2018-25439-metinfo-cms-6-0-0-before-6-1-1-contains-a-path-traversal-vulnerability-in-include-thumb-php-that-allows-unauthenticated-attackers-to-read-arbitrary-files-via-t2026-10-22 https://bugrater.com/releases/cve-2019-25778-seacms-through-8-7-contains-an-unauthenticated-sql-injection-vulnerability-that-allows-remote-attackers-to-manipulate-database-queries-by-injecting-sql-through2026-10-22 https://bugrater.com/releases/cve-2019-25779-woothemes-diarise-through-1-5-9-contains-a-file-read-vulnerability-that-allows-unauthenticated-attackers-to-read-arbitrary-files-through-the-calendar-parameter2026-10-22 https://bugrater.com/releases/cve-2020-37284-sickbeard-through-build-507-contains-a-reflected-cross-site-scripting-vulnerability-that-allows-unauthenticated-attackers-to-inject-scripts-through-the-pattern2026-10-22 https://bugrater.com/releases/cve-2021-48013-weaver-e-cology-8-0-contains-a-path-traversal-vulnerability-that-allows-unauthenticated-attackers-to-read-arbitrary-files-through-the-fpath-parameter-of-the-we2026-10-22 https://bugrater.com/releases/cve-2021-48014-finereport-9-0-contains-a-path-traversal-vulnerability-in-the-webreport-reportserver-design-save-svg-operation-that-allows-unauthenticated-attackers-to-write-a2026-10-22 https://bugrater.com/releases/cve-2021-48015-jeewms-before-commit-0a610e8-contains-an-unauthenticated-path-traversal-vulnerability-that-allows-remote-attackers-to-read-arbitrary-files-via-the-dbpath-parame2026-10-22 https://bugrater.com/releases/cve-2021-48016-dedecms-through-5-8-1-beta-contains-a-php-code-injection-vulnerability-in-showmsg-where-the-http-referer-header-is-written-into-a-dedetemplate-string-and-incl2026-10-22 https://bugrater.com/releases/cve-2021-48017-orbiteam-bscw-server-5-x-before-5-2-5-and-7-x-before-7-4-4-contains-an-unauthenticated-path-traversal-vulnerability-in-the-style-name-parameter-of-the-theme-ope2026-10-22 https://bugrater.com/releases/cve-2022-51021-notificationx-plugin-for-wordpress-2-0-0-before-2-3-12-contains-an-unauthenticated-sql-injection-vulnerability-that-allows-remote-attackers-to-manipulate-databa2026-10-22 https://bugrater.com/releases/cve-2022-51022-yishaadmin-2-2-through-3-1-fixed-in-commit-025b062-contains-an-unauthenticated-path-traversal-vulnerability-in-the-admin-file-downloadfile-endpoint-that-allo2026-10-22 https://bugrater.com/releases/cve-2022-51023-phpok-4-5-000-before-5-4-081-contains-an-sql-injection-vulnerability-that-allows-unauthenticated-attackers-to-manipulate-order-by-clauses-via-the-sort-parameter2026-10-22 https://bugrater.com/releases/cve-2022-51024-kavita-0-5-2-before-0-5-4-1-contains-a-path-traversal-vulnerability-that-allows-unauthenticated-attackers-to-read-arbitrary-files-by-supplying-sequences-i2026-10-22 https://bugrater.com/releases/cve-2022-51025-penta-security-wapples-4-0-54-1-5-0-and-6-0-contains-a-path-traversal-vulnerability-that-allows-authenticated-attackers-to-download-arbitrary-files-via-the-na2026-10-22 https://bugrater.com/releases/cve-2023-54413-wpml-multilingual-cms-plugin-for-wordpress-before-4-6-1-contains-a-reflected-cross-site-scripting-vulnerability-that-allows-unauthenticated-attackers-to-inject2026-10-22 https://bugrater.com/releases/cve-2024-58393-i-netsolution-readymade-unilevel-ecommerce-mlm-2024-03-15-build-contains-an-sql-injection-vulnerability-that-allows-unauthenticated-attackers-to-manipulate-da2026-10-22 https://bugrater.com/releases/cve-2024-58394-retool-before-3-88-0-contains-a-cross-site-scripting-vulnerability-that-allows-unauthenticated-attackers-to-execute-scripts-by-proxying-malicious-svg-files-thro2026-10-22 https://bugrater.com/releases/cve-2024-58396-youdatasum-cpas-audit-management-system-v4-contains-a-path-traversal-vulnerability-that-allows-unauthenticated-attackers-to-read-arbitrary-files-by-manipulating2026-10-22 https://bugrater.com/releases/cve-2025-71434-weaver-e-cology-8-0-9-0-and-10-0-prior-to-10-76-contains-an-unauthenticated-sql-injection-vulnerability-in-the-api-doc-out-more-list-endpoint-via-the-element2026-10-22 https://bugrater.com/releases/cve-2026-111079-a-flaw-was-found-in-goose-when-the-terminal-integration-feature-is-enabled-the-application-captures-shell-command-history-and-sends-it-verbatim-without-saniti2026-10-22 https://bugrater.com/releases/cve-2026-112313-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-vulnerability-in-acf-extended-acf-extended-acf-extended-allows-stored-xss-t2026-10-22 https://bugrater.com/releases/cve-2026-112820-improper-control-of-filename-for-include-require-statement-in-php-program-php-remote-file-inclusion-vulnerability-in-elated-themes-academist-core-academist2026-10-22 https://bugrater.com/releases/cve-2026-112822-improper-neutralization-of-special-elements-used-in-an-sql-command-sql-injection-vulnerability-in-amentotech-workreap-core-workreap-core-allows-blind-sql-in2026-10-22 https://bugrater.com/releases/cve-2026-112832-improper-control-of-filename-for-include-require-statement-in-php-program-php-remote-file-inclusion-vulnerability-in-cozythemes-rootblox-rootblox-allows-php2026-10-22 https://bugrater.com/releases/cve-2026-112842-missing-authorization-vulnerability-in-cozmoslabs-paid-member-subscriptions-paid-member-subscriptions-allows-exploiting-incorrectly-configured-access-control-se2026-10-22 https://bugrater.com/releases/cve-2026-114665-goploy-1-18-0-before-1-18-1-contains-a-link-following-vulnerability-in-the-deploy-filediff-and-deploy-filecompare-endpoints-that-allows-authenticated-members2026-10-22 https://bugrater.com/releases/cve-2026-115207-a-flaw-was-found-in-gnu-patch-an-attacker-can-achieve-arbitrary-file-creation-outside-the-intended-working-directory-by-enticing-a-user-or-automated-workflow-t2026-10-22 https://bugrater.com/releases/cve-2026-115319-fzf-0-36-0-through-0-74-5-contains-an-inefficient-algorithmic-complexity-vulnerability-in-maskactioncontents-that-allows-local-attackers-to-exhaust-the-listen2026-10-22 https://bugrater.com/releases/cve-2026-115321-bytebase-before-3-16-0-contains-an-authorization-bypass-vulnerability-in-the-updateissuecomment-handler-that-allows-low-privileged-project-users-to-modify-comme2026-10-22 https://bugrater.com/releases/cve-2026-115322-bytebase-before-3-16-0-contains-an-authorization-bypass-vulnerability-in-gettaskrunlog-gettaskrunsession-and-previewtaskrunrollback-that-allows-authenticated-u2026-10-22 https://bugrater.com/releases/cve-2026-115323-evershop-1-2-2-before-2-2-1-contains-a-missing-authorization-vulnerability-in-the-customer-address-api-that-allows-unauthenticated-attackers-to-manage-other-cus2026-10-22 https://bugrater.com/releases/cve-2026-115324-mem0-0-1-117-before-1-0-8-contains-an-sql-injection-vulnerability-in-mem0-vector-stores-databricks-py-that-allows-attackers-to-inject-sql-by-influencing-stored2026-10-22 https://bugrater.com/releases/cve-2026-115325-netmaker-through-1-7-0-contains-an-authorization-bypass-vulnerability-in-the-updateextclient-handler-that-allows-network-scoped-users-to-modify-external-clients2026-10-22 https://bugrater.com/releases/cve-2026-115326-qloapps-through-1-7-0-contains-an-insecure-direct-object-reference-vulnerability-in-orderdetailcontroller-displayajaxsubmitrefundrequest-that-allows-authenti2026-10-22 https://bugrater.com/releases/cve-2026-115327-libyang-through-6-4-13-contains-an-uninitialized-pointer-free-vulnerability-in-lydxml-env-netconf-rpc-in-src-parser-xml-c-when-parsing-netconf-rpc-action-enve2026-10-22 https://bugrater.com/releases/cve-2026-115328-json-scada-before-0-65-alpha-contains-an-sql-injection-vulnerability-in-opcapi-in-src-server-realtime-auth-index-js-that-allows-authenticated-users-to-inject2026-10-22 https://bugrater.com/releases/cve-2026-115329-lotus-through-0-10-2-contains-an-insecure-direct-object-reference-vulnerability-in-subscriptionviewset-get-object-that-uses-an-unscoped-queryset-without-organ2026-10-22 https://bugrater.com/releases/cve-2026-115330-lotus-through-0-10-2-contains-an-sql-injection-vulnerability-that-allows-authenticated-organization-users-to-execute-arbitrary-sql-by-appending-stacked-statemen2026-10-22 https://bugrater.com/releases/cve-2026-115331-lotus-through-0-10-2-contains-an-sql-injection-vulnerability-that-allows-authenticated-organization-users-to-inject-sql-by-supplying-crafted-billable-metric-pro2026-10-22 https://bugrater.com/releases/cve-2026-115332-lotus-through-0-10-2-contains-an-sql-injection-vulnerability-that-allows-authenticated-organization-users-to-inject-sql-by-registering-crafted-subscription-filt2026-10-22 https://bugrater.com/releases/cve-2026-115333-lotus-through-0-10-2-contains-an-improper-authentication-vulnerability-in-the-go-event-ingestion-middleware-that-validates-api-keys-by-prefix-only-without-chec2026-10-22 https://bugrater.com/releases/cve-2026-115334-lotus-through-0-10-2-contains-an-authorization-bypass-vulnerability-in-changeuserorganizationview-post-that-allows-authenticated-users-to-join-any-organization2026-10-22 https://bugrater.com/releases/cve-2026-13411-mattermost-versions-11-7-x-11-7-11-fail-to-validate-null-elements-when-decoding-playbook-import-conditions-which-allows-an-authenticated-attacker-to-crash-th2026-10-22 https://bugrater.com/releases/techlabpro1-security-releases-october-20262026-10-22 https://bugrater.com/releases/nezhahq-security-releases-october-20262026-10-22 https://bugrater.com/releases/st-engineering-idirect-security-releases-september-20262026-10-22 https://bugrater.com/releases/3proxy-security-releases-october-20262026-10-22 https://bugrater.com/releases/prowler-security-releases-october-20262026-10-22 https://bugrater.com/releases/sillytavern-security-releases-october-20262026-10-22 https://bugrater.com/releases/openpanel-dev-security-releases-october-20262026-10-22 https://bugrater.com/releases/argoproj-labs-security-releases-october-20262026-10-22 https://bugrater.com/releases/mealie-recipes-security-releases-october-20262026-10-22 https://bugrater.com/releases/tenable-inc-security-releases-october-20262026-10-22 https://bugrater.com/releases/zimbra-security-releases-october-20262026-10-22 https://bugrater.com/releases/lablup-security-releases-june-20252026-10-22 https://bugrater.com/releases/ntharim-security-releases-october-20262026-10-22 https://bugrater.com/releases/freedesktop-security-releases-october-20262026-10-22 https://bugrater.com/releases/vcita-security-releases-august-20262026-10-22 https://bugrater.com/releases/themewant-security-releases-september-20262026-10-22 https://bugrater.com/releases/pcman-security-releases-october-20262026-10-22 https://bugrater.com/releases/red-hat-security-releases-march-20252026-10-22 https://bugrater.com/releases/lantronix-security-releases-october-20262026-10-22 https://bugrater.com/releases/konstanty-bialkowski-security-releases-october-20262026-10-22 https://bugrater.com/releases/hatchet-dev-security-releases-october-20262026-10-22 https://bugrater.com/releases/llama-farm-security-releases-october-20262026-10-22 https://bugrater.com/releases/guy-hartstein-security-releases-october-20262026-10-22 https://bugrater.com/releases/scisharp-security-releases-october-20262026-10-22 https://bugrater.com/releases/amoylab-security-releases-october-20262026-10-22 https://bugrater.com/releases/cve-2026-112330-motor-net-before-0-19-0-contains-a-denial-of-service-vulnerability-that-allows-a-remote-attacker-who-can-publish-to-a-consumed-queue-to-crash-the-service-perman2026-10-22 https://bugrater.com/releases/cve-2026-112331-motor-net-before-0-19-0-contains-a-denial-of-service-vulnerability-that-allows-a-remote-attacker-who-can-produce-records-to-a-consumed-topic-to-crash-the-servic2026-10-22 https://bugrater.com/releases/cve-2026-112332-motor-net-before-0-19-0-contains-an-uncaught-exception-vulnerability-in-jsonnetdeserializer-deserialize-that-allows-a-remote-attacker-who-can-publish-to-a-consu2026-10-22 https://bugrater.com/releases/cve-2026-115398-ghidra-before-12-2-contains-a-resource-allocation-without-limits-vulnerability-in-filesystemindexhelper-used-by-tarfilesystem-and-zipfilesystem-which-store-unb2026-10-22 https://bugrater.com/releases/cve-2026-115503-ghidra-before-12-2-contains-an-improper-handling-of-highly-compressed-data-vulnerability-in-extensionutils-unziptoinstallationfolder-that-allows-attackers-to2026-10-22 https://bugrater.com/releases/cve-2026-115504-cfitsio-through-4-7-0-contains-an-out-of-bounds-write-vulnerability-in-ffgcls2-in-getcols-c-that-trusts-attacker-controlled-heap-descriptor-lengths-for-variab2026-10-22 https://bugrater.com/releases/cve-2026-115505-libsmb2-before-6-3-contains-integer-overflow-vulnerabilities-in-the-dce-rpc-ndr-decoder-in-lib-dcerpc-c-that-allow-heap-out-of-bounds-reads-and-writes-a-malici2026-10-22 https://bugrater.com/releases/cve-2026-115506-libexpat-through-2-9-0-contains-a-denial-of-service-vulnerability-because-billion-laughs-protection-in-accountingdifftolerated-in-xmlparse-c-detects-entity-am2026-10-22 https://bugrater.com/releases/cve-2026-115507-vikunja-2-2-0-before-2-7-1-contains-an-html-injection-vulnerability-in-createconversationalheader-in-pkg-notifications-mail-go-that-interpolates-display-names-a2026-10-22 https://bugrater.com/releases/cve-2026-115508-crawl4ai-0-7-0-before-0-9-5-contains-an-inefficient-regular-expression-complexity-vulnerability-in-the-docker-api-server-that-allows-authenticated-api-clients-t2026-10-22 https://bugrater.com/releases/cve-2026-115509-jitsu-console-before-2-14-0-beta-41-contains-an-incorrect-authorization-vulnerability-in-sources-state-ts-handlers-that-call-findfirst-without-await-so-the-syn2026-10-22 https://bugrater.com/releases/cve-2026-105265-a-vulnerability-exists-in-the-the-time-zone-parameter-and-does-not-properly-validate-user-input-which-may-allow-an-authenticated-user-to-cause-etc-localtime-t2026-10-22 https://bugrater.com/releases/cve-2026-109122-the-network-management-service-on-affected-kiloview-e3-ndi-encoder-firmware-fails-to-sanitize-one-field-used-when-configuring-static-routes-via-the-web-manageme2026-10-22 https://bugrater.com/releases/cve-2026-111100-the-onvif-device-service-on-the-e3-responds-to-certain-informational-requests-without-requiring-authentication-a-remote-unauthenticated-party-can-retrieve-det2026-10-22 https://bugrater.com/releases/cve-2026-111594-intersystems-iris-for-health-has-tls-ssl-encryption-turned-off-by-default-which-may-enable-an-attacker-to-view-transmitted-data-and-use-that-data-to-log-into-t2026-10-22 https://bugrater.com/releases/cve-2026-115221-a-flaw-was-found-in-freeipa-an-improper-authorization-check-allows-an-authenticated-host-to-retrieve-and-revoke-digital-certificates-assigned-to-other-users-or2026-10-22 https://bugrater.com/releases/cve-2026-115424-a-flaw-was-found-in-the-openshift-client-oc-when-extracting-container-image-layers-with-oc-image-extract-the-application-fails-to-properly-sanitize-symbolic-a2026-10-22 https://bugrater.com/releases/cve-2026-115449-a-flaw-was-found-in-libslirp-when-handling-icmp-echo-requests-the-reply-length-is-not-updated-to-match-the-actual-data-received-from-the-host-under-specific2026-10-22 https://bugrater.com/releases/cve-2026-96616-authentication-tokens-issued-by-the-e3-s-web-management-interface-on-login-are-given-an-expiration-time-far-beyond-any-reasonable-session-lifetime-effectively2026-10-22 https://bugrater.com/releases/mtrudel-security-releases-october-20262026-10-23 https://bugrater.com/releases/peazip-security-releases-october-20262026-10-23 https://bugrater.com/releases/erlang-security-releases-may-20262026-10-23 https://bugrater.com/releases/hestiacp-security-releases-october-20262026-10-23 https://bugrater.com/releases/linux-security-releases-september-20222026-10-23 https://bugrater.com/releases/w3-eden-security-releases-august-20262026-10-23 https://bugrater.com/releases/palo-alto-networks-security-releases-october-20262026-10-23 https://bugrater.com/releases/pgbouncer-security-releases-october-20262026-10-23 https://bugrater.com/releases/simplyrets-security-releases-october-20262026-10-23 https://bugrater.com/releases/skydropx-security-releases-october-20262026-10-23 https://bugrater.com/releases/hippooo-security-releases-october-20262026-10-23 https://bugrater.com/releases/wpmanageninja-security-releases-october-20262026-10-23 https://bugrater.com/releases/gnome-security-releases-october-20262026-10-23 https://bugrater.com/releases/linux-security-releases-march-20232026-10-23 https://bugrater.com/releases/cemtan-security-releases-october-20262026-10-23 https://bugrater.com/releases/bbpress-security-releases-october-20262026-10-23 https://bugrater.com/releases/zuihou-security-releases-october-20262026-10-23 https://bugrater.com/releases/flexprice-security-releases-october-20262026-10-23 https://bugrater.com/releases/colanode-security-releases-october-20262026-10-23 https://bugrater.com/releases/coderamp-labs-security-releases-october-20262026-10-23 https://bugrater.com/releases/holaboss-ai-security-releases-october-20262026-10-23 https://bugrater.com/releases/databasus-security-releases-october-20262026-10-23 https://bugrater.com/releases/shopizer-security-releases-october-20262026-10-23 https://bugrater.com/releases/we-promise-security-releases-october-20262026-10-23 https://bugrater.com/releases/growchief-security-releases-october-20262026-10-23 https://bugrater.com/releases/blinkospace-security-releases-october-20262026-10-23 https://bugrater.com/releases/modelengine-group-security-releases-october-20262026-10-23 https://bugrater.com/releases/openssl-security-releases-march-20232026-10-23 https://bugrater.com/releases/ahsay-security-releases-october-20262026-10-23 https://bugrater.com/releases/sonicwall-security-releases-october-20262026-10-23 https://bugrater.com/releases/opensips-security-releases-october-20262026-10-23 https://bugrater.com/releases/openssl-security-releases-may-20232026-10-23 https://bugrater.com/releases/media-alias-display-moderately-critical-information-disclosure-sa-contrib-2026-2452026-10-23 https://bugrater.com/releases/fullcalendar-view-moderately-critical-access-bypass-sa-contrib-2026-2442026-10-23 https://bugrater.com/releases/media-bulk-upload-moderately-critical-access-bypass-sa-contrib-2026-2432026-10-23 https://bugrater.com/releases/simple-oauth-oauth2-openid-connect-moderately-critical-access-bypass-sa-contrib-2026-2422026-10-23 https://bugrater.com/releases/frontend-editing-less-critical-access-bypass-sa-contrib-2026-2412026-10-23 https://bugrater.com/releases/frontend-editing-moderately-critical-cross-site-request-forgery-csrf-sa-contrib-2026-2402026-10-23 https://bugrater.com/releases/simple-user-management-moderately-critical-access-bypass-sa-contrib-2026-2392026-10-23 https://bugrater.com/releases/domain-moderately-critical-access-bypass-sa-contrib-2026-2382026-10-23 https://bugrater.com/releases/fireware-os-security-releases-september-20262026-10-23 https://bugrater.com/releases/openclaw-security-releases-october-20262026-10-23 https://bugrater.com/releases/linux-security-releases-june-20232026-10-23 https://bugrater.com/releases/red-hat-security-releases-june-20232026-10-23 https://bugrater.com/releases/openssl-security-releases-july-20232026-10-23 https://bugrater.com/releases/linux-security-releases-july-20232026-10-23 https://bugrater.com/releases/oaid-security-releases-october-20262026-10-23 https://bugrater.com/releases/turboderp-security-releases-october-20262026-10-23 https://bugrater.com/releases/red-hat-security-releases-july-20232026-10-23 https://bugrater.com/releases/linux-security-releases-september-20232026-10-23 https://bugrater.com/releases/tp-link-systems-inc-security-releases-february-20262026-10-23 https://bugrater.com/releases/linux-security-releases-august-20232026-10-23 https://bugrater.com/releases/arm-ltd-security-releases-september-20232026-10-23 https://bugrater.com/releases/red-hat-security-releases-august-20232026-10-23 https://bugrater.com/releases/hitachi-vantara-security-releases-october-20262026-10-23 https://bugrater.com/releases/red-hat-security-releases-september-20232026-10-23 https://bugrater.com/releases/praat-security-releases-october-20262026-10-23 https://bugrater.com/releases/openssl-security-releases-september-20232026-10-23 https://bugrater.com/releases/red-hat-security-releases-october-20232026-10-23 https://bugrater.com/releases/tp-link-system-inc-security-releases-october-20262026-10-23 https://bugrater.com/releases/red-hat-security-releases-november-20232026-10-23 https://bugrater.com/releases/openssl-security-releases-october-20232026-10-23 https://bugrater.com/releases/ljharb-security-releases-october-20262026-10-23 https://bugrater.com/releases/openssl-security-releases-november-20232026-10-23 https://bugrater.com/releases/linux-security-releases-october-20232026-10-23 https://bugrater.com/releases/openssl-security-releases-january-20242026-10-23 https://bugrater.com/releases/openssl-security-releases-april-20242026-10-23 https://bugrater.com/releases/red-hat-security-releases-january-20242026-10-23 https://bugrater.com/releases/linux-security-releases-december-20232026-10-23 https://bugrater.com/releases/sqlite-security-releases-december-20232026-10-23 https://bugrater.com/releases/n8n-io-security-releases-october-20262026-10-23 https://bugrater.com/releases/gitpython-developers-security-releases-october-20262026-10-23 https://bugrater.com/releases/renovatebot-security-releases-october-20262026-10-23 https://bugrater.com/releases/nodemailer-security-releases-october-20262026-10-23 https://bugrater.com/releases/cve-2026-107861-the-system-control-service-on-affected-kiloview-e3-ndi-encoder-firmware-fails-to-sanitize-the-hostname-parameter-accepted-by-its-device-naming-endpoint-passing2026-10-23 https://bugrater.com/releases/cve-2026-110243-the-network-management-service-on-affected-kiloview-e3-ndi-encoder-firmware-fails-to-validate-the-network-interface-name-accepted-by-its-link-maintenance-addres2026-10-23 https://bugrater.com/releases/cve-2026-110491-the-onvif-service-on-the-e3-can-be-rendered-unresponsive-by-sending-malformed-or-incomplete-requests-to-certain-operations-the-affected-service-stops-accepting2026-10-23 https://bugrater.com/releases/cve-2026-110825-the-onvif-device-service-on-affected-kiloview-e3-ndi-encoder-firmware-accepts-hostname-dns-and-ntp-configuration-write-operations-without-requiring-authentica2026-10-23 https://bugrater.com/releases/cve-2026-92450-the-authentication-framework-used-by-affected-kiloview-e3-ndi-encoder-firmware-signs-session-json-web-tokens-using-an-hmac-sha256-secret-hardcoded-as-a-static-s2026-10-23 https://bugrater.com/releases/cve-2026-115534-a-vulnerability-was-determined-in-gedelumbung-hospitalmanagement-up-to-c2d45543789a3887067d3915f69d44cfc2cf76a8-impacted-is-the-function-kirim-of-the-file-appl2026-10-23 https://bugrater.com/releases/cve-2026-115535-a-vulnerability-was-identified-in-gedelumbung-hospitalmanagement-up-to-c2d45543789a3887067d3915f69d44cfc2cf76a8-the-affected-element-is-the-function-sistem-php2026-10-23 https://bugrater.com/releases/cve-2026-115536-a-security-flaw-has-been-discovered-in-gedelumbung-hospitalmanagement-up-to-c2d45543789a3887067d3915f69d44cfc2cf76a8-the-impacted-element-is-the-function-simpa2026-10-23 https://bugrater.com/releases/cve-2026-115537-a-weakness-has-been-identified-in-gedelumbung-hospitalmanagement-up-to-c2d45543789a3887067d3915f69d44cfc2cf76a8-this-affects-the-function-simpan-of-the-file-ap2026-10-23 https://bugrater.com/releases/cve-2026-19677-an-authentication-bypass-vulnerability-in-the-public-onphase-frevvo-registration-form-version-11-0-14-allows-an-unauthenticated-remote-attacker-to-authenticate2026-10-23 https://bugrater.com/releases/cve-2026-19678-a-server-side-request-forgery-ssrf-vulnerability-in-the-unauthenticated-form-service-in-version-11-0-14-in-onphase-forms-allows-an-unauthenticated-remote-atta2026-10-23 https://bugrater.com/releases/cve-2026-109198-the-anti-spam-by-cleantalk-spam-protection-without-captcha-plugin-for-wordpress-is-vulnerable-to-stored-cross-site-scripting-via-the-user-email-parameter-in2026-10-23 https://bugrater.com/releases/cve-2026-115497-the-music-store-wordpress-ecommerce-plugin-for-wordpress-is-vulnerable-to-directory-traversal-in-all-versions-up-to-and-including-1-4-7-via-the-f-paramete2026-10-23 https://bugrater.com/releases/cve-2026-107858-missing-origin-validation-in-websockets-cwe-1385-and-permissive-cross-domain-policy-with-untrusted-domains-cwe-942-in-the-development-web-server-adk-web-i2026-10-23 https://bugrater.com/releases/cve-2026-109933-the-otter-blocks-wordpress-plugin-before-3-2-8-does-not-properly-sanitize-and-escape-user-supplied-block-styling-values-before-writing-them-into-an-inline-styl2026-10-23 https://bugrater.com/releases/cve-2026-109934-the-otter-blocks-wordpress-plugin-before-3-2-8-does-not-correctly-determine-whether-a-post-is-publicly-readable-before-returning-its-data-through-a-rest-api-en2026-10-23 https://bugrater.com/releases/cve-2026-109935-the-otter-blocks-wordpress-plugin-before-3-2-8-does-not-enforce-its-block-visibility-conditions-when-a-published-post-is-rendered-through-the-wordpress-rest-ap2026-10-23 https://bugrater.com/releases/cve-2026-109936-the-otter-blocks-wordpress-plugin-before-3-2-8-does-not-correctly-bound-a-pattern-it-uses-to-rewrite-its-dynamic-content-tokens-while-rendering-blocks-so-the2026-10-23 https://bugrater.com/releases/cve-2026-110510-the-essential-addons-for-elementor-wordpress-plugin-before-6-8-7-does-not-validate-the-html-tag-setting-of-some-of-its-widgets-before-using-it-to-build-markup2026-10-23 https://bugrater.com/releases/cve-2026-110537-the-essential-addons-for-elementor-wordpress-plugin-before-6-8-7-does-not-verify-that-an-administrator-may-manage-the-specific-user-accounts-targeted-by-its-lo2026-10-23 https://bugrater.com/releases/cve-2026-111737-the-speed-optimizer-wordpress-plugin-before-7-8-5-does-not-sanitise-or-escape-some-of-its-settings-before-outputting-them-in-the-head-of-front-end-pages-which2026-10-23 https://bugrater.com/releases/cve-2026-111738-the-speed-optimizer-wordpress-plugin-before-7-8-5-does-not-verify-network-level-privilege-before-applying-an-option-change-to-the-whole-multisite-network-nor2026-10-23 https://bugrater.com/releases/cve-2026-111966-the-user-profile-builder-wordpress-plugin-before-4-0-5-does-not-sanitise-and-escape-one-of-its-shortcode-attributes-before-outputting-it-back-in-a-redirect-mes2026-10-23 https://bugrater.com/releases/cve-2026-111982-the-user-profile-builder-wordpress-plugin-before-4-0-5-does-not-verify-that-a-user-is-authorized-to-edit-the-specific-account-selected-on-its-front-end-edit-pr2026-10-23 https://bugrater.com/releases/cve-2026-112219-the-download-monitor-wordpress-plugin-before-5-3-5-does-not-correctly-restrict-management-of-the-list-of-filesystem-locations-it-may-serve-files-from-to-network2026-10-23 https://bugrater.com/releases/cve-2026-112230-the-popup-builder-wordpress-plugin-before-4-4-6-does-not-perform-authorization-checks-before-trashing-popup-content-in-a-maintenance-routine-that-runs-on-unaut2026-10-23 https://bugrater.com/releases/cve-2026-113472-the-depicter-popup-slider-builder-wordpress-plugin-before-4-8-2-does-not-properly-validate-uploaded-files-in-its-editor-media-upload-endpoint-checking-only2026-10-23 https://bugrater.com/releases/cve-2026-113499-the-litespeed-cache-wordpress-plugin-before-7-9-2-does-not-restrict-one-of-its-html-rewriting-routines-to-stylesheet-content-so-it-removes-a-quote-that-termina2026-10-23 https://bugrater.com/releases/cve-2026-113500-the-litespeed-cache-wordpress-plugin-before-7-9-2-does-not-limit-one-of-its-html-optimization-routines-to-stylesheet-content-so-it-can-delete-the-markup-that-c2026-10-23 https://bugrater.com/releases/cve-2026-113501-the-litespeed-cache-wordpress-plugin-before-7-9-2-does-not-perform-a-capability-check-on-its-admin-notice-dismissal-handler-and-the-nonce-it-relies-on-is-not-b2026-10-23 https://bugrater.com/releases/cve-2026-55981-a-firmware-verification-vulnerability-in-creative-sound-blaster-katana-could-allow-an-attacker-to-modify-a-legitimate-firmware-image-and-upload-the-modified-fir2026-10-23 https://bugrater.com/releases/cve-2026-63243-an-authentication-vulnerability-in-the-bluetooth-low-energy-ble-implementation-of-creative-sound-blaster-katana-could-allow-an-attacker-within-bluetooth-range2026-10-23 https://bugrater.com/releases/cve-2026-4950-the-customeradministration-portal-kundenmanager-of-vertigis-webordersystem-allows-privileged-users-to-manage-the-employees-of-defined-companies-user-groups2026-10-23 https://bugrater.com/releases/cve-2026-4951-the-customeradministration-portal-kundenmanager-of-vertigis-webordersystem-allows-privileged-users-to-search-for-employees-across-all-defined-companies-user2026-10-23 https://bugrater.com/releases/cve-2026-4952-the-asmobile-web-interface-which-is-part-of-the-vertigis-software-package-gis-portal-allows-authenticated-users-to-define-a-business-reference-javascript2026-10-23 https://bugrater.com/releases/cve-2026-75775-improper-neutralization-of-special-elements-used-in-an-os-command-in-certain-asus-routers-allows-remote-user-to-execute-arbitrary-commands-with-root-privileges2026-10-23 https://bugrater.com/releases/cve-2026-75779-improper-neutralization-of-special-elements-used-in-an-os-command-os-command-injection-and-cross-site-request-forgery-csrf-in-an-asus-router-model-allow-a2026-10-23 https://bugrater.com/releases/cve-2026-93489-improper-authentication-in-asus-router-modules-allows-an-unauthenticated-nearby-user-to-send-an-http-request-and-forge-an-access-ticket-subsequently-enabling-t2026-10-23 https://bugrater.com/releases/cve-2025-30043-cgm-clininet-is-vulnerable-to-missing-authentication-for-critical-function-in-the-docmanagment-path-the-endpoint-is-accessible-without-authentication-allowin2026-10-23 https://bugrater.com/releases/cve-2025-30045-cgm-clininet-is-vulnerable-to-code-injection-in-the-convexpr-function-which-processes-perl-expressions-into-rtf-document-content-due-to-improper-control-of-th2026-10-23 https://bugrater.com/releases/cve-2025-30047-cgm-clininet-is-vulnerable-to-remote-code-execution-caused-by-deserialization-of-untrusted-data-the-server-exposes-an-http-based-api-used-by-the-administrativ2026-10-23 https://bugrater.com/releases/cve-2025-30049-the-cgm-clininet-application-stores-user-passwords-as-unsalted-md5-hashes-this-issue-was-fixed-in-versions-2026-ms1-and-2026-ms32026-10-23 https://bugrater.com/releases/cve-2025-30054-cgm-clininet-is-vulnerable-to-local-privilege-escalation-the-service-that-processes-incoming-hl7-messages-runs-with-root-privileges-but-due-to-incorrect-permi2026-10-23 https://bugrater.com/releases/cve-2026-112359-missing-authorization-vulnerability-in-amauri-io-wpmobile-app-wpappninja-allows-exploiting-incorrectly-configured-access-control-security-levels-this-issue-affe2026-10-23 https://bugrater.com/releases/cve-2026-112821-missing-authorization-vulnerability-in-knit-pay-knit-pay-knit-pay-allows-exploiting-incorrectly-configured-access-control-security-levels-this-issue-affects-kni2026-10-23 https://bugrater.com/releases/cve-2026-112825-missing-authorization-vulnerability-in-magepeople-inc-car-rental-manager-car-rental-manager-allows-exploiting-incorrectly-configured-access-control-security-le2026-10-23 https://bugrater.com/releases/cve-2026-112835-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-vulnerability-in-e4jvikwp-vikrentcar-vikrentcar-allows-reflected-xss-this-i2026-10-23 https://bugrater.com/releases/cve-2026-112837-improper-neutralization-of-special-elements-used-in-an-sql-command-sql-injection-vulnerability-in-ruben-garcia-gamipress-gamipress-allows-blind-sql-injectio2026-10-23 https://bugrater.com/releases/cve-2026-112838-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-vulnerability-in-e4jvikwp-vikrentcar-vikrentcar-allows-stored-xss-this-issu2026-10-23 https://bugrater.com/releases/cve-2026-112860-improper-neutralization-of-special-elements-used-in-an-sql-command-sql-injection-vulnerability-in-xnau-webdesign-participants-database-participants-database2026-10-23 https://bugrater.com/releases/cve-2026-112862-deserialization-of-untrusted-data-vulnerability-in-xnau-webdesign-participants-database-participants-database-allows-object-injection-this-issue-affects-partici2026-10-23 https://bugrater.com/releases/cve-2026-115657-when-used-as-an-executor-in-either-knime-server-or-knime-business-hub-knime-analytics-platform-lts-versions-before-5-8-4-log-configured-credentials-of-proxies2026-10-23 https://bugrater.com/releases/cve-2026-25716-missing-authorization-vulnerability-in-hallo-welt-gmbh-bluespice-extension-bluespiceusermanager-allows-any-authenticated-user-without-special-privileges-to-b2026-10-23 https://bugrater.com/releases/cve-2026-89312-aesgcmcryptor-open-passed-a-caller-supplied-nonce-straight-to-cipher-aead-open-without-checking-its-length-the-go-standard-library-panics-rather-than-r2026-10-23 https://bugrater.com/releases/cve-2026-89313-jwkstruststore-get-assigned-each-parsed-key-to-the-function-s-named-return-value-while-refreshing-the-jwks-cache-when-the-requested-kid-was-not-present2026-10-23 https://bugrater.com/releases/cve-2026-89314-jwkfields-checkconsistency-detected-duplicate-key-ops-entries-with-a-pairwise-nested-loop-making-validation-cost-grow-with-the-square-of-the-entry-coun2026-10-23 https://bugrater.com/releases/cve-2026-89315-jwtclaims-marshaljson-built-a-go-struct-at-runtime-with-reflect-structof-synthesising-a-field-named-a-claimname-for-each-untyped-claim-reflect-stru2026-10-23 https://bugrater.com/releases/cve-2026-89316-loadpublickey-resolved-an-ec-key-s-curve-with-an-unchecked-type-assertion-algtooptsmap-alg-ecdsaoptions-a-jwk-declaring-kty-ec-together-with-a-n2026-10-23 https://bugrater.com/releases/cve-2026-89317-gose-parsed-the-jws-crit-header-into-jwsheader-crit-and-then-never-read-it-rfc-7515-4-1-11-requires-a-recipient-to-reject-a-jws-whose-listed-critical-exte2026-10-23 https://bugrater.com/releases/cve-2026-89318-jwersakeyencryptiondecryptorimpl-decrypt-passed-the-jwe-s-initialization-vector-to-cipher-aead-open-without-checking-its-length-the-go-standard-library-p2026-10-23 https://bugrater.com/releases/cve-2026-89319-jwedirectdecryptorblock-decrypt-read-a-64-bit-plaintext-length-from-the-thales-aad-protected-header-field-and-used-it-without-any-validation-a-truncated-f2026-10-23 https://bugrater.com/releases/cve-2026-89320-hmacshacryptor-hash-never-hashed-its-input-for-any-input-it-returned-hmac-k-the-mac-of-the-empty-message-under-the-key-every-aes-cbc-hmac-jwe-produc2026-10-23 https://bugrater.com/releases/cve-2026-112333-gfi-archiver-before-15-14-contains-a-stored-cross-site-scripting-vulnerability-in-the-mailinsights-scheduled-report-configuration-that-allows-authenticated-atta2026-10-23 https://bugrater.com/releases/cve-2026-57845-hugging-face-datasets-through-5-1-0-contains-an-insecure-deserialization-vulnerability-that-allows-attackers-to-execute-arbitrary-python-code-by-crafting-a-mali2026-10-23 https://bugrater.com/releases/cve-2026-115810-tandoor-recipes-before-2-7-0-contains-a-server-side-request-forgery-vulnerability-in-the-pestle-importer-that-allows-authenticated-low-privileged-users-to-force2026-10-23 https://bugrater.com/releases/cve-2026-87901-improper-sanitization-in-the-registration-module-allows-reflected-cross-site-scripting2026-10-23 https://bugrater.com/releases/cve-2026-112342-tandoor-recipes-before-2-7-0-contains-an-improper-cache-key-design-in-cookbook-helper-permission-helper-py-that-allows-authenticated-users-to-retain-stale-group2026-10-23 https://bugrater.com/releases/cve-2026-91093-a-potential-security-vulnerability-has-been-identified-in-hp-one-agent-for-certain-hp-pc-products-which-might-allow-for-escalation-of-privilege2026-10-23 https://bugrater.com/releases/cve-2026-115796-a-security-flaw-has-been-discovered-in-tenda-f6-12-02-01-73-this-impacts-an-unknown-function-of-the-component-web-management-interface-performing-a-manipulati2026-10-23 https://bugrater.com/releases/cve-2026-115797-a-weakness-has-been-identified-in-tenda-f6-12-02-01-73-affected-is-an-unknown-function-of-the-component-web-management-interface-executing-a-manipulation-of-t2026-10-23 https://bugrater.com/releases/cve-2026-79981-the-dns-stub-resolver-in-subsys-net-lib-dns-resolve-c-binds-one-udp-socket-per-configured-server-when-the-resolver-context-is-initialised-dns-resolve-init-lock2026-10-23 https://bugrater.com/releases/cve-2026-115800-a-vulnerability-was-identified-in-ubiquitouslearning-mllm-up-to-2-0-2-the-affected-element-is-the-function-load-model-of-the-file-pymllm-mobile-convertor-ini2026-10-23 https://bugrater.com/releases/cve-2026-115801-a-security-flaw-has-been-discovered-in-kakao-khaiii-up-to-0-4-the-impacted-element-is-the-function-khaiii-nn-linear-open-of-the-file-src-main-cpp-khaiii-nn2026-10-23 https://bugrater.com/releases/cve-2026-115935-the-app-process-api-response-headers-action-accepts-fake-craft-api-response-headers-from-any-authenticated-control-panel-user-a-non-admin-user-with-only-acc2026-10-23 https://bugrater.com/releases/cve-2026-115937-the-mollie-webhook-endpoint-accepts-two-independent-attacker-controlled-parameters-and-never-verifies-that-they-belong-together-commercetransactionhash2026-10-23 https://bugrater.com/releases/cve-2026-115938-craft-cms-allows-any-authenticated-control-panel-user-to-submit-an-element-search-condition-whose-element-selector-is-evaluated-as-a-sandboxed-twig-object-templ2026-10-23 https://bugrater.com/releases/macos-sequoia-15-7-72026-10-24 https://bugrater.com/releases/macos-sonoma-14-8-72026-10-24 https://bugrater.com/releases/doccheck-basic-moderately-critical-access-bypass-sa-contrib-2026-2372026-10-24 https://bugrater.com/releases/bootstrap-moderately-critical-cross-site-scripting-sa-contrib-2026-2362026-10-24 https://bugrater.com/releases/view-unpublished-moderately-critical-access-bypass-sa-contrib-2026-2352026-10-24 https://bugrater.com/releases/uswds-paragraph-components-moderately-critical-cross-site-scripting-sa-contrib-2026-2342026-10-24 https://bugrater.com/releases/swiper-formatter-moderately-critical-information-disclosure-sa-contrib-2026-2332026-10-24 https://bugrater.com/releases/block-attributes-moderately-critical-cross-site-scripting-sa-contrib-2026-2322026-10-24 https://bugrater.com/releases/gora-transparency-theme-moderately-critical-information-disclosure-sa-contrib-2026-2312026-10-24 https://bugrater.com/releases/ui-icons-moderately-critical-cross-site-scripting-sa-contrib-2026-2302026-10-24 https://bugrater.com/releases/gdatasoftwareag-security-releases-october-20262026-10-24 https://bugrater.com/releases/gedelumbung-security-releases-october-20262026-10-24 https://bugrater.com/releases/geovision-inc-security-releases-october-20262026-10-24 https://bugrater.com/releases/ginlix-ai-security-releases-october-20262026-10-24 https://bugrater.com/releases/gitlab-security-releases-june-20252026-10-24 https://bugrater.com/releases/gitlab-security-releases-july-20252026-10-24 https://bugrater.com/releases/cve-2026-115931-postiz-lets-a-signed-in-user-ask-the-backend-to-run-a-function-on-one-of-their-connected-channels-the-backend-did-not-restrict-which-functions-can-be-requested2026-10-24 https://bugrater.com/releases/cve-2026-115806-the-prime-mover-backup-and-migration-plugin-for-wordpress-is-vulnerable-to-php-object-injection-in-all-versions-up-to-and-including-2-2-1-via-deserializatio2026-10-24 https://bugrater.com/releases/cve-2026-115807-the-user-profile-builder-beautiful-user-registration-forms-user-profiles-user-role-editor-plugin-for-wordpress-is-vulnerable-to-limited-privilege-escalatio2026-10-24 https://bugrater.com/releases/cve-2026-105199-the-pixel-tag-manager-for-woocommerce-wordpress-plugin-before-2-2-3-does-not-perform-a-capability-check-in-one-of-its-ajax-actions-and-exposes-the-nonce-prote2026-10-24 https://bugrater.com/releases/cve-2026-107887-the-advanced-twenty-seventeen-wordpress-plugin-through-1-3-1-does-not-perform-any-capability-or-nonce-check-on-the-action-that-creates-and-activates-its-bundled2026-10-24 https://bugrater.com/releases/cve-2026-107907-the-mas-videos-wordpress-plugin-through-1-3-4-does-not-perform-any-capability-or-ownership-check-when-handling-its-front-end-video-and-playlist-deletion-request2026-10-24 https://bugrater.com/releases/cve-2026-112207-the-download-monitor-wordpress-plugin-before-5-3-4-does-not-properly-validate-that-a-clicked-link-belongs-to-the-site-before-fetching-it-client-side-and-renderi2026-10-24 https://bugrater.com/releases/cve-2026-113489-the-geodirectory-wordpress-plugin-before-2-8-194-does-not-verify-that-a-referenced-attachment-belongs-to-the-listing-being-saved-allowing-users-with-subscribe2026-10-24 https://bugrater.com/releases/cve-2026-113490-the-geodirectory-wordpress-plugin-before-2-8-194-does-not-perform-any-status-or-ownership-check-when-rendering-a-listing-s-map-popup-through-one-of-its-single2026-10-24 https://bugrater.com/releases/cve-2026-113491-the-geodirectory-wordpress-plugin-before-2-8-194-does-not-validate-a-user-supplied-image-url-before-using-it-as-a-local-file-path-when-saving-a-front-end-listi2026-10-24 https://bugrater.com/releases/cve-2026-113492-the-geodirectory-wordpress-plugin-before-2-8-194-does-not-perform-status-ownership-or-password-checks-when-loading-listings-for-one-of-its-unauthenticated-aja2026-10-24 https://bugrater.com/releases/cve-2026-113493-the-geodirectory-wordpress-plugin-before-2-8-194-does-not-sanitise-and-escape-some-of-its-map-shortcode-attributes-before-outputting-them-within-a-style-attrib2026-10-24 https://bugrater.com/releases/cve-2026-113673-the-geodirectory-wordpress-plugin-before-2-8-194-does-not-properly-escape-administrator-defined-text-before-writing-it-into-a-generated-php-file-in-its-own-fol2026-10-24 https://bugrater.com/releases/cve-2026-113674-the-geodirectory-wordpress-plugin-before-2-8-194-does-not-correctly-verify-ownership-of-listings-submitted-by-logged-out-users-before-allowing-them-to-be-edite2026-10-24 https://bugrater.com/releases/cve-2026-114429-the-wpvr-wordpress-plugin-before-9-0-3-does-not-properly-sanitise-and-escape-some-of-its-tour-hotspot-content-before-storing-it-and-outputting-it-on-the-front2026-10-24 https://bugrater.com/releases/cve-2026-87835-the-front-end-users-wordpress-plugin-through-3-2-35-does-not-restrict-which-account-attributes-a-visitor-may-set-when-registering-through-its-front-end-forms-a2026-10-24 https://bugrater.com/releases/cve-2026-97352-the-news-kit-addons-for-elementor-wordpress-plugin-before-1-4-9-does-not-perform-a-capability-check-on-one-of-its-ajax-actions-allowing-authenticated-users-wit2026-10-24 https://bugrater.com/releases/cve-2026-97353-the-news-kit-addons-for-elementor-wordpress-plugin-through-1-4-7-does-not-perform-capability-or-ownership-checks-before-updating-post-metadata-in-one-of-its-aut2026-10-24 https://bugrater.com/releases/cve-2026-115802-a-weakness-has-been-identified-in-internscience-internagent-1-5-0-this-affects-the-function-train-of-the-file-tasks-autochem-code-experiment-py-of-the-componen2026-10-24 https://bugrater.com/releases/cve-2026-115803-a-flaw-has-been-found-in-scada-lts-2-8-0-affected-by-this-vulnerability-is-the-function-httpservletrequest-getparameter-of-the-file-amchartvaluesapi-java-of-th2026-10-24 https://bugrater.com/releases/cve-2026-110892-missing-authorization-vulnerability-in-brainstorm-force-suredash-suredash-allows-exploiting-incorrectly-configured-access-control-security-levels-this-issue-aff2026-10-24 https://bugrater.com/releases/cve-2026-111402-improper-neutralization-of-special-elements-used-in-an-sql-command-sql-injection-vulnerability-in-tribulant-software-newsletters-newsletters-lite-allows-sql2026-10-24 https://bugrater.com/releases/cve-2026-112844-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-vulnerability-in-arraytics-wp-event-solution-wp-event-solution-allows-store2026-10-24 https://bugrater.com/releases/cve-2026-112866-improper-neutralization-of-special-elements-used-in-an-sql-command-sql-injection-vulnerability-in-wpfactory-product-filter-by-wbw-woo-product-filter-allows2026-10-24 https://bugrater.com/releases/cve-2026-112869-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-vulnerability-in-noah-hearle-we-re-open-opening-hours-allows-reflected-xss2026-10-24 https://bugrater.com/releases/cve-2026-114178-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-vulnerability-in-bold-grid-w3-total-cache-w3-total-cache-allows-stored-xss2026-10-24 https://bugrater.com/releases/cve-2026-114179-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-vulnerability-in-wordplus-bp-better-messages-bp-better-messages-allows-dom2026-10-24 https://bugrater.com/releases/cve-2026-114190-insertion-of-sensitive-information-into-sent-data-vulnerability-in-hai-zheng-lite-speed-cache-litespeed-cache-litespeed-cache-allows-retrieve-embedded-sensiti2026-10-24 https://bugrater.com/releases/cve-2026-114196-deserialization-of-untrusted-data-vulnerability-in-paytiumsupport-paytium-paytium-allows-object-injection-this-issue-affects-paytium-from-n-a-through-5-0-52026-10-24 https://bugrater.com/releases/cve-2026-114693-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-vulnerability-in-plugins360-labs-all-in-one-video-gallery-all-in-one-video2026-10-24 https://bugrater.com/releases/cve-2026-114694-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-vulnerability-in-pixelite-events-manager-events-manager-allows-reflected-xs2026-10-24 https://bugrater.com/releases/cve-2026-114695-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-vulnerability-in-infomaniak-network-vod-infomaniak-vod-infomaniak-allows-st2026-10-24 https://bugrater.com/releases/cve-2026-114697-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-vulnerability-in-quarka-qa-analytics-qa-heatmap-analytics-allows-stored-xss2026-10-24 https://bugrater.com/releases/cve-2026-115975-broken-access-control-in-jiracontroller-in-cervantes-version-v1-3-beta-could-allow-an-attacker-to-create-edit-or-delete-jira-tickets-for-vulnerabilities-in-ot2026-10-24 https://bugrater.com/releases/cve-2026-94075-deserialization-of-untrusted-data-vulnerability-in-tribulant-software-newsletters-newsletters-lite-allows-object-injection-this-issue-affects-newsletters-from2026-10-24 https://bugrater.com/releases/cve-2026-115993-stored-xss-vulnerability-in-the-notes-field-of-the-checklists-in-cervantes-version-v1-3-beta-could-allow-an-attacker-to-execute-arbitrary-code-in-another-user2026-10-24 https://bugrater.com/releases/cve-2026-114194-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-vulnerability-in-igor-funa-ad-inserter-ad-inserter-allows-reflected-xss-thi2026-10-24 https://bugrater.com/releases/cve-2026-114705-missing-authorization-vulnerability-in-quadlayers-wp-social-feed-gallery-insta-gallery-allows-exploiting-incorrectly-configured-access-control-security-levels-t2026-10-24 https://bugrater.com/releases/cve-2026-115994-bola-allows-cross-project-target-tampering-in-cervantes-version-v1-3-beta-could-allow-an-attacker-modify-or-delete-targets-belonging-to-other-projects-without2026-10-24 https://bugrater.com/releases/cve-2026-115998-idor-in-cervantes-version-v1-3-beta-could-allow-an-authenticated-attacker-ca-access-sensitive-findings-proof-of-concept-details-credentials-and-client-inform2026-10-24 https://bugrater.com/releases/ggml-org-security-releases-october-20262026-10-24 https://bugrater.com/releases/red-hat-security-releases-february-20242026-10-24 https://bugrater.com/releases/wealcoder-security-releases-june-20262026-10-24 https://bugrater.com/releases/sodola-security-releases-october-20262026-10-24 https://bugrater.com/releases/curl-security-releases-december-20242026-10-24 https://bugrater.com/releases/linux-security-releases-january-20242026-10-24 https://bugrater.com/releases/curl-security-releases-march-20242026-10-24 https://bugrater.com/releases/cve-2026-110018-the-ablocks-gutenberg-blocks-user-dashboard-builder-popup-builder-form-builder-animation-builder-plugin-for-wordpress-is-vulnerable-to-privilege-escalati2026-10-24 https://bugrater.com/releases/cve-2026-116008-daybydaycrm-through-2-2-1-contains-a-missing-authorization-vulnerability-in-projectscontroller-updateassign-that-allows-any-authenticated-user-to-reassign-pr2026-10-24 https://bugrater.com/releases/cve-2026-116009-camaleon-cms-before-2-9-3-contains-a-path-traversal-vulnerability-that-allows-users-with-only-the-media-permission-to-write-arbitrary-files-by-supplying-seq2026-10-24 https://bugrater.com/releases/cve-2026-116010-rosariosis-before-12-9-1-contains-a-missing-authorization-vulnerability-that-allows-authenticated-teachers-to-write-records-for-students-outside-their-course-pe2026-10-24 https://bugrater.com/releases/cve-2026-116011-crow-before-1-3-4-contains-an-uncontrolled-recursion-vulnerability-in-crow-json-load-that-allows-remote-unauthenticated-attackers-to-crash-the-server-by-sen2026-10-24 https://bugrater.com/releases/cve-2026-116012-ghidra-before-12-2-contains-a-numeric-truncation-vulnerability-in-packeddecode-skipattribute-and-skipattributeremaining-in-marshal-cc-that-stores-64-bit-string2026-10-24 https://bugrater.com/releases/cve-2026-116013-openresty-lua-resty-dns-before-0-24-contains-an-improper-input-validation-vulnerability-in-parse-section-and-decode-name-that-fails-to-check-resource-recor2026-10-24 https://bugrater.com/releases/cve-2026-116014-open62541-1-5-0-before-1-5-7-contains-an-integer-overflow-in-ua-datatype-fromstructuredescription-that-wraps-the-16-bit-memsize-field-for-large-custom-structu2026-10-24 https://bugrater.com/releases/cve-2026-116015-yudao-cloud-through-2026-09-contains-an-insecure-direct-object-reference-vulnerability-in-the-mall-trade-module-that-allows-authenticated-members-to-read-other2026-10-24 https://bugrater.com/releases/cve-2026-116016-yudao-cloud-through-2026-09-contains-an-authorization-bypass-vulnerability-that-allows-authenticated-users-to-evade-row-level-data-scope-restrictions-by-sending2026-10-24 https://bugrater.com/releases/cve-2026-116017-xiaozhi-esp32-server-before-0-9-8-contains-an-insecure-direct-object-reference-vulnerability-in-the-manager-api-devicecontroller-getaddressbook-handler-that-all2026-10-24 https://bugrater.com/releases/cve-2026-116018-onearmy-community-platform-before-2-165-2-contains-an-insecure-direct-object-reference-vulnerability-that-allows-authenticated-users-to-mark-other-users-notifi2026-10-24 https://bugrater.com/releases/cve-2026-116019-grav-2-0-15-before-2-2-13-contains-an-allowlist-bypass-vulnerability-that-allows-page-editors-to-invoke-arbitrary-public-static-methods-by-relocating-data-di2026-10-24 https://bugrater.com/releases/cve-2026-116020-bookstack-before-26-09-2-contains-an-incorrect-authorization-vulnerability-in-attachmentcontroller-that-allows-authenticated-users-to-access-other-users-draft2026-10-24 https://bugrater.com/releases/cve-2026-115932-when-a-post-is-published-postiz-treats-a-media-path-that-is-not-a-web-address-as-a-file-on-the-server-s-disk-but-it-does-not-check-that-the-file-lies-inside-t2026-10-24 https://bugrater.com/releases/cve-2026-114191-missing-authorization-vulnerability-in-knit-pay-upi-qr-code-payment-gateway-for-woocommerce-upi-qr-code-payment-for-woocommerce-allows-exploiting-incorrectly-co2026-10-24 https://bugrater.com/releases/cve-2026-114192-missing-authorization-vulnerability-in-magepeople-inc-wpevently-mage-eventpress-allows-exploiting-incorrectly-configured-access-control-security-levels-this-is2026-10-24 https://bugrater.com/releases/cve-2026-114704-deserialization-of-untrusted-data-vulnerability-in-christoph-vielgrader-relevanssi-relevanssi-allows-object-injection-this-issue-affects-relevanssi-from-n-a2026-10-24 https://bugrater.com/releases/cve-2026-115933-postiz-signs-its-session-invitation-and-password-reset-tokens-with-one-shared-secret-and-without-any-marker-of-what-a-token-is-for-a-route-that-refreshes-the2026-10-24 https://bugrater.com/releases/the-gnu-c-library-security-releases-april-20242026-10-24 https://bugrater.com/releases/ietf-security-releases-july-20242026-10-24 https://bugrater.com/releases/cve-2026-115969-a-flaw-has-been-found-in-travisun-opptrix-0-4-0-this-affects-an-unknown-function-of-the-file-api-auth-setup-of-the-component-schedule-api-this-manipulation-c2026-10-24 https://bugrater.com/releases/cve-2026-115970-a-vulnerability-has-been-found-in-travisun-opptrix-0-4-0-this-impacts-an-unknown-function-of-the-file-api-system-update-import-of-the-component-import-endpoin2026-10-24 https://bugrater.com/releases/cve-2026-115971-a-vulnerability-was-found-in-travisun-opptrix-0-4-0-affected-is-the-function-buffer-concat-of-the-file-api-channels-webhook-of-the-component-preparsing-handl2026-10-24 https://bugrater.com/releases/cve-2026-115972-a-vulnerability-was-determined-in-faveosuite-faveo-helpdesk-up-to-2-0-3-affected-by-this-vulnerability-is-the-function-unauthcontroller-changestatus-unauthcont2026-10-24 https://bugrater.com/releases/cve-2026-115973-a-vulnerability-was-identified-in-faveosuite-faveo-helpdesk-2-0-3-affected-by-this-issue-is-the-function-forgotpasswordcontroller-sendresetlinkemail-passwordc2026-10-24 https://bugrater.com/releases/openssl-security-releases-june-20242026-10-25 https://bugrater.com/releases/openssl-security-releases-september-20242026-10-25 https://bugrater.com/releases/red-hat-security-releases-july-20242026-10-25 https://bugrater.com/releases/curl-security-releases-july-20242026-10-25 https://bugrater.com/releases/curl-security-releases-september-20242026-10-25 https://bugrater.com/releases/openssl-security-releases-october-20242026-10-25 https://bugrater.com/releases/jxxghp-security-releases-october-20262026-10-25 https://bugrater.com/releases/curl-security-releases-february-20252026-10-25 https://bugrater.com/releases/the-gnu-c-library-security-releases-january-20252026-10-25 https://bugrater.com/releases/gnu-security-releases-september-20252026-10-25 https://bugrater.com/releases/gnu-security-releases-october-20252026-10-25 https://bugrater.com/releases/openssl-security-releases-january-20262026-10-25 https://bugrater.com/releases/openanolis-security-releases-february-20252026-10-25 https://bugrater.com/releases/sqlite-security-releases-april-20252026-10-25 https://bugrater.com/releases/sector-distribution-moderately-critical-cross-site-scripting-sa-contrib-2026-2292026-10-25 https://bugrater.com/releases/swiper-formatter-moderately-critical-cross-site-scripting-sa-contrib-2026-2282026-10-25 https://bugrater.com/releases/dopup-critical-information-disclosure-sa-contrib-2026-2272026-10-25 https://bugrater.com/releases/csv-field-moderately-critical-cross-site-scripting-sa-contrib-2026-2262026-10-25 https://bugrater.com/releases/custom-formatters-critical-remote-code-execution-sa-contrib-2026-2252026-10-25 https://bugrater.com/releases/abc-critical-cross-site-scripting-sa-contrib-2026-2242026-10-25 https://bugrater.com/releases/black-hole-critical-cross-site-scripting-sa-contrib-2026-2232026-10-25 https://bugrater.com/releases/zero-point-critical-cross-site-scripting-sa-contrib-2026-2222026-10-25 https://bugrater.com/releases/cve-2026-115981-a-security-vulnerability-has-been-detected-in-phpipam-up-to-1-8-3-affected-by-this-vulnerability-is-an-unknown-functionality-of-the-file-upgrade-index-php-suc2026-10-25 https://bugrater.com/releases/cve-2026-115982-a-vulnerability-was-detected-in-phpipam-up-to-1-8-3-affected-by-this-issue-is-the-function-create-rack-link-of-the-file-app-tools-racks-show-rack-popup-php-of2026-10-25 https://bugrater.com/releases/cve-2026-115995-a-security-vulnerability-has-been-detected-in-unitree-robotics-unitree-go2-up-to-1-1-11-4-the-impacted-element-is-the-function-set-volume-of-the-file-gpt-threa2026-10-25 https://bugrater.com/releases/cve-2026-115996-a-vulnerability-was-detected-in-unitree-robotics-unitree-go2-up-to-1-1-13-1-1-14-1-1-1-15-1-this-affects-the-function-websocketclient-connect-of-the-file-webso2026-10-25 https://bugrater.com/releases/cve-2026-115997-a-flaw-has-been-found-in-pig-mesh-pig-up-to-4-1-0-this-impacts-the-function-orderitem-getcolumn-of-the-file-pig-common-pig-common-data-src-main-java-com-pig4cl2026-10-25 https://bugrater.com/releases/gitlab-security-releases-august-20252026-10-25 https://bugrater.com/releases/gitlab-security-releases-september-20252026-10-25 https://bugrater.com/releases/gitlab-security-releases-october-20252026-10-25 https://bugrater.com/releases/gitlab-security-releases-november-20252026-10-25 https://bugrater.com/releases/gitlab-security-releases-december-20252026-10-25 https://bugrater.com/releases/gitlab-security-releases-january-20262026-10-25 https://bugrater.com/releases/gitlab-security-releases-february-20262026-10-25 https://bugrater.com/releases/gitlab-security-releases-march-20262026-10-25 https://bugrater.com/releases/gitlab-security-releases-april-20262026-10-25 https://bugrater.com/releases/gitlab-security-releases-may-20262026-10-25 https://bugrater.com/releases/cve-2026-115999-a-vulnerability-has-been-found-in-mansi-k-restaurant-ims-d7ad49f61ab7cc1ec6eb359ac2b5378bdbde0694-affected-is-the-function-mysqli-connect-of-the-file-lsmodal-p2026-10-25 https://bugrater.com/releases/cve-2026-116000-a-security-flaw-has-been-discovered-in-zylon-privategpt-1-0-0-1-0-1-this-vulnerability-affects-the-function-load-file-from-uri-of-the-file-private-gpt-server-i2026-10-25 https://bugrater.com/releases/cve-2026-116004-a-security-vulnerability-has-been-detected-in-onyx-dot-app-onyx-up-to-5-0-0-impacted-is-an-unknown-function-of-the-file-web-src-app-craft-components-output-pan2026-10-25 https://bugrater.com/releases/msrc-cve-2026-1119432026-10-25 https://bugrater.com/releases/cve-2026-116006-a-vulnerability-was-detected-in-yunaiv-zhijiantianya-ruoyi-vue-pro-up-to-2026-09-the-affected-element-is-an-unknown-function-of-the-file-authcontroller-java-of2026-10-25 https://bugrater.com/releases/cve-2026-116007-a-flaw-has-been-found-in-yunaiv-zhijiantianya-ruoyi-vue-pro-up-to-2026-09-the-impacted-element-is-the-function-smscodeserviceimpl-validatesmscode0-of-the-file2026-10-25 https://bugrater.com/releases/gnu-security-releases-april-20252026-10-25 https://bugrater.com/releases/gnu-security-releases-may-20252026-10-25 https://bugrater.com/releases/sqlite-security-releases-july-20252026-10-25 https://bugrater.com/releases/sqlite-security-releases-june-20262026-10-25 https://bugrater.com/releases/gnu-security-releases-july-20252026-10-25 https://bugrater.com/releases/openssl-security-releases-september-20252026-10-25 https://bugrater.com/releases/palo-alto-networks-security-releases-may-20262026-10-25 https://bugrater.com/releases/palo-alto-networks-security-releases-june-20262026-10-25 https://bugrater.com/releases/palo-alto-networks-security-releases-july-20262026-10-25 https://bugrater.com/releases/palo-alto-networks-security-releases-august-20262026-10-25 https://bugrater.com/releases/palo-alto-networks-security-releases-september-20262026-10-25 https://bugrater.com/releases/openssl-security-releases-april-20262026-10-25 https://bugrater.com/releases/cve-2025-15705-the-contact-form-by-supsystic-wordpress-plugin-before-1-8-0-does-not-sanitise-and-escape-a-form-name-allowing-users-with-access-to-the-form-editor-to-inject-a2026-10-25 https://bugrater.com/releases/cve-2026-110285-the-wp-stripe-checkout-wordpress-plugin-before-1-2-2-62-does-not-verify-the-stripe-webhook-signature-when-no-signing-secret-is-configured-which-is-its-default2026-10-25 https://bugrater.com/releases/cve-2026-111976-the-givewp-wordpress-plugin-before-4-19-0-1-does-not-perform-any-status-or-capability-check-when-rendering-a-donation-form-on-a-public-front-end-route-allowin2026-10-25 https://bugrater.com/releases/cve-2026-111978-the-givewp-wordpress-plugin-before-4-19-0-1-does-not-properly-validate-a-user-supplied-filename-before-reading-it-from-disk-allowing-users-with-a-high-privile2026-10-25 https://bugrater.com/releases/cve-2026-111979-the-givewp-wordpress-plugin-before-4-19-0-1-does-not-properly-sanitise-and-escape-one-of-its-donation-form-template-settings-before-outputting-it-inside-an-htm2026-10-25 https://bugrater.com/releases/cve-2026-111980-the-givewp-wordpress-plugin-before-4-19-0-1-does-not-correctly-determine-which-page-a-page-capability-request-applies-to-allowing-users-with-a-custom-fundrais2026-10-25 https://bugrater.com/releases/cve-2026-111981-the-givewp-wordpress-plugin-before-4-19-0-1-does-not-perform-a-capability-check-when-handling-donor-address-changes-allowing-users-who-have-been-granted-donor2026-10-25 https://bugrater.com/releases/cve-2026-114740-the-wpvr-wordpress-plugin-before-9-1-3-does-not-correctly-check-user-capabilities-when-creating-a-tour-through-its-setup-wizard-allowing-users-with-the-contri2026-10-25 https://bugrater.com/releases/cve-2026-114741-the-wpvr-wordpress-plugin-before-9-0-3-does-not-perform-object-level-authorization-checks-when-reading-and-updating-virtual-tours-allowing-users-with-contribu2026-10-25 https://bugrater.com/releases/cve-2026-114742-the-wpvr-wordpress-plugin-before-9-0-3-does-not-perform-object-level-ownership-checks-when-updating-virtual-tours-allowing-users-with-contributor-level-access2026-10-25 https://bugrater.com/releases/cve-2026-114743-the-instawp-connect-wordpress-plugin-before-0-1-4-2-does-not-perform-a-capability-check-on-its-instawp-connect-wordpress-plugin-before-0-1-4-2-settings-update2026-10-25 https://bugrater.com/releases/cve-2026-115183-the-qi-addons-for-elementor-wordpress-plugin-before-1-11-2-does-not-properly-sanitise-a-widget-s-heading-text-after-decoding-html-entities-in-it-allowing-users2026-10-25 https://bugrater.com/releases/cve-2026-115214-the-datawiza-proxy-auth-plugin-wordpress-plugin-before-1-1-1-does-not-verify-that-the-user-identity-and-role-http-request-headers-it-trusts-originate-from-a-tr2026-10-25 https://bugrater.com/releases/cve-2026-115251-the-duplicator-wordpress-plugin-before-5-0-0-does-not-restrict-its-one-click-upgrade-routine-to-users-allowed-to-install-duplicator-wordpress-plugin-before-52026-10-25 https://bugrater.com/releases/cve-2026-116044-a-security-vulnerability-has-been-detected-in-prasathmani-tinyfilemanager-up-to-2-6-affected-by-this-issue-is-some-unknown-functionality-of-the-file-tinyfilema2026-10-25 https://bugrater.com/releases/cve-2026-94295-the-chikkili-google-pay-india-for-woocommerce-wordpress-plugin-through-1-0-6-does-not-verify-that-a-payment-notification-actually-originated-from-the-payment-p2026-10-25 https://bugrater.com/releases/cve-2026-116045-a-vulnerability-was-detected-in-1999azzar-designer-mcp-up-to-2-1-0-this-affects-the-function-get-reference-of-the-file-skills-motion-designer-references-motion2026-10-25 https://bugrater.com/releases/cve-2026-116046-a-flaw-has-been-found-in-eventcatalog-sdk-up-to-2-29-0-this-vulnerability-affects-the-function-getcustomdoc-writecustomdoc-rmcustomdoc-of-the-file-packages-sdk2026-10-25 https://bugrater.com/releases/cve-2026-116047-a-vulnerability-has-been-found-in-privoce-vocechat-up-to-0-9-121-this-issue-affects-some-unknown-processing-of-the-file-widget-html-of-the-component-query-para2026-10-25 https://bugrater.com/releases/cve-2026-116048-a-vulnerability-was-detected-in-krupalshah-employeerecruitmentsystem-up-to-922ff6d208278282e7c8e36d70d9ae356adec9fe-affected-by-this-vulnerability-is-the-funct2026-10-25 https://bugrater.com/releases/cve-2026-116049-a-flaw-has-been-found-in-krupalshah-employeerecruitmentsystem-up-to-922ff6d208278282e7c8e36d70d9ae356adec9fe-affected-by-this-issue-is-the-function-mysql-query2026-10-25 https://bugrater.com/releases/cve-2026-116050-a-vulnerability-has-been-found-in-krupalshah-employee-recruitment-system-up-to-922ff6d208278282e7c8e36d70d9ae356adec9fe-this-affects-an-unknown-part-of-the-fil2026-10-25 https://bugrater.com/releases/nozomi-networks-security-releases-september-20262026-10-25 https://bugrater.com/releases/ubuntu-security-releases-march-20262026-10-25 https://bugrater.com/releases/the-gnu-c-library-security-releases-march-20262026-10-25 https://bugrater.com/releases/cve-2026-116066-firecrawl-before-2-11-586-contains-a-server-side-request-forgery-vulnerability-in-the-playwright-service-ssrf-proxy-that-allows-attackers-to-bypass-isinternalho2026-10-25 https://bugrater.com/releases/cve-2026-116067-paisa-before-0-7-8-contains-a-path-traversal-vulnerability-in-the-getfile-getsheet-deletebackups-and-deletesheetbackups-handlers-that-lets-unauthenticated-at2026-10-25 https://bugrater.com/releases/cve-2026-116068-dokploy-through-0-30-10-contains-an-authorization-bypass-vulnerability-that-allows-owners-or-admins-of-any-organization-to-control-other-tenants-applications-b2026-10-25 https://bugrater.com/releases/cve-2026-116069-niubigeo-before-0-3-2-contains-an-unauthenticated-server-side-request-forgery-vulnerability-that-allows-remote-attackers-to-make-the-server-fetch-internal-addre2026-10-25 https://bugrater.com/releases/cve-2026-116070-docker-proxy-through-5-1-9-contains-a-missing-authentication-vulnerability-in-the-hubcmdui-routes-config-js-that-allows-unauthenticated-attackers-to-read-and-ov2026-10-25 https://bugrater.com/releases/cve-2026-116071-rotki-before-1-44-2-contains-a-weak-key-derivation-vulnerability-that-allows-attackers-to-brute-force-backups-because-the-premium-sync-key-is-a-single-unsalted2026-10-25 https://bugrater.com/releases/cve-2026-116072-infinity-for-reddit-through-8-3-4-contains-a-login-cross-site-request-forgery-vulnerability-that-allows-attackers-to-log-victims-into-an-attacker-controlled-acc2026-10-25 https://bugrater.com/releases/cve-2026-116073-leon-before-commit-50df142-contains-a-path-traversal-vulnerability-in-getmodelfilenamefromurl-that-allows-attackers-to-write-files-outside-the-models-director2026-10-25 https://bugrater.com/releases/cve-2026-116136-projectsend-2-0-0-through-2-7-1-contains-an-incomplete-authorization-vulnerability-in-fileversions-link-that-allows-staff-users-to-share-files-without-author2026-10-25 https://bugrater.com/releases/cve-2026-116137-adm-zip-through-0-6-1-contains-a-duplicate-entry-validation-bypass-that-allows-attackers-to-evade-the-readentries-check-by-using-canonically-equivalent-entry2026-10-25 https://bugrater.com/releases/cve-2026-116052-a-security-flaw-has-been-discovered-in-linkstackorg-linkstack-up-to-4-8-8-the-affected-element-is-an-unknown-function-performing-a-manipulation-results-in-cro2026-10-25 https://bugrater.com/releases/cve-2026-116140-imagemagick-before-6-9-13-58-and-7-x-before-7-1-2-33-incorrectly-parses-delegate-invocations-which-can-allow-an-executable-blocked-in-policy-xml-to-still-run2026-10-25 https://bugrater.com/releases/cve-2026-116141-imagemagick-before-7-1-2-33-contains-a-policy-bypass-vulnerability-in-the-uhdr-decoder-that-allows-attackers-to-evade-image-width-and-height-limits-because-exte2026-10-25 https://bugrater.com/releases/cve-2026-116142-imagemagick-before-7-1-2-33-contains-a-heap-buffer-over-read-vulnerability-that-allows-attackers-to-read-beyond-allocated-memory-when-printing-a-minimum-boundin2026-10-25 https://bugrater.com/releases/cve-2026-116143-imagemagick-before-6-9-13-58-and-7-x-before-7-1-2-33-contains-a-policy-bypass-in-the-ps-pdf-and-xps-decoders-that-allows-the-security-policy-s-list-length-limi2026-10-25 https://bugrater.com/releases/cve-2026-116144-imagemagick-before-6-9-13-58-and-7-x-before-7-1-2-33-contains-uncontrolled-recursion-in-the-mvg-decoder-that-can-lead-to-a-stack-overflow-attackers-can-supply2026-10-25 https://bugrater.com/releases/cve-2026-116145-imagemagick-before-6-9-13-58-and-7-x-before-7-1-2-32-contains-a-security-policy-bypass-caused-by-an-incomplete-fix-for-the-policy-bypass-reported-in-ghsa-jjp4-32026-10-25 https://bugrater.com/releases/cve-2026-116146-imagemagick-before-6-9-13-58-and-7-x-before-7-1-2-33-contains-a-memory-leak-in-the-msl-decoder-that-fails-to-release-allocated-memory-when-processing-a-crafted2026-10-25 https://bugrater.com/releases/cve-2026-116147-imagemagick-before-6-9-13-58-and-7-x-before-7-1-2-33-contains-a-null-pointer-dereference-in-the-djvu-decoder-because-the-result-of-a-memory-allocation-is-not-ch2026-10-25 https://bugrater.com/releases/cve-2026-116148-imagemagick-before-6-9-13-58-and-7-x-before-7-1-2-33-contains-an-injection-vulnerability-in-the-mvg-encoder-which-does-not-properly-neutralize-user-specified-d2026-10-25 https://bugrater.com/releases/cve-2026-116149-imagemagick-before-6-9-13-58-and-7-x-before-7-1-2-33-contains-a-stack-based-buffer-overflow-in-the-handling-of-bzip2-compressed-images-attackers-can-supply-a-c2026-10-25 https://bugrater.com/releases/cve-2026-116152-imagemagick-before-7-1-2-33-contains-a-memory-leak-vulnerability-in-the-mat-decoder-that-fails-to-release-allocated-memory-in-a-specific-error-path-attackers-c2026-10-25 https://bugrater.com/releases/cve-2026-116153-imagemagick-before-7-1-2-33-contains-a-heap-buffer-overflow-vulnerability-on-32-bit-systems-that-allows-attackers-to-overwrite-heap-memory-when-convex-hull-info2026-10-25 https://bugrater.com/releases/cve-2026-116154-imagemagick-before-6-9-13-58-and-7-x-before-7-1-2-33-contains-a-memory-leak-in-its-xml-parsing-code-where-allocated-memory-is-not-released-when-parsing-reaches2026-10-25 https://bugrater.com/releases/cve-2026-116155-imagemagick-before-6-9-13-58-and-7-x-before-7-1-2-33-contains-a-memory-leak-in-the-handling-of-xmp-profiles-by-various-decoders-attackers-can-supply-images-wit2026-10-25 https://bugrater.com/releases/cve-2026-116156-imagemagick-before-6-9-13-58-and-7-x-before-7-1-2-33-contains-a-memory-leak-caused-by-a-missing-cleanup-when-the-set-profile-option-is-used-an-attacker-who-in2026-10-25 https://bugrater.com/releases/cve-2026-116159-imagemagick-before-6-9-13-58-and-7-x-before-7-1-2-33-contains-a-memory-leak-in-the-handling-of-the-cdl-color-decision-list-option-where-allocated-memory-is2026-10-25 https://bugrater.com/releases/cve-2026-116160-imagemagick-before-6-9-13-58-and-7-x-before-7-1-2-33-contains-a-heap-based-buffer-overflow-in-the-x11-animate-operation-when-processing-crafted-images-attacker2026-10-25 https://bugrater.com/releases/cve-2026-116165-parse-server-before-8-6-101-and-9-0-0-before-9-10-4-alpha-4-contains-a-missing-authorization-vulnerability-on-mongodb-deployments-that-lets-clients-without-the2026-10-25 https://bugrater.com/releases/cve-2026-116166-siyuan-3-6-0-before-3-8-7-accepts-and-persists-the-networkservetls-setting-but-never-enforces-it-so-the-kernel-port-keeps-serving-full-api-access-over-plain-ht2026-10-25 https://bugrater.com/releases/cve-2026-116167-siyuan-from-2-9-0-before-3-8-7-contains-a-cross-site-scripting-vulnerability-in-the-unauthenticated-check-auth-page-that-assigns-the-to-parameter-to-window-loc2026-10-25 https://bugrater.com/releases/cve-2026-116168-siyuan-before-3-8-7-contains-a-path-traversal-vulnerability-in-the-mcp-asset-tool-because-validateassetuploadpaths-relies-on-an-incomplete-sensitive-path-blackl2026-10-25 https://bugrater.com/releases/cve-2026-116169-siyuan-from-2-10-0-before-3-8-7-contains-a-stored-cross-site-scripting-vulnerability-that-allows-users-with-edit-permission-to-inject-script-by-placing-javascri2026-10-25 https://bugrater.com/releases/cve-2026-116170-siyuan-before-v3-8-7-contains-an-sql-injection-vulnerability-that-allows-admin-token-holders-to-read-history-db-by-injecting-unescaped-op-and-type-3-query-value2026-10-25 https://bugrater.com/releases/cve-2026-116171-siyuan-3-5-4-before-3-8-7-on-windows-contains-a-sensitive-path-denylist-bypass-in-issensitivepath-because-the-windows-extended-length-prefix-survives-fil2026-10-25 https://bugrater.com/releases/cve-2026-116172-vllm-from-0-22-0-before-0-24-0-contains-an-improper-input-validation-vulnerability-in-the-rust-grpc-converter-that-allows-remote-attackers-to-bypass-max-logprob2026-10-25 https://bugrater.com/releases/cve-2026-116173-vllm-from-0-22-0-before-0-24-0-contains-a-denial-of-service-vulnerability-that-allows-remote-attackers-to-terminate-enginecore-by-bypassing-logprob-token-ids-li2026-10-25 https://bugrater.com/releases/cve-2026-116174-vllm-from-0-22-0-before-0-24-0-contains-an-improper-input-validation-vulnerability-in-the-rust-grpc-generate-and-generatestream-service-that-forwards-unchecked2026-10-25 https://bugrater.com/releases/cve-2026-116175-vllm-from-0-19-0-before-0-24-0-contains-a-decompression-bomb-vulnerability-because-the-audiomediaio-multimodal-path-calls-load-audio-without-the-max-duration-s2026-10-25 https://bugrater.com/releases/cve-2026-116176-vllm-from-0-9-2-before-0-24-0-contains-a-server-side-request-forgery-vulnerability-that-allows-api-callers-to-force-outbound-connections-by-embedding-a-decode-a2026-10-25 https://bugrater.com/releases/cve-2026-116177-vllm-from-0-10-2-before-0-25-0-contains-an-uncontrolled-resource-consumption-vulnerability-that-allows-unauthenticated-attackers-to-exhaust-memory-because-the-n2026-10-25 https://bugrater.com/releases/cve-2026-116178-vllm-from-0-20-0-before-0-30-0-contains-a-denial-of-service-vulnerability-that-allows-remote-attackers-to-crash-the-engine-by-sending-inconsistent-multimodal-me2026-10-25 https://bugrater.com/releases/cve-2026-116179-vllm-from-0-18-0-before-0-31-0-contains-a-resource-exhaustion-vulnerability-that-allows-api-clients-to-bypass-the-video-jpeg-frame-count-cap-by-overriding-num-f2026-10-25 https://bugrater.com/releases/cve-2026-116180-vllm-from-0-8-5-before-0-31-0-has-a-denial-of-service-flaw-logprobstensors-empty-cpu-in-vllm-v1-outputs-py-allocates-an-uninitialized-int32-tensor-and-the-v2026-10-25 https://bugrater.com/releases/cve-2026-116181-vllm-from-0-20-1-before-0-29-0-contains-an-improper-input-validation-vulnerability-that-allows-remote-attackers-to-crash-the-engine-by-supplying-out-of-vocabula2026-10-25 https://bugrater.com/releases/cve-2026-116182-phpmyfaq-before-4-1-10-contains-a-server-side-request-forgery-vulnerability-in-the-pdf-export-feature-that-fetches-external-images-referenced-in-faq-answers-at2026-10-25 https://bugrater.com/releases/cve-2026-116184-openremote-before-1-31-0-contains-an-authorization-bypass-vulnerability-that-allows-realm-admins-to-impersonate-gateways-in-other-realms-because-gatewayservice2026-10-25 https://bugrater.com/releases/cve-2026-116185-openremote-core-before-1-31-0-contains-an-authorization-bypass-vulnerability-that-allows-authenticated-users-to-read-other-realms-gateway-tunnel-information-vi2026-10-25 https://bugrater.com/releases/cve-2026-116186-openremote-core-openremote-manager-before-1-31-0-does-not-perform-realm-or-gateway-descendant-authorization-on-inbound-edge-gateway-events-and-maps-event-asse2026-10-25 https://bugrater.com/releases/cve-2026-116187-rclone-from-v1-68-0-before-v1-75-2-contains-an-authorization-bypass-vulnerability-in-serve-s3-auth-proxy-that-allows-authenticated-tenants-to-manipulate-other2026-10-25 https://bugrater.com/releases/cve-2026-116188-rclone-serve-s3-versions-1-75-0-before-1-75-2-contain-an-integer-overflow-vulnerability-in-multipart-reorder-memory-accounting-that-bypasses-the-configured-buff2026-10-25 https://bugrater.com/releases/cve-2026-116189-rclone-from-1-55-0-before-1-75-2-contains-a-signature-verification-bypass-in-stable-selfupdate-that-trusts-checksums-from-unsigned-bytes-preceding-the-pgp-clear2026-10-25 https://bugrater.com/releases/cve-2026-116190-rclone-from-v1-56-0-before-v1-75-2-contains-an-information-disclosure-vulnerability-in-the-webdav-backend-that-forwards-operator-configured-custom-credential-he2026-10-25 https://bugrater.com/releases/cve-2026-116191-rclone-before-1-75-2-contains-a-path-traversal-vulnerability-in-serve-webdav-that-allows-unauthenticated-attackers-to-write-above-the-served-root-by-sending-an2026-10-25 https://bugrater.com/releases/cve-2026-116192-rclone-from-1-37-before-1-74-2-contains-a-server-side-request-forgery-vulnerability-that-allows-unauthenticated-attackers-to-redirect-http-and-netstorage-backen2026-10-25 https://bugrater.com/releases/cve-2026-116193-rclone-from-1-64-0-before-1-75-2-contains-an-authentication-bypass-vulnerability-in-serve-webdav-that-lets-unauthenticated-attackers-skip-authentication-by-send2026-10-25 https://bugrater.com/releases/cve-2026-116194-rclone-from-1-52-0-before-1-75-2-contains-a-cross-site-request-forgery-vulnerability-in-the-pcloud-backend-s-localhost-oauth-callback-which-disables-the-state2026-10-25 https://bugrater.com/releases/cve-2026-116195-rclone-before-1-75-2-contains-a-path-traversal-vulnerability-in-the-local-backend-s-translatelink-function-which-trims-the-rclonelink-suffix-from-a-path-after2026-10-25 https://bugrater.com/releases/cve-2026-116196-rclone-before-v1-75-2-contains-a-credential-exposure-vulnerability-in-the-b2-backend-that-leaks-the-live-account-authorization-token-and-sse-c-keys-on-http-redi2026-10-25 https://bugrater.com/releases/cve-2026-116198-snipe-it-before-8-7-0-contains-a-missing-encryption-vulnerability-in-api-assetscontroller-store-that-writes-plaintext-into-encrypted-flagged-custom-field-colum2026-10-25 https://bugrater.com/releases/cve-2026-116199-snipe-it-before-8-6-3-contains-an-authentication-bypass-in-googleauthcontroller-handlegooglecallback-which-logs-in-the-user-whose-username-matches-the-google2026-10-25 https://bugrater.com/releases/cve-2026-116200-snipe-it-before-8-6-3-ignores-the-ldap-start-tls-return-value-in-ldap-connecttoldap-allowing-on-path-attackers-to-force-cleartext-ldap-binds-attackers-ca2026-10-25 https://bugrater.com/releases/cve-2026-116201-snipe-it-before-8-5-0-contains-a-saml-assertion-replay-vulnerability-that-allows-attackers-to-reuse-captured-assertions-by-exploiting-a-non-atomic-nonce-check-i2026-10-25 https://bugrater.com/releases/cve-2026-116202-yeswiki-before-4-7-0-contains-a-stored-cross-site-scripting-vulnerability-that-allows-low-privilege-authenticated-users-to-upload-unsanitized-svg-files-through2026-10-25 https://bugrater.com/releases/cve-2026-116203-yeswiki-before-4-7-0-contains-a-stored-cross-site-scripting-vulnerability-in-the-filtertags-action-which-echoes-attacker-controlled-token-values-without-output2026-10-25 https://bugrater.com/releases/cve-2026-116204-yeswiki-before-4-7-0-contains-a-cross-site-request-forgery-vulnerability-in-the-despam-action-tools-security-actions-despam-php-that-lets-unauthenticated-atta2026-10-25 https://bugrater.com/releases/cve-2026-116205-yeswiki-before-4-7-0-contains-an-unauthenticated-server-side-request-forgery-vulnerability-that-allows-remote-attackers-to-fetch-arbitrary-urls-by-supplying2026-10-25 https://bugrater.com/releases/cve-2026-116206-yeswiki-from-4-2-0-before-4-7-0-contains-a-stored-cross-site-scripting-vulnerability-that-allows-authenticated-users-to-inject-script-into-comment-bodies-using2026-10-25 https://bugrater.com/releases/cve-2026-116207-yeswiki-4-6-0-before-4-7-0-and-5-0-0-alpha1-before-5-0-0-alpha4-contains-an-unauthenticated-sql-injection-vulnerability-in-searchmanager-preparesearchrequest2026-10-25 https://bugrater.com/releases/cve-2026-116208-yeswiki-from-4-6-2-before-4-7-0-contains-a-missing-authorization-vulnerability-in-activitypubservice-syncactorposts-that-lets-malicious-activitypub-servers-man2026-10-25 https://bugrater.com/releases/cve-2026-116211-yeswiki-4-5-0-before-4-7-0-contains-an-sql-injection-vulnerability-in-pagemanager-save-where-the-date-maj-fiche-field-of-a-bazar-entry-creation-request-is-c2026-10-25 https://bugrater.com/releases/cve-2026-116054-a-security-vulnerability-has-been-detected-in-sh3-this-affects-an-unknown-function-of-the-component-m-dulo-de-gest-o-m-dulo-de-arrecada-o-the-manipulation-le2026-10-25 https://bugrater.com/releases/cve-2026-116055-a-vulnerability-was-detected-in-sourcecodester-performance-indicator-system-1-0-this-impacts-an-unknown-function-of-the-file-opils-admin-deleteproduct-php-th2026-10-25 https://bugrater.com/releases/cve-2026-116056-a-flaw-has-been-found-in-kodcloud-kodexplorer-up-to-4-56-affected-is-the-function-request-url-safe-of-the-file-app-function-web-function-php-of-the-component-r2026-10-25 https://bugrater.com/releases/cve-2026-116057-a-vulnerability-has-been-found-in-kodcloud-kodexplorer-up-to-4-55-affected-by-this-vulnerability-is-an-unknown-functionality-of-the-file-app-controller-editor2026-10-25 https://bugrater.com/releases/cve-2026-116058-a-vulnerability-was-found-in-alfresco-activiti-up-to-7-21-0-rc-692-affected-by-this-issue-is-the-function-juelscriptengine-eval-of-the-file-juelscriptengine-ja2026-10-25 https://bugrater.com/releases/the-gnu-c-library-security-releases-april-20262026-10-25 https://bugrater.com/releases/wibu-systems-ag-security-releases-october-20262026-10-25 https://bugrater.com/releases/ellucian-security-releases-october-20262026-10-25 https://bugrater.com/releases/crestalnetwork-security-releases-october-20262026-10-25 https://bugrater.com/releases/deltaww-security-releases-september-20262026-10-25 https://bugrater.com/releases/netgate-security-releases-october-20262026-10-25 https://bugrater.com/releases/kiboit-security-releases-october-20262026-10-25 https://bugrater.com/releases/jackdewey-security-releases-october-20262026-10-25 https://bugrater.com/releases/data443-security-releases-october-20262026-10-25 https://bugrater.com/releases/carazo-security-releases-october-20262026-10-25 https://bugrater.com/releases/quadlayers-security-releases-october-20262026-10-25 https://bugrater.com/releases/trainingbusinesspros-security-releases-october-20262026-10-25 https://bugrater.com/releases/codename065-security-releases-october-20262026-10-25 https://bugrater.com/releases/boldgrid-security-releases-october-20262026-10-25 https://bugrater.com/releases/vektor-inc-security-releases-october-20262026-10-25 https://bugrater.com/releases/oceanwp-security-releases-october-20262026-10-25 https://bugrater.com/releases/akaunting-security-releases-august-20262026-10-25 https://bugrater.com/releases/easync-booking-security-releases-october-20262026-10-25 https://bugrater.com/releases/easy-https-redirection-ssl-security-releases-october-20262026-10-25 https://bugrater.com/releases/spin-wheel-security-releases-october-20262026-10-25 https://bugrater.com/releases/user-rights-access-manager-security-releases-october-20262026-10-25 https://bugrater.com/releases/freebsd-security-releases-october-20262026-10-25 https://bugrater.com/releases/document-gallery-security-releases-october-20262026-10-25 https://bugrater.com/releases/tutor-lms-security-releases-october-20262026-10-25 https://bugrater.com/releases/lodash-security-releases-january-20262026-10-25 https://bugrater.com/releases/themerex-group-security-releases-june-20262026-10-25 https://bugrater.com/releases/qnap-systems-inc-security-releases-october-20262026-10-25 https://bugrater.com/releases/cardinity-payment-gateway-for-woocommerce-security-releases-october-20262026-10-25 https://bugrater.com/releases/elemntor-security-releases-october-20262026-10-25 https://bugrater.com/releases/themehigh-security-releases-october-20262026-10-25 https://bugrater.com/releases/rede-ita-for-woocommerce-security-releases-october-20262026-10-25 https://bugrater.com/releases/qnap-systems-inc-security-releases-june-20262026-10-25 https://bugrater.com/releases/lodash-security-releases-march-20262026-10-25 https://bugrater.com/releases/pr-gateway-security-releases-october-20262026-10-25 https://bugrater.com/releases/suse-security-releases-october-20262026-10-25 https://bugrater.com/releases/undici-security-releases-october-20262026-10-25 https://bugrater.com/releases/dan-rossiter-security-releases-october-20262026-10-25 https://bugrater.com/releases/sick-ag-security-releases-october-20262026-10-25 https://bugrater.com/releases/diaple-security-releases-october-20262026-10-25 https://bugrater.com/releases/slican-security-releases-october-20262026-10-25 https://bugrater.com/releases/cve-2026-116060-a-vulnerability-was-determined-in-sourcecodester-performance-indicator-system-1-0-this-affects-an-unknown-part-of-the-file-opils-staff-adddealer-php-executin2026-10-25 https://bugrater.com/releases/cve-2026-116061-a-vulnerability-was-identified-in-sourcecodester-performance-indicator-system-1-0-this-vulnerability-affects-unknown-code-of-the-file-opils-staff-edit-dealer2026-10-25 https://bugrater.com/releases/cve-2026-116062-a-security-flaw-has-been-discovered-in-sourcecodester-performance-indicator-system-1-0-this-issue-affects-some-unknown-processing-of-the-file-opils-staff-save2026-10-25 https://bugrater.com/releases/cve-2026-116063-a-weakness-has-been-identified-in-dedecms-up-to-5-7-118-impacted-is-the-function-require-once-of-the-file-dede-update-guide-php-this-manipulation-of-the-argum2026-10-25 https://bugrater.com/releases/cve-2026-114214-incorrect-authorization-vulnerability-in-ash-project-ash-allows-a-client-to-read-destination-records-unrelated-to-the-source-record-through-a-through-relationsh2026-10-25 https://bugrater.com/releases/cve-2026-115627-incorrect-authorization-vulnerability-in-ash-project-ash-postgres-allows-a-user-to-load-destination-records-linked-to-a-source-record-only-through-another-tenan2026-10-25 https://bugrater.com/releases/cve-2026-115635-incorrect-authorization-vulnerability-in-ash-project-ash-postgres-allows-a-user-to-read-another-tenant-s-record-through-a-skipped-upsert-when-ash-bulk-create2026-10-25 https://bugrater.com/releases/cve-2026-116094-a-vulnerability-was-determined-in-eyoucms-up-to-1-8-3-this-impacts-the-function-remote-file-to-local-of-the-file-application-function-php-executing-a-manipula2026-10-25 https://bugrater.com/releases/erlang-security-releases-june-20262026-10-26 https://bugrater.com/releases/everest-forms-security-releases-october-20262026-10-26 https://bugrater.com/releases/bannersky-security-releases-october-20262026-10-26 https://bugrater.com/releases/wpxpo-security-releases-october-20262026-10-26 https://bugrater.com/releases/kitae-park-security-releases-october-2026-22026-10-26 https://bugrater.com/releases/sparx-systems-security-releases-october-20262026-10-26 https://bugrater.com/releases/webba-plugins-security-releases-october-20262026-10-26 https://bugrater.com/releases/maxfoundry-security-releases-october-20262026-10-26 https://bugrater.com/releases/shabti-kaplan-security-releases-october-20262026-10-26 https://bugrater.com/releases/eclipse-ditto-security-releases-october-20262026-10-26 https://bugrater.com/releases/progress-software-security-releases-june-20262026-10-26 https://bugrater.com/releases/silicon-labs-security-releases-june-20262026-10-26 https://bugrater.com/releases/sensiolabs-security-releases-october-20262026-10-26 https://bugrater.com/releases/xinhu-security-releases-october-20262026-10-26 https://bugrater.com/releases/funnywolf-security-releases-october-20262026-10-26 https://bugrater.com/releases/ui-icons-critical-cross-site-scripting-sa-contrib-2026-2212026-10-26 https://bugrater.com/releases/ffmpeg-image-toolkit-highly-critical-remote-code-execution-sa-contrib-2026-2202026-10-26 https://bugrater.com/releases/cve-2026-116095-a-vulnerability-was-identified-in-smg-project-smg-1-7-0-1-8-0-1-9-0-1-10-0-1-10-1-affected-is-the-function-jpeg-turbo-decode-jpeg-rgb-of-the-file-crates-multi2026-10-26 https://bugrater.com/releases/cve-2026-116096-a-weakness-has-been-identified-in-ggml-org-llama-cpp-affected-by-this-issue-is-the-function-list-pockettts-state-slots-of-the-file-tools-mtmd-models-pockettts2026-10-26 https://bugrater.com/releases/cve-2026-116097-a-security-vulnerability-has-been-detected-in-cloudclassroom-php-project-this-affects-an-unknown-part-of-the-file-addnewstudent-php-such-manipulation-of-the-a2026-10-26 https://bugrater.com/releases/cve-2026-116100-a-vulnerability-has-been-found-in-gougucms-up-to-4-08-18-impacted-is-the-function-add-of-the-file-app-admin-controller-level-php-of-the-component-user-level-ha2026-10-26 https://bugrater.com/releases/cve-2026-116101-a-vulnerability-was-found-in-itsourcecode-online-cake-ordering-system-1-0-the-affected-element-is-an-unknown-function-of-the-file-deletetransac-php-the-manip2026-10-26 https://bugrater.com/releases/cve-2026-116102-a-vulnerability-was-determined-in-quantgeekdev-docker-mcp-0-1-0-0-2-0-the-impacted-element-is-the-function-build-windows-command-of-the-file-docker-executor-p2026-10-26 https://bugrater.com/releases/cve-2026-116103-a-vulnerability-was-identified-in-sony-neural-network-libraries-up-to-1-39-0-this-affects-the-function-load-param-in-txt-of-the-file-python-src-nnabla-utils-cl2026-10-26 https://bugrater.com/releases/cve-2026-116104-a-security-flaw-has-been-discovered-in-sony-neural-network-libraries-up-to-1-39-0-this-impacts-the-function-func-set-nnabla-version-decorate-of-the-file-python2026-10-26 https://bugrater.com/releases/gitlab-security-releases-june-20262026-10-26 https://bugrater.com/releases/gitlab-security-releases-july-20262026-10-26 https://bugrater.com/releases/gitlab-security-releases-august-20262026-10-26 https://bugrater.com/releases/gitlab-security-releases-september-20262026-10-26 https://bugrater.com/releases/gitroomhq-security-releases-october-20262026-10-26 https://bugrater.com/releases/givewp-security-releases-october-20262026-10-26 https://bugrater.com/releases/bleenco-security-releases-october-20262026-10-26 https://bugrater.com/releases/webpros-security-releases-october-20262026-10-26 https://bugrater.com/releases/unitronics-security-releases-october-20262026-10-26 https://bugrater.com/releases/021is-security-releases-october-20262026-10-26 https://bugrater.com/releases/go-standard-library-security-releases-october-20262026-10-26 https://bugrater.com/releases/sonatype-security-releases-october-20262026-10-26 https://bugrater.com/releases/elixir-protobuf-security-releases-october-20262026-10-26 https://bugrater.com/releases/artifex-security-releases-september-20262026-10-26 https://bugrater.com/releases/canonical-security-releases-october-20262026-10-26 https://bugrater.com/releases/openai-security-releases-september-20262026-10-26 https://bugrater.com/releases/8theme-com-security-releases-october-20262026-10-26 https://bugrater.com/releases/nutanix-security-releases-october-20262026-10-26 https://bugrater.com/releases/logichunt-security-releases-march-20262026-10-26 https://bugrater.com/releases/openssl-security-releases-april-20182026-10-26 https://bugrater.com/releases/wpexperts-security-releases-october-20262026-10-26 https://bugrater.com/releases/meow-apps-security-releases-october-20262026-10-26 https://bugrater.com/releases/wordlift-srl-security-releases-october-20262026-10-26 https://bugrater.com/releases/nsquared-security-releases-october-20262026-10-26 https://bugrater.com/releases/elextensions-security-releases-october-20262026-10-26 https://bugrater.com/releases/yith-security-releases-october-20262026-10-26 https://bugrater.com/releases/webberzone-security-releases-october-20262026-10-26 https://bugrater.com/releases/wp-sunshine-security-releases-october-20262026-10-26 https://bugrater.com/releases/wpdreams-security-releases-october-20262026-10-26 https://bugrater.com/releases/hamid-alinia-security-releases-october-20262026-10-26 https://bugrater.com/releases/wp-e-signature-security-releases-october-20262026-10-26 https://bugrater.com/releases/cellhubs-security-releases-october-20262026-10-26 https://bugrater.com/releases/illumos-security-releases-october-20262026-10-26 https://bugrater.com/releases/switchbot-security-releases-october-20262026-10-26 https://bugrater.com/releases/ericmj-security-releases-october-20262026-10-26 https://bugrater.com/releases/clikit-security-releases-october-20262026-10-26 https://bugrater.com/releases/planet-studio-security-releases-october-20262026-10-26 https://bugrater.com/releases/cve-2026-116105-a-weakness-has-been-identified-in-heycyan-app-1-0-103-on-android-affected-is-an-unknown-function-of-the-file-androidmanifest-xml-of-the-component-network-secur2026-10-26 https://bugrater.com/releases/cve-2026-116106-a-security-vulnerability-has-been-detected-in-heycyan-app-1-0-103-on-android-affected-by-this-vulnerability-is-an-unknown-functionality-of-the-component-filepr2026-10-26 https://bugrater.com/releases/cve-2026-116107-a-vulnerability-was-detected-in-datafeedr-product-sets-plugin-up-to-1-3-24-on-wordpress-affected-by-this-issue-is-the-function-dfrps-ajax-delete-saved-search-o2026-10-26 https://bugrater.com/releases/cve-2026-116108-a-flaw-has-been-found-in-openbq-org-openbb-up-to-4-7-2-5-0-0-this-affects-an-unknown-part-of-the-file-openbb-platform-core-openbb-core-app-model-api-settings-p2026-10-26 https://bugrater.com/releases/cve-2026-116109-a-vulnerability-has-been-found-in-continuedev-continue-2-0-0-this-vulnerability-affects-the-function-mcpmanagersingleton-setconnections-of-the-file-core-config2026-10-26 https://bugrater.com/releases/cve-2026-116110-a-vulnerability-was-found-in-giantappman-livewallpaper-2-6-8-0-on-windows-this-issue-affects-some-unknown-processing-of-the-file-livewallpaper-uploadfile-of-t2026-10-26 https://bugrater.com/releases/cve-2026-116112-a-vulnerability-was-identified-in-hashenudara-edoc-doctor-appointment-system-up-to-cc258425b915d1af9e298777ccd26d160493e68d-the-affected-element-is-an-unknown2026-10-26 https://bugrater.com/releases/cve-2026-116113-a-security-flaw-has-been-discovered-in-gouguoa-up-to-6-1-2-the-impacted-element-is-the-function-chunkupload-of-the-file-app-disk-controller-api-php-the-manipu2026-10-26 https://bugrater.com/releases/cve-2026-116114-a-weakness-has-been-identified-in-yoosee-gm8135s-camera-21-00-01-36-this-affects-an-unknown-function-of-the-file-npc-npc-of-the-component-live-udp-h-264-video2026-10-26 https://bugrater.com/releases/cve-2026-116115-a-security-vulnerability-has-been-detected-in-yoosee-gm8135s-camera-21-00-01-36-this-impacts-an-unknown-function-of-the-file-wpa-supplicantx-conf-of-the-compon2026-10-26 https://bugrater.com/releases/cve-2026-116116-a-vulnerability-was-detected-in-yoosee-gm8135s-camera-21-00-01-36-affected-is-an-unknown-function-of-the-component-secure-boot-performing-a-manipulation-resul2026-10-26 https://bugrater.com/releases/cve-2026-116117-a-flaw-has-been-found-in-halo-dev-halo-up-to-2-27-0-beta-1-affected-by-this-vulnerability-is-the-function-run-halo-app-theme-defaultviewnameresolver-resolvevie2026-10-26 https://bugrater.com/releases/cve-2026-116118-a-vulnerability-has-been-found-in-z-ai-zcode-up-to-3-14-3-3-15-1-affected-by-this-issue-is-some-unknown-functionality-of-the-component-sed-command-filter-the2026-10-26 https://bugrater.com/releases/cve-2026-116119-a-vulnerability-was-found-in-nocodb-up-to-2026-08-0-this-affects-an-unknown-part-of-the-file-packages-nocodb-src-services-users-users-service-ts-of-the-compone2026-10-26 https://bugrater.com/releases/cve-2026-116120-a-vulnerability-was-determined-in-nocodb-up-to-2026-07-0-this-vulnerability-affects-the-function-userrefreshtoken-deleteallusertoken-of-the-file-auth-user-sig2026-10-26 https://bugrater.com/releases/cve-2026-116121-a-vulnerability-was-identified-in-nocodb-up-to-2026-08-0-this-issue-affects-some-unknown-processing-of-the-file-users-service-ts-of-the-component-registration2026-10-26 https://bugrater.com/releases/cve-2026-116122-a-security-flaw-has-been-discovered-in-nocodb-up-to-2026-07-0-impacted-is-the-function-authservice-validateuser-of-the-component-sign-in-endpoint-performing-a2026-10-26 https://bugrater.com/releases/cve-2026-116123-a-weakness-has-been-identified-in-nocodb-up-to-2026-07-0-the-affected-element-is-the-function-validatepassword-of-the-file-auth-user-signup-executing-a-manip2026-10-26 https://bugrater.com/releases/cve-2026-103298-the-ccavenue-payment-gateway-for-woocommerce-wordpress-plugin-through-3-1-does-not-verify-that-a-payment-confirmation-request-genuinely-originates-from-the-paym2026-10-26 https://bugrater.com/releases/cve-2026-103299-the-payment-gateway-wordpress-plugin-through-2-2-0-does-not-ensure-a-shared-secret-is-configured-before-using-it-to-authenticate-the-bank-s-payment-notificatio2026-10-26 https://bugrater.com/releases/cve-2026-103300-the-eurobank-woocommerce-payment-gateway-wordpress-plugin-through-2-1-1-does-not-verify-that-a-payment-confirmation-request-genuinely-originates-from-the-paymen2026-10-26 https://bugrater.com/releases/cve-2026-103306-the-online-payments-with-ik-pay-gateway-wordpress-plugin-before-3-0-4-does-not-properly-verify-the-authenticity-of-its-payment-gateway-callback-on-a-default-ins2026-10-26 https://bugrater.com/releases/cve-2026-103319-the-opay-payment-gateway-for-woocommerce-wordpress-plugin-through-2-5-5-does-not-properly-verify-that-payment-notifications-originate-from-the-payment-provider2026-10-26 https://bugrater.com/releases/cve-2026-103381-the-mintpay-for-woocommerce-wordpress-plugin-through-2-2-3-does-not-verify-the-authenticity-of-the-payment-callback-it-processes-allowing-unauthenticated-attac2026-10-26 https://bugrater.com/releases/cve-2026-111974-the-givewp-wordpress-plugin-before-4-19-0-1-does-not-restrict-the-currency-of-a-donation-to-the-one-the-site-or-form-accepts-while-comparing-its-amount-limits2026-10-26 https://bugrater.com/releases/cve-2026-116124-a-security-vulnerability-has-been-detected-in-gnome-libgsf-up-to-1-14-60-the-impacted-element-is-the-function-ole-info-read-metabat-of-the-file-gsf-gsf-infile2026-10-26 https://bugrater.com/releases/cve-2026-116223-a-flaw-has-been-found-in-icret-easyimage-up-to-2-8-7-the-impacted-element-is-an-unknown-function-of-the-file-app-del-php-executing-a-manipulation-of-the-argum2026-10-26 https://bugrater.com/releases/cve-2026-116224-a-vulnerability-has-been-found-in-fr0tt-benotes-up-to-2-8-1-this-affects-the-function-geturlinfo-of-the-file-app-http-controllers-postcontroller-php-of-the-com2026-10-26 https://bugrater.com/releases/cve-2026-116227-a-vulnerability-has-been-found-in-edimax-br-6208ac-1-32-this-vulnerability-affects-unknown-code-of-the-component-virtual-server-page-the-manipulation-leads-to2026-10-26 https://bugrater.com/releases/cve-2026-116228-a-vulnerability-was-found-in-777genius-agent-teams-ai-up-to-2-17-10-this-issue-affects-the-function-dostart-of-the-file-src-main-services-infrastructure-httpse2026-10-26 https://bugrater.com/releases/cve-2026-116229-a-vulnerability-was-determined-in-ffxiv-teamcraft-ffxiv-teamcraft-up-to-11-4-31-impacted-is-the-function-clipboard-readtext-of-the-file-apps-electron-src-prelo2026-10-26 https://bugrater.com/releases/cve-2026-116231-a-security-flaw-has-been-discovered-in-oray-pugongying-x5-pro-7-6-1-the-impacted-element-is-an-unknown-function-of-the-component-ser2net-performing-a-manipula2026-10-26 https://bugrater.com/releases/cve-2026-116232-a-weakness-has-been-identified-in-oray-pugongying-x5-pro-7-6-1-this-affects-the-function-snmp-set-of-the-component-snmp-handler-executing-a-manipulation-of-th2026-10-26 https://bugrater.com/releases/cve-2026-96581-authorization-bypass-through-user-controlled-key-vulnerability-in-ash-project-ash-allows-a-user-of-one-tenant-to-read-overwrite-and-take-over-another-tenant-s2026-10-26 https://bugrater.com/releases/cve-2026-101259-generation-of-error-message-containing-sensitive-information-vulnerability-in-apache-camel-coap-component-this-issue-affects-apache-camel-from-4-0-0-before2026-10-26 https://bugrater.com/releases/cve-2026-110376-missing-authorization-vulnerability-in-villatheme-depart-depart-deposit-and-part-payment-for-woo-allows-exploiting-incorrectly-configured-access-control-securit2026-10-26 https://bugrater.com/releases/cve-2026-111841-cross-site-request-forgery-csrf-vulnerability-in-aman-funnelkit-automations-wp-marketing-automations-allows-cross-site-request-forgery-this-issue-affects-funn2026-10-26 https://bugrater.com/releases/cve-2026-112828-missing-authorization-vulnerability-in-meow-apps-ai-engine-ai-engine-allows-exploiting-incorrectly-configured-access-control-security-levels-this-issue-affects2026-10-26 https://bugrater.com/releases/cve-2026-115425-multiple-cross-site-scripting-xss-vulnerabilities-affect-opnsense-firewall-vesrion-26-7-1-1-and-earlier-allows-low-privileged-attacker-to-execute-javascript-i2026-10-26 https://bugrater.com/releases/cve-2026-116233-a-security-vulnerability-has-been-detected-in-oray-pugongying-x5-pro-7-6-1-this-impacts-an-unknown-function-of-the-component-dnsmasq-the-manipulation-of-the-a2026-10-26 https://bugrater.com/releases/cve-2026-116234-a-vulnerability-was-detected-in-oray-pugongying-x5-pro-7-6-1-affected-is-an-unknown-function-of-the-file-etc-ipsec-conf-of-the-component-ipsec-policy-handler2026-10-26 https://bugrater.com/releases/cve-2026-116235-a-flaw-has-been-found-in-oray-pugongying-x5-pro-7-6-1-affected-by-this-vulnerability-is-an-unknown-functionality-of-the-component-l2tp-authentication-this-man2026-10-26 https://bugrater.com/releases/cve-2026-116236-a-vulnerability-has-been-found-in-oray-pugongying-x5-pro-7-6-1-affected-by-this-issue-is-the-function-plugin-init-of-the-file-tmp-upload-files-of-the-componen2026-10-26 https://bugrater.com/releases/cve-2026-70388-soem-version-2-0-0-and-earlier-contains-vulnerabilities-where-a-malicious-device-on-the-network-can-send-specially-crafted-messages-that-cause-the-master-to-wri2026-10-26 https://bugrater.com/releases/cve-2026-82943-soem-version-2-0-0-and-earlier-contains-vulnerabilities-where-a-malicious-device-can-send-messages-that-cause-the-master-to-read-data-from-memory-locations-beyo2026-10-26 https://bugrater.com/releases/cve-2026-82944-soem-version-2-0-0-and-earlier-contains-a-vulnerability-in-multi-segment-data-transfers-where-a-malicious-device-can-overflow-memory-buffers-the-software-check2026-10-26 https://bugrater.com/releases/cve-2026-82945-soem-version-2-0-0-and-earlier-contains-a-vulnerability-during-device-configuration-where-a-malicious-device-can-cause-memory-corruption-the-software-writes-co2026-10-26 https://bugrater.com/releases/cve-2026-82946-soem-version-2-0-0-and-earlier-contains-a-vulnerability-where-a-malicious-device-can-crash-the-master-system-when-the-software-receives-an-error-response-it-c2026-10-26 https://bugrater.com/releases/cve-2026-82947-soem-version-2-0-0-and-earlier-contains-multiple-vulnerabilities-in-frame-processing-where-a-malicious-device-can-cause-the-master-to-read-data-outside-allocate2026-10-26 https://bugrater.com/releases/cve-2026-95628-improper-limitation-of-a-pathname-to-a-restricted-directory-path-traversal-vulnerability-in-apache-camel-docling-component-this-issue-affects-apache-cam2026-10-26 https://bugrater.com/releases/cve-2026-95629-improper-limitation-of-a-pathname-to-a-restricted-directory-path-traversal-vulnerability-in-apache-camel-docling-component-this-issue-affects-apache-cam2026-10-26 https://bugrater.com/releases/cve-2026-95663-insufficient-session-expiration-vulnerability-in-apache-camel-keycloak-component-this-issue-affects-apache-camel-from-4-16-0-before-4-18-5-from-4-19-0-bef2026-10-26 https://bugrater.com/releases/cve-2026-95664-improper-neutralization-of-special-elements-used-in-an-expression-language-statement-expression-language-injection-vulnerability-in-apache-camel-aws2-s3-com2026-10-26 https://bugrater.com/releases/simplepie-security-releases-october-20262026-10-26 https://bugrater.com/releases/the-opennms-group-security-releases-october-20262026-10-26 https://bugrater.com/releases/dolibarr-security-releases-october-20262026-10-26 https://bugrater.com/releases/adplug-security-releases-october-20262026-10-26 https://bugrater.com/releases/aureuserp-security-releases-october-20262026-10-26 https://bugrater.com/releases/fluidsynth-security-releases-october-20262026-10-26 https://bugrater.com/releases/heasarc-security-releases-october-20262026-10-26 https://bugrater.com/releases/catdoc-security-releases-october-20262026-10-26 https://bugrater.com/releases/assimp-security-releases-october-20262026-10-26 https://bugrater.com/releases/openslide-security-releases-october-20262026-10-26 https://bugrater.com/releases/libxmp-security-releases-october-20262026-10-26 https://bugrater.com/releases/swami-security-releases-october-20262026-10-26 https://bugrater.com/releases/amartin755-security-releases-october-20262026-10-26 https://bugrater.com/releases/netsurf-security-releases-october-20262026-10-26 https://bugrater.com/releases/gdraheim-security-releases-october-20262026-10-26 https://bugrater.com/releases/ansilove-security-releases-october-20262026-10-26 https://bugrater.com/releases/yeraze-security-releases-october-20262026-10-26 https://bugrater.com/releases/libsidplayfp-security-releases-october-20262026-10-26 https://bugrater.com/releases/danoli3-security-releases-october-20262026-10-26 https://bugrater.com/releases/valleybell-security-releases-october-20262026-10-26 https://bugrater.com/releases/aous72-security-releases-october-20262026-10-26 https://bugrater.com/releases/libgme-security-releases-october-20262026-10-26 https://bugrater.com/releases/sezero-security-releases-october-20262026-10-26 https://bugrater.com/releases/sox-security-releases-october-20262026-10-26 https://bugrater.com/releases/earthscope-security-releases-october-20262026-10-26 https://bugrater.com/releases/wohlstand-security-releases-october-20262026-10-26 https://bugrater.com/releases/mindwerks-security-releases-october-20262026-10-26 https://bugrater.com/releases/uade-security-releases-october-20262026-10-26 https://bugrater.com/releases/abhinavxd-security-releases-october-20262026-10-26 https://bugrater.com/releases/suitenumerique-security-releases-october-20262026-10-26 https://bugrater.com/releases/kedro-org-security-releases-october-20262026-10-26 https://bugrater.com/releases/ethereum-security-releases-october-20262026-10-26 https://bugrater.com/releases/stalniy-security-releases-october-20262026-10-26 https://bugrater.com/releases/code-projects-security-releases-september-20262026-10-26 https://bugrater.com/releases/energizelab-security-releases-october-20262026-10-26 https://bugrater.com/releases/enzo1982-security-releases-october-20262026-10-26 https://bugrater.com/releases/libical-security-releases-october-20262026-10-26 https://bugrater.com/releases/libraw-security-releases-october-20262026-10-26 https://bugrater.com/releases/selmf-security-releases-october-20262026-10-26 https://bugrater.com/releases/nifti-imaging-security-releases-october-20262026-10-26 https://bugrater.com/releases/nivocart-security-releases-october-20262026-10-26 https://bugrater.com/releases/davenardella-security-releases-october-20262026-10-26 https://bugrater.com/releases/jooan-security-releases-october-20262026-10-26 https://bugrater.com/releases/driftregion-security-releases-october-20262026-10-26 https://bugrater.com/releases/bmc-helix-security-releases-october-20262026-10-26 https://bugrater.com/releases/openhealthforall-security-releases-october-20262026-10-26 https://bugrater.com/releases/dakheera47-security-releases-october-20262026-10-26 https://bugrater.com/releases/valuecell-ai-security-releases-october-20262026-10-26 https://bugrater.com/releases/taskingai-security-releases-october-20262026-10-26 https://bugrater.com/releases/coleam00-security-releases-october-20262026-10-26 https://bugrater.com/releases/samugit83-security-releases-october-20262026-10-26 https://bugrater.com/releases/lejianwen-security-releases-october-20262026-10-26 https://bugrater.com/releases/juggleim-security-releases-october-20262026-10-26 https://bugrater.com/releases/dokploy-security-releases-october-20262026-10-26 https://bugrater.com/releases/atalayalabs-security-releases-october-20262026-10-26 https://bugrater.com/releases/pig-mesh-security-releases-october-20262026-10-26 https://bugrater.com/releases/apitable-security-releases-october-20262026-10-26 https://bugrater.com/releases/polonel-security-releases-october-20262026-10-26 https://bugrater.com/releases/easysoft-security-releases-october-20262026-10-26 https://bugrater.com/releases/opsre-security-releases-october-20262026-10-26 https://bugrater.com/releases/likeshop-security-releases-october-20262026-10-26 https://bugrater.com/releases/puemos-security-releases-october-20262026-10-26 https://bugrater.com/releases/papermark-security-releases-october-20262026-10-26 https://bugrater.com/releases/metasfresh-security-releases-october-20262026-10-26 https://bugrater.com/releases/thinkcmf-security-releases-october-20262026-10-26 https://bugrater.com/releases/peppermint-lab-security-releases-october-20262026-10-26 https://bugrater.com/releases/crmeb-security-releases-october-20262026-10-26 https://bugrater.com/releases/zhontai-security-releases-october-20262026-10-26 https://bugrater.com/releases/magicblack-security-releases-october-20262026-10-26 https://bugrater.com/releases/mettle-security-releases-october-20262026-10-26 https://bugrater.com/releases/dataelement-security-releases-october-20262026-10-26 https://bugrater.com/releases/mindoc-org-security-releases-october-20262026-10-26 https://bugrater.com/releases/cool-team-official-security-releases-october-20262026-10-26 https://bugrater.com/releases/aapanel-security-releases-october-20262026-10-26 https://bugrater.com/releases/classroomio-security-releases-october-20262026-10-26 https://bugrater.com/releases/cve-2026-103377-a-reflected-cross-site-scripting-xss-vulnerability-has-been-identified-in-the-web-application-of-the-castile-la-mancha-regional-parliament-s-video-library-th2026-10-26 https://bugrater.com/releases/cve-2026-110377-missing-authorization-vulnerability-in-villatheme-bopo-woocommerce-product-bundle-builder-bopo-woo-product-bundle-builder-allows-exploiting-incorrectly-config2026-10-26 https://bugrater.com/releases/cve-2026-112865-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-vulnerability-in-wproyal-royal-elementor-addons-royal-elementor-addons-allo2026-10-26 https://bugrater.com/releases/cve-2026-114709-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-vulnerability-in-igor-funa-ad-inserter-ad-inserter-allows-reflected-xss-thi2026-10-26 https://bugrater.com/releases/cve-2026-115602-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-vulnerability-in-liquid-web-stellarwp-gutenberg-blocks-by-kadence-blocks2026-10-26 https://bugrater.com/releases/cve-2026-115613-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-vulnerability-in-bplugins-image-gallery-block-create-and-display-photo-ga2026-10-26 https://bugrater.com/releases/cve-2026-115614-missing-authorization-vulnerability-in-magepeople-inc-booking-and-rental-manager-booking-and-rental-manager-for-woocommerce-allows-exploiting-incorrectly-confi2026-10-26 https://bugrater.com/releases/cve-2026-115949-missing-authorization-vulnerability-in-wp-smart-widgets-better-post-filter-widgets-for-elementor-better-post-filter-widgets-for-elementor-allows-exploiting-in2026-10-26 https://bugrater.com/releases/cve-2026-115958-missing-authorization-vulnerability-in-wp-discussion-board-wp-discussion-board-wp-discussion-board-allows-exploiting-incorrectly-configured-access-control-secur2026-10-26 https://bugrater.com/releases/cve-2026-116237-a-vulnerability-was-found-in-oray-pugongying-x5-pro-7-6-1-this-affects-an-unknown-part-of-the-component-dnsmasq-performing-a-manipulation-results-in-crlf-inje2026-10-26 https://bugrater.com/releases/cve-2026-116253-a-vulnerability-was-determined-in-dedecms-5-7-118-this-vulnerability-affects-the-function-common-inc-php-runmagicquotes-of-the-file-plus-ad-js-php-of-the-com2026-10-26 https://bugrater.com/releases/cve-2026-116254-a-vulnerability-was-identified-in-rathena-fluxcp-up-to-98cd4b8fd83228c11b36fb3d097b8e0f7c105a8d-this-issue-affects-the-function-verifyiprange-of-the-file-lib-f2026-10-26 https://bugrater.com/releases/cve-2026-116255-a-vulnerability-has-been-found-in-pgyer-codefever-up-to-0c35e60f006f9d558cc33a159baf110659351990-affected-is-the-function-detail-of-the-file-application-contr2026-10-26 https://bugrater.com/releases/cve-2026-4316-reflected-cross-site-scripting-xss-in-gym-management-software-ismygym-by-zuinq-studio-affecting-the-reservation-endpoint-where-the-ret-parameter-is-reflecte2026-10-26 https://bugrater.com/releases/cve-2026-97254-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-vulnerability-in-wproyal-royal-elementor-addons-royal-elementor-addons-allo2026-10-26 https://bugrater.com/releases/cve-2026-97255-authorization-bypass-through-user-controlled-key-vulnerability-in-wproyal-royal-elementor-addons-royal-elementor-addons-allows-exploiting-incorrectly-configured2026-10-26 https://bugrater.com/releases/cve-2026-97295-cross-site-request-forgery-csrf-vulnerability-in-david-lingren-media-library-assistant-media-library-assistant-allows-cross-site-request-forgery-this-issue-af2026-10-26 https://bugrater.com/releases/cve-2026-114707-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-vulnerability-in-crocoblock-jetelements-for-elementor-jet-elements-allows-s2026-10-26 https://bugrater.com/releases/cve-2026-114708-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-vulnerability-in-crocoblock-jetsmartfilters-jet-smart-filters-allows-stored2026-10-26 https://bugrater.com/releases/cve-2026-115594-insertion-of-sensitive-information-into-sent-data-vulnerability-in-david-lingren-media-library-assistant-media-library-assistant-allows-retrieve-embedded-sensit2026-10-26 https://bugrater.com/releases/cve-2026-115595-missing-authorization-vulnerability-in-supsystic-contact-form-by-supsystic-contact-form-by-supsystic-allows-exploiting-incorrectly-configured-access-control-sec2026-10-26 https://bugrater.com/releases/cve-2026-115608-improper-neutralization-of-special-elements-used-in-an-sql-command-sql-injection-vulnerability-in-crocoblock-jetengine-jet-engine-allows-sql-injection-this2026-10-26 https://bugrater.com/releases/cve-2026-115948-improper-neutralization-of-special-elements-used-in-an-sql-command-sql-injection-vulnerability-in-david-lingren-media-library-assistant-media-library-assist2026-10-26 https://bugrater.com/releases/cve-2026-115950-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-vulnerability-in-wp-smart-widgets-better-post-filter-widgets-for-elemento2026-10-26 https://bugrater.com/releases/cve-2026-115951-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-vulnerability-in-kevin-weber-lazy-load-for-videos-lazy-load-for-videos-allo2026-10-26 https://bugrater.com/releases/cve-2026-115953-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-vulnerability-in-dylan-kuhn-geo-mashup-geo-mashup-allows-stored-xss-this-i2026-10-26 https://bugrater.com/releases/cve-2026-115954-missing-authorization-vulnerability-in-dylan-kuhn-geo-mashup-geo-mashup-allows-exploiting-incorrectly-configured-access-control-security-levels-this-issue-affe2026-10-26 https://bugrater.com/releases/cve-2026-115955-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-vulnerability-in-bplugins-advanced-post-block-post-grid-for-wordpress-blo2026-10-26 https://bugrater.com/releases/cve-2026-115956-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-vulnerability-in-bplugins-panorama-viewer-360-degree-image-video-viewer2026-10-26 https://bugrater.com/releases/cve-2026-115959-missing-authorization-vulnerability-in-wpexperts-apiexperts-square-for-woocommerce-woosquare-allows-exploiting-incorrectly-configured-access-control-security-le2026-10-26 https://bugrater.com/releases/cve-2026-115960-missing-authorization-vulnerability-in-wpexperts-apiexperts-square-for-woocommerce-woosquare-allows-exploiting-incorrectly-configured-access-control-security-le2026-10-26 https://bugrater.com/releases/cve-2026-115961-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-vulnerability-in-bplugins-b-slider-b-slider-allows-stored-xss-this-issue-af2026-10-26 https://bugrater.com/releases/cve-2026-116256-a-vulnerability-was-found-in-geesondog-rhaphp-up-to-7ae639ccf8dcb627faace096d030bd4cb4cfb905-affected-by-this-vulnerability-is-the-function-image-of-the-file-a2026-10-26 https://bugrater.com/releases/cve-2026-116257-a-vulnerability-was-determined-in-billabear-up-to-2025-01-03-affected-by-this-issue-is-the-function-processinstall-of-the-file-src-billabear-controller-install2026-10-26 https://bugrater.com/releases/cve-2026-116258-a-vulnerability-was-identified-in-libimobiledevice-up-to-1-4-0-this-affects-an-unknown-part-of-the-file-src-afc-c-of-the-component-afc-such-manipulation-leads2026-10-26 https://bugrater.com/releases/cve-2026-116259-a-security-flaw-has-been-discovered-in-libimobiledevice-up-to-1-4-0-this-vulnerability-affects-the-function-afc-get-device-info-key-of-the-file-src-afc-c-of-th2026-10-26 https://bugrater.com/releases/cve-2026-105947-improper-limitation-of-a-pathname-to-a-restricted-directory-path-traversal-vulnerability-in-innotim-software-telecommunications-and-consulting-co-ltd-lo2026-10-26 https://bugrater.com/releases/cve-2026-115717-frappe-builder-versions-before-1-36-1-contain-a-server-side-request-forgery-vulnerability-in-the-convert-to-webp-api-endpoint-which-lacks-the-has-page-write-ac2026-10-26 https://bugrater.com/releases/cve-2026-115718-frappe-builder-versions-1-33-0-before1-36-0-contain-a-missing-authorization-vulnerability-in-the-improve-prompt-endpoint-that-allows-any-authenticated-non-guest2026-10-26 https://bugrater.com/releases/cve-2026-115720-frappe-builder-before-1-36-1-contains-a-server-side-request-forgery-vulnerability-in-builder-api-py-where-the-assert-not-private-url-guard-validates-only-the2026-10-26 https://bugrater.com/releases/cve-2026-116260-a-weakness-has-been-identified-in-libimobiledevice-up-to-1-4-0-this-issue-affects-the-function-service-receive-of-the-file-src-afc-c-of-the-component-afc-servi2026-10-26 https://bugrater.com/releases/cve-2026-116261-a-security-vulnerability-has-been-detected-in-libimobiledevice-up-to-1-4-0-impacted-is-the-function-afc-file-open-of-the-file-src-afc-c-of-the-component-afc-fi2026-10-26 https://bugrater.com/releases/cve-2026-116262-a-vulnerability-was-detected-in-libimobiledevice-up-to-1-4-0-the-affected-element-is-the-function-webinspector-receive-with-timeout-of-the-file-src-webinspecto2026-10-26 https://bugrater.com/releases/cve-2026-94380-weak-password-recovery-mechanism-for-forgotten-password-vulnerability-in-havelsan-inc-liman-mys-allows-password-recovery-exploitation-this-issue-affects-lima2026-10-26 https://bugrater.com/releases/cve-2026-96432-a-malicious-or-compromised-http-2-server-withholding-settings-ack-can-send-rst-stream-on-a-completed-stream-planting-a-null-pointer-and-then-send-a-push-promi2026-10-26 https://bugrater.com/releases/cve-2026-107656-an-authentication-bypass-using-an-alternate-path-or-channel-vulnerability-in-fortinet-fortisandbox-5-0-0-through-5-0-6-fortisandbox-4-4-0-through-4-4-9-fortis2026-10-26 https://bugrater.com/releases/cve-2026-108525-allocation-of-resources-without-limits-or-throttling-vulnerability-in-the-http-2-implementation-of-mtrudel-bandit-allows-an-unauthenticated-remote-attacker-to-e2026-10-26 https://bugrater.com/releases/cve-2026-108529-inefficient-algorithmic-complexity-vulnerability-in-the-http-2-implementation-of-mtrudel-bandit-allows-an-unauthenticated-remote-attacker-to-exhaust-server-cpu2026-10-26 https://bugrater.com/releases/cve-2026-109584-improper-handling-of-highly-compressed-data-data-amplification-vulnerability-in-the-http-2-implementation-of-mtrudel-bandit-allows-an-unauthenticated-remote-a2026-10-26 https://bugrater.com/releases/cve-2026-110314-client-side-enforcement-of-server-side-security-vulnerability-in-the-websocket-connection-handling-of-mtrudel-bandit-allows-a-remote-client-to-keep-running-webs2026-10-26 https://bugrater.com/releases/cve-2026-110474-this-vulnerability-exists-in-the-creditnirvana-agentic-ai-call-centre-application-due-to-hardcoded-static-api-key-in-the-client-side-javascript-bundle-an-unaut2026-10-26 https://bugrater.com/releases/cve-2026-110475-this-vulnerability-exists-in-the-creditnirvana-collections-platform-due-to-improper-authentication-and-authorization-controls-at-the-platform-login-service-an2026-10-26 https://bugrater.com/releases/cve-2026-110499-allocation-of-resources-without-limits-or-throttling-vulnerability-in-the-http-2-implementation-of-mtrudel-bandit-allows-an-unauthenticated-remote-attacker-to-g2026-10-26 https://bugrater.com/releases/cve-2026-111101-allocation-of-resources-without-limits-or-throttling-vulnerability-in-the-http-1-1-chunked-body-reader-of-mtrudel-bandit-allows-an-unauthenticated-remote-attack2026-10-26 https://bugrater.com/releases/cve-2026-111103-improper-cleanup-on-thrown-exception-vulnerability-in-the-http-2-handler-of-mtrudel-bandit-allows-an-unauthenticated-remote-attacker-to-bypass-per-connection-re2026-10-26 https://bugrater.com/releases/cve-2026-112880-improper-neutralization-of-crlf-sequences-in-http-headers-http-request-response-splitting-vulnerability-in-hackney-http-connect-in-benoitc-hackney-allows-ht2026-10-26 https://bugrater.com/releases/cve-2026-113436-inefficient-algorithmic-complexity-vulnerability-in-the-header-integer-parser-of-mtrudel-bandit-allows-an-unauthenticated-remote-attacker-to-consume-server-cpu2026-10-26 https://bugrater.com/releases/cve-2026-113440-insufficiently-protected-credentials-vulnerability-in-hackney-in-benoitc-hackney-allows-a-redirecting-server-to-obtain-the-basic-auth-and-cookie-credentials-of2026-10-26 https://bugrater.com/releases/cve-2026-114213-allocation-of-resources-without-limits-or-throttling-vulnerability-in-the-websocket-fragment-reassembly-of-mtrudel-bandit-allows-an-unauthenticated-remote-attac2026-10-26 https://bugrater.com/releases/cve-2026-114216-inconsistent-interpretation-of-http-requests-http-request-response-smuggling-vulnerability-in-the-http-1-1-chunked-body-reader-of-mtrudel-bandit-allows-an-u2026-10-26 https://bugrater.com/releases/cve-2026-115269-allocation-of-resources-without-limits-or-throttling-vulnerability-in-the-http-2-request-body-reader-of-mtrudel-bandit-allows-an-unauthenticated-remote-attacker2026-10-26 https://bugrater.com/releases/cve-2026-115693-improper-certificate-validation-vulnerability-in-hackney-ssl-in-benoitc-hackney-allows-an-on-path-attacker-to-impersonate-a-server-pinned-to-a-private-certifica2026-10-26 https://bugrater.com/releases/cve-2026-115700-interpretation-conflict-vulnerability-in-hackney-url-in-benoitc-hackney-allows-server-side-request-forgery-via-a-percent-encoded-bracketed-ipv6-literal-or-an-ip2026-10-26 https://bugrater.com/releases/cve-2026-116210-webasyst-framework-through-4-4-0-contains-a-cross-site-request-forgery-vulnerability-in-the-photos-app-that-allows-remote-attackers-to-perform-backend-actions-b2026-10-26 https://bugrater.com/releases/cve-2026-116212-webasyst-framework-through-4-4-0-contains-a-stored-cross-site-scripting-vulnerability-in-the-photos-app-that-allows-authenticated-backend-users-to-inject-javasc2026-10-26 https://bugrater.com/releases/cve-2026-116213-webasyst-framework-through-4-4-0-contains-an-arbitrary-file-read-vulnerability-in-waarchivetar-writeitem-that-creates-symlinks-from-theme-archives-without-va2026-10-26 https://bugrater.com/releases/cve-2026-116214-maccms-v10-before-2026-1000-4054-contains-an-authentication-bypass-vulnerability-that-allows-unauthenticated-attackers-to-reset-any-member-s-password-because-ch2026-10-26 https://bugrater.com/releases/cve-2026-116215-maccms-v10-through-2026-1000-4056-contains-a-race-condition-vulnerability-in-card-usedata-that-allows-authenticated-members-to-redeem-one-recharge-card-multi2026-10-26 https://bugrater.com/releases/cve-2026-116216-maccms-v10-through-2026-1000-4056-contains-a-mass-assignment-vulnerability-in-index-comment-savedata-that-allows-unauthenticated-attackers-to-set-arbitrary-m2026-10-26 https://bugrater.com/releases/cve-2026-116217-rosariosis-before-12-9-2-contains-a-reflected-cross-site-scripting-vulnerability-in-modules-food-service-menureports-php-that-allows-unauthenticated-attackers-t2026-10-26 https://bugrater.com/releases/cve-2026-116218-dolibarr-erp-crm-19-0-0-before-23-0-4-contains-an-sql-injection-vulnerability-that-allows-authenticated-api-users-to-inject-sql-via-the-type-field-of-the-third2026-10-26 https://bugrater.com/releases/cve-2026-116219-dolibarr-erp-crm-before-24-0-0-contains-an-os-command-injection-vulnerability-in-htdocs-admin-tools-export-php-that-lets-authenticated-administrators-bypass-the2026-10-26 https://bugrater.com/releases/cve-2026-116274-a-vulnerability-has-been-found-in-jizhicms-up-to-2-5-6-this-affects-the-function-pay-of-the-file-app-home-c-ordercontroller-php-of-the-component-front-end-orde2026-10-26 https://bugrater.com/releases/cve-2026-116275-a-vulnerability-was-found-in-allenai-allennlp-up-to-2-10-1-this-impacts-the-function-registrable-resolve-class-name-of-the-file-allennlp-common-registrable-py2026-10-26 https://bugrater.com/releases/cve-2026-116280-a-vulnerability-was-determined-in-kameleo-up-to-5-0-1-26-affected-is-the-function-internalcontroller-testproxy-of-the-file-client-engine-application-f-cs-of-th2026-10-26 https://bugrater.com/releases/cve-2026-116281-a-vulnerability-was-identified-in-kameleo-up-to-5-0-1-26-affected-by-this-vulnerability-is-the-function-listprofiles-of-the-file-client-engine-application-t-cs2026-10-26 https://bugrater.com/releases/cve-2026-116282-a-security-flaw-has-been-discovered-in-kameleo-up-to-5-3-1-affected-by-this-issue-is-the-function-cookiecontroller-listcookies-of-the-file-client-engine-applic2026-10-26 https://bugrater.com/releases/cve-2026-116283-a-weakness-has-been-identified-in-kameleo-up-to-5-0-1-26-this-affects-an-unknown-part-of-the-file-profiles-of-the-component-local-api-this-manipulation-cause2026-10-26 https://bugrater.com/releases/cve-2026-116485-danmu-api-before-1-21-7-contains-an-authentication-bypass-vulnerability-that-allows-unauthenticated-attackers-to-modify-server-environment-configuration-when-th2026-10-26 https://bugrater.com/releases/cve-2026-116486-objenesis-before-3-6-contains-a-type-confusion-vulnerability-that-allows-code-in-one-class-loader-to-substitute-objects-into-another-by-exploiting-instantiator2026-10-26 https://bugrater.com/releases/cve-2026-116487-nxp-mcuxpresso-sdk-usb-middleware-mcuxsdk-middleware-usb-before-2-13-0-contains-an-out-of-bounds-read-vulnerability-in-usb-devicecdcrndissetcommand-that-tru2026-10-26 https://bugrater.com/releases/cve-2026-116488-nxp-mcuxpresso-sdk-usb-middleware-mcuxsdk-middleware-usb-before-2-13-0-contains-a-heap-buffer-overflow-in-host-audio-video-and-cdc-class-drivers-that-trust-d2026-10-26 https://bugrater.com/releases/cve-2026-116492-frappe-crm-app-before-1-89-1-contains-a-missing-authorization-vulnerability-that-allows-authenticated-low-privileged-users-to-read-crm-lead-records-they-are-not2026-10-26 https://bugrater.com/releases/cve-2026-116516-mattermost-versions-11-9-11-1-9-11-5-8-11-10-7-0-fail-to-validate-zoom-chat-line-length-before-slicing-which-allows-an-authenticated-attacker-to-crash-the-age2026-10-26 https://bugrater.com/releases/cve-2026-59106-a-security-vulnerability-has-been-identified-in-the-wolfprot-interface-implementation-insufficient-neutralization-of-user-controlled-input-could-allow-an-unaut2026-10-26 https://bugrater.com/releases/cve-2026-59107-a-security-vulnerability-has-been-identified-in-the-vsolution-matrix-file-sharing-feature-a-shared-cryptographic-trust-configuration-could-allow-an-attacker-wh2026-10-26 https://bugrater.com/releases/cve-2026-97200-allocation-of-resources-without-limits-or-throttling-vulnerability-in-hackney-conn-in-benoitc-hackney-allows-a-malicious-http-server-to-exhaust-client-memory-vi2026-10-26 https://bugrater.com/releases/cve-2026-110733-vulnerability-in-the-sql-storage-module-of-apache-sis-when-sorting-a-stream-of-features-the-clause-is-copied-after-order-by-without-quoting-the-identifier-cha2026-10-26 https://bugrater.com/releases/cve-2026-110748-this-issue-affects-apache-sis-from-version-0-7-through-1-6-inclusive-when-a-data-file-contains-links-to-other-files-apache-sis-opened-these-files-regardless-t2026-10-26 https://bugrater.com/releases/cve-2026-112345-ttlock-android-application-before-v9-8-260718-and-associated-smart-lock-firmware-contain-a-hardcoded-static-aes-key-vulnerability-that-allows-an-attacker-within2026-10-26 https://bugrater.com/releases/cve-2026-116284-a-security-vulnerability-has-been-detected-in-kameleo-up-to-5-3-1-this-vulnerability-affects-unknown-code-of-the-file-general-user-info-of-the-component-local2026-10-26 https://bugrater.com/releases/cve-2026-116339-a-vulnerability-was-determined-in-iflytek-astron-agent-up-to-1-1-2-this-affects-an-unknown-function-of-the-file-core-memory-database-api-v1-exec-ddl-py-of-the2026-10-26 https://bugrater.com/releases/cve-2026-116340-a-vulnerability-was-identified-in-iflytek-astron-agent-up-to-1-1-2-this-impacts-the-function-fileinfov2service-listknowledgebypage-of-the-file-fileinfov2servic2026-10-26 https://bugrater.com/releases/cve-2026-116497-a-null-pointer-dereference-vulnerability-was-found-in-gssproxy-when-a-gssx-init-sec-context-request-is-received-with-the-target-name-field-absent-the-daemon-d2026-10-26 https://bugrater.com/releases/cve-2026-3322-due-to-improper-permission-checks-in-lobster-pro-attackers-are-able-to-interact-with-endpoints-that-should-require-administrative-privileges-this-issue-affect2026-10-26 https://bugrater.com/releases/cve-2026-65184-the-root-privileged-wsserver-terminal-bridge-daemon-builds-a-shell-command-from-client-supplied-websocket-fields-and-passes-it-to-system-and-popen-wit2026-10-26 https://bugrater.com/releases/cve-2026-77052-boneio-black-exposes-a-node-red-instance-without-authentication-at-the-nodered-path-through-a-caddy-reverse-proxy-the-node-red-admin-api-allows-deploying-flo2026-10-26 https://bugrater.com/releases/cve-2026-77053-boneio-black-firmware-ships-with-authentication-disabled-by-default-its-management-web-api-listens-on-all-network-interfaces-and-exposes-all-endpoints-without2026-10-26 https://bugrater.com/releases/cve-2026-77054-boneio-black-stores-passwords-including-the-mqtt-broker-and-web-panel-passwords-in-cleartext-the-get-api-config-endpoint-returns-the-full-configuration-with2026-10-26 https://bugrater.com/releases/cve-2026-77055-boneio-black-debian-images-gives-the-boneio-service-account-excessive-privileges-including-full-passwordless-sudo-access-and-membership-in-the-docker-group-a2026-10-26 https://bugrater.com/releases/cve-2026-77056-boneio-black-debian-images-ships-with-a-mosquitto-mqtt-broker-that-uses-the-same-default-credentials-on-all-devices-these-credentials-are-publicly-documented-o2026-10-26 https://bugrater.com/releases/cve-2026-77057-boneio-black-does-not-limit-authentication-attempts-on-its-web-interface-post-api-login-or-ssh-service-and-does-not-enforce-password-complexity-an-unauthen2026-10-26 https://bugrater.com/releases/cve-2026-77058-boneio-black-is-vulnerable-to-cross-site-request-forgery-csrf-on-all-state-changing-api-endpoints-because-it-lacks-csrf-tokens-and-does-not-validate-origin-or2026-10-26 https://bugrater.com/releases/cve-2026-77059-boneio-black-contains-a-toctou-race-condition-in-the-create-timedatectl-sudoers-file-function-in-boneio-webui-routes-timezone-sudoers-py-the-function-writes2026-10-26 https://bugrater.com/releases/cve-2026-77060-boneio-black-debian-images-stores-the-mosquitto-mqtt-broker-password-file-at-etc-mosquitto-passwd-with-world-readable-permissions-any-local-user-can-read-the2026-10-26 https://bugrater.com/releases/cve-2026-77061-boneio-black-directly-excludes-several-api-endpoints-from-the-authentication-an-unauthenticated-remote-attacker-on-the-local-network-can-retrieve-system-logs2026-10-26 https://bugrater.com/releases/cve-2026-77062-the-boneio-black-web-interface-lacks-proper-clickjacking-protections-a-remote-attacker-can-embed-the-control-panel-in-an-iframe-on-a-malicious-web-page-and-tri2026-10-26 https://bugrater.com/releases/cve-2026-90885-improper-restriction-of-xml-external-entity-reference-vulnerability-in-apache-camel-saxon-component-this-issue-affects-apache-camel-from-4-0-0-before-4-182026-10-26 https://bugrater.com/releases/cve-2026-93328-path-traversal-and-missing-authorization-in-cloud-storage-source-in-google-cloud-mcp-toolbox-for-databases-googleapis-mcp-toolbox-versions-1-2-0-through-1-4-02026-10-26 https://bugrater.com/releases/cve-2026-93847-mattermost-versions-11-7-x-11-7-10-fail-to-validate-reserved-system-post-types-on-the-scheduled-post-creation-and-publication-paths-which-allows-an-authentic2026-10-26 https://bugrater.com/releases/cve-2026-93848-mattermost-versions-11-7-x-11-7-10-fail-to-apply-outbound-internal-connection-filtering-to-the-openid-discovery-endpoint-request-which-allows-a-system-admini2026-10-26 https://bugrater.com/releases/cve-2026-93849-mattermost-versions-11-9-x-11-9-1-11-8-x-11-8-5-11-7-x-11-7-10-11-10-x-11-10-1-mattermost-fail-to-apply-allocation-limits-to-the-byte-string-deco2026-10-26 https://bugrater.com/releases/cve-2026-93850-mattermost-versions-11-9-x-11-9-1-11-8-x-11-8-5-11-7-x-11-7-10-11-10-x-11-10-1-fail-to-bind-the-volume-of-text-extracted-from-an-uploaded-pdf-whi2026-10-26 https://bugrater.com/releases/cve-2026-94386-use-of-cache-containing-sensitive-information-vulnerability-in-apache-camel-oauth-component-this-issue-affects-apache-camel-from-4-19-0-before-4-22-2-o2026-10-26 https://bugrater.com/releases/cve-2026-99095-in-the-linux-kernel-the-following-vulnerability-has-been-resolved-drm-vc4-drain-the-hangcheck-timer-and-works-on-v3d-unbind-nothing-stops-the-hangcheck-tim2026-10-26 https://bugrater.com/releases/cve-2026-112346-openhands-software-agent-sdk-before-1-52-0-contains-an-unauthenticated-remote-code-execution-vulnerability-where-the-dockerworkspace-and-apptainer-workspace-lau2026-10-26 https://bugrater.com/releases/cve-2026-115721-unsupported-when-assigned-unbounded-allocation-in-xml-parsing-in-apache-vysper-all-versions-may-lead-to-an-out-of-memory-condition-this-issue-affect2026-10-26 https://bugrater.com/releases/cve-2026-115748-unsupported-when-assigned-authorization-bypass-in-apache-vysper-all-versions-apache-vysper-is-an-xmpp-jabber-server-library-its-xep-0077-in-band2026-10-26 https://bugrater.com/releases/cve-2026-116367-a-vulnerability-was-found-in-deepseek-harness-up-to-0-1-0-rc-5-this-vulnerability-affects-the-function-createcontext-of-the-file-packages-extensions-cordis-hos2026-10-26 https://bugrater.com/releases/cve-2026-116368-a-vulnerability-was-determined-in-deepseek-harness-up-to-0-2-0-rc-2-this-issue-affects-some-unknown-processing-of-the-file-packages-client-connection-src-brows2026-10-26 https://bugrater.com/releases/cve-2026-116369-a-vulnerability-was-identified-in-sunwood-ai-labs-github-kanban-mcp-server-up-to-0-4-0-impacted-is-the-function-handlelistissues-of-the-file-src-handlers-issue2026-10-26 https://bugrater.com/releases/cve-2026-116394-improper-neutralization-of-script-related-html-tags-in-a-web-page-basic-xss-vulnerability-in-magepeople-inc-wpevently-mage-eventpress-allows-code-injection-t2026-10-26 https://bugrater.com/releases/cve-2026-116489-timescale-pgvectorscale-before-0-9-1-contains-a-type-confusion-vulnerability-that-allows-low-privileged-database-users-to-corrupt-memory-by-shadowing-pgvector-s2026-10-26 https://bugrater.com/releases/cve-2026-116538-htmlsanitizer-before-9-2-1039-and-10-0-prereleases-before-10-0-1037-beta-contains-a-cross-site-scripting-vulnerability-because-sanitizedom-string-never-sanitiz2026-10-26 https://bugrater.com/releases/cve-2026-116539-netty-netty-tcnative-before-2-0-84-final-contains-a-heap-buffer-overflow-vulnerability-in-the-tcn-write-to-bytebuffer-bio-callback-caused-by-failing-to-wrap-the2026-10-26 https://bugrater.com/releases/cve-2026-116540-netty-tcnative-2-0-66-final-before-2-0-84-final-built-against-openssl-3-x-contains-a-use-after-free-vulnerability-in-ssl-tlsext-ticket-key-cb-during-session-tic2026-10-26 https://bugrater.com/releases/cve-2026-116541-netty-netty-tcnative-before-2-0-84-final-contains-a-denial-of-service-vulnerability-in-the-tcn-write-to-bytebuffer-bio-write-callback-that-overreports-bytes-con2026-10-26 https://bugrater.com/releases/cve-2026-116542-netty-netty-tcnative-before-2-0-84-final-contains-an-sni-hostname-spoofing-vulnerability-that-allows-remote-unauthenticated-clients-to-alter-hostnames-via-jni-n2026-10-26 https://bugrater.com/releases/cve-2026-116543-open5gs-1-3-0-through-2-8-0-contains-a-heap-out-of-bounds-write-vulnerability-in-parse-multipart-that-allows-unauthenticated-attackers-to-corrupt-memory-by-su2026-10-26 https://bugrater.com/releases/cve-2026-116544-open5gs-2-6-1-through-2-8-0-contains-an-out-of-bounds-read-vulnerability-in-parse-scheme-output-in-lib-sbi-conv-c-during-suci-de-concealment-due-to-incomplete2026-10-26 https://bugrater.com/releases/cve-2026-85297-bucket-squatting-in-google-cloud-run-mcp-versions-prior-to-1-11-0-on-google-cloud-platform-allows-an-attacker-to-intercept-and-access-proprietary-source-code-e2026-10-26 https://bugrater.com/releases/cve-2026-93846-mattermost-versions-11-7-x-11-7-10-fail-to-restrict-which-built-in-roles-can-be-assigned-to-a-team-member-via-the-api-which-allows-a-team-admin-to-grant-a-t2026-10-26 https://bugrater.com/releases/cve-2026-114710-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-vulnerability-in-wp-chill-gallery-photoblocks-photoblocks-grid-gallery-allo2026-10-26 https://bugrater.com/releases/cve-2026-115597-missing-authorization-vulnerability-in-thimpress-learnpress-learnpress-allows-exploiting-incorrectly-configured-access-control-security-levels-this-issue-affect2026-10-26 https://bugrater.com/releases/cve-2026-115598-missing-authorization-vulnerability-in-thimpress-learnpress-learnpress-allows-exploiting-incorrectly-configured-access-control-security-levels-this-issue-affect2026-10-26 https://bugrater.com/releases/cve-2026-116371-a-weakness-has-been-identified-in-akuvox-akubela-hypanel-ps51-51-130-40-26-the-impacted-element-is-an-unknown-function-of-the-file-login-executing-a-manipula2026-10-26 https://bugrater.com/releases/cve-2026-116384-a-weakness-has-been-identified-in-bdtask-garage-24-garage-management-software-1-0-this-vulnerability-affects-unknown-code-of-the-component-backend-executing-a2026-10-26 https://bugrater.com/releases/cve-2026-116388-missing-authorization-vulnerability-in-tms-amelia-ameliabooking-allows-exploiting-incorrectly-configured-access-control-security-levels-this-issue-affects-ameli2026-10-26 https://bugrater.com/releases/cve-2026-116395-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-vulnerability-in-bplugins-lightbox-block-lightbox-block-allows-stored-xss-t2026-10-26 https://bugrater.com/releases/cve-2026-116396-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-vulnerability-in-tms-amelia-ameliabooking-allows-stored-xss-this-issue-affe2026-10-26 https://bugrater.com/releases/cve-2026-116403-concurrent-execution-using-shared-resource-with-improper-synchronization-race-condition-vulnerability-in-awesomemotive-easy-digital-downloads-easy-digital-d2026-10-26 https://bugrater.com/releases/cve-2026-116612-a-flaw-was-found-in-gstreamer-editing-services-gst-editing-services-a-ges-project-file-can-embed-an-arbitrary-gstreamer-pipeline-description-as-an-effect-def2026-10-26 https://bugrater.com/releases/cve-2026-71455-cleartext-storage-of-sensitive-information-in-memory-vulnerability-in-johnson-controls-kantech-entrapass-allows-retrieve-embedded-sensitive-data-this-issue-af2026-10-26 https://bugrater.com/releases/cve-2026-71456-use-of-hard-coded-cryptographic-key-vulnerability-in-johnson-controls-kantech-entrapass-allows-padding-oracle-crypto-attack-this-issue-affects-kantech-entrapa2026-10-26 https://bugrater.com/releases/cve-2026-105608-hashicorp-consul-and-consul-enterprise-are-vulnerable-to-an-authorization-bypass-in-service-mesh-proxy-registration-this-may-allow-a-user-with-service-write-pe2026-10-26 https://bugrater.com/releases/cve-2026-105626-hashicorp-consul-and-consul-enterprise-are-vulnerable-to-a-denial-of-service-in-the-http-api-that-may-allow-an-unauthenticated-attacker-to-exhaust-memory-on-a-c2026-10-26 https://bugrater.com/releases/cve-2026-105765-hashicorp-consul-and-consul-enterprise-1-17-0-up-to-2-0-4-are-vulnerable-to-an-authorization-bypass-in-the-agent-s-service-mesh-leaf-certificate-api-that-may-al2026-10-26 https://bugrater.com/releases/cve-2026-111404-concurrent-execution-using-shared-resource-with-improper-synchronization-race-condition-vulnerability-in-villatheme-photo-reviews-for-woocommerce-woo-photo2026-10-26 https://bugrater.com/releases/cve-2026-112839-missing-authorization-vulnerability-in-villatheme-customer-coupons-for-woocommerce-woo-customer-coupons-allows-exploiting-incorrectly-configured-access-control2026-10-26 https://bugrater.com/releases/cve-2026-115804-hashicorp-consul-and-consul-enterprise-are-vulnerable-to-an-authorization-bypass-in-health-check-registration-that-may-allow-an-authenticated-user-to-modify-hea2026-10-26 https://bugrater.com/releases/cve-2026-115966-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-vulnerability-in-bplugins-typing-text-give-your-texts-many-typing-effects2026-10-26 https://bugrater.com/releases/cve-2026-116385-a-security-vulnerability-has-been-detected-in-bdtask-garage-24-garage-management-software-1-0-this-issue-affects-some-unknown-processing-of-the-file-edit-prof2026-10-26 https://bugrater.com/releases/cve-2026-116398-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-vulnerability-in-bplugins-content-slider-block-content-slider-block-allows2026-10-26 https://bugrater.com/releases/cve-2026-116400-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-vulnerability-in-bplugins-button-block-button-block-allows-stored-xss-this2026-10-26 https://bugrater.com/releases/cve-2026-116408-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-vulnerability-in-wp-chill-gallery-photoblocks-photoblocks-grid-gallery-allo2026-10-26 https://bugrater.com/releases/cve-2026-116461-a-vulnerability-was-determined-in-omega-solution-restro-pos-up-to-20261026-this-impacts-an-unknown-function-of-the-file-sale-invoice-executing-a-manipulatio2026-10-26 https://bugrater.com/releases/cve-2026-116463-a-vulnerability-was-identified-in-faststone-image-viewer-up-to-8-5-affected-is-the-function-fun-0062d96c-of-the-component-box-average-downsampler-engine-the-m2026-10-26 https://bugrater.com/releases/cve-2026-116634-omniroute-3-8-50-before-3-8-52-contains-a-missing-authentication-vulnerability-that-allows-unauthenticated-attackers-to-issue-sync-tokens-via-post-api-sync-tok2026-10-26 https://bugrater.com/releases/cve-2026-70379-when-the-vsolution-matrix-feature-is-enabled-affected-devices-may-make-current-screen-content-available-through-an-unauthenticated-rtsp-rtp-stream-to-hosts-on2026-10-26 https://bugrater.com/releases/cve-2026-72752-routinator-runs-out-of-memory-when-the-json-output-is-requested-many-times-concurrently-this-condition-can-be-triggered-maliciously-by-an-attacker-by-opening-a2026-10-26 https://bugrater.com/releases/cve-2026-72753-when-routinator-encounters-an-rrdp-notification-file-with-gaps-in-the-delta-entries-it-is-still-accepted-and-parsed-potentially-leading-to-missing-data-if-it2026-10-26 https://bugrater.com/releases/cve-2026-72754-when-routinator-encounters-a-crl-with-many-entries-it-may-hang-or-run-out-of-memory-if-routinator-encounters-a-crl-file-with-the-wrong-encoding-it-may-exit2026-10-26 https://bugrater.com/releases/cve-2026-72755-routinator-stores-a-newly-retrieved-ta-certificate-via-https-in-cache-without-validation-potentially-overwriting-a-known-good-ta-certificate-even-if-validation2026-10-26 https://bugrater.com/releases/cve-2026-72756-routinator-exits-when-an-rsync-uri-for-a-file-obtained-over-rrdp-contains-a-path-that-cannot-be-stored-on-disk-such-as-too-long-file-names-and-folder-names-th2026-10-26 https://bugrater.com/releases/cve-2026-72757-routinator-runs-out-of-open-connections-on-the-http-server-when-many-connections-are-opened-but-never-closed-leaving-the-http-server-unavailable-this-conditio2026-10-26 https://bugrater.com/releases/cve-2026-72758-when-parsing-an-as-range-in-routinator-if-the-maximum-value-of-the-range-is-smaller-than-the-minimum-value-of-the-range-routinator-will-never-reach-the-maximu2026-10-26 https://bugrater.com/releases/cve-2026-110720-consul-k8s-versions-0-42-0-and-later-are-vulnerable-to-a-cross-namespace-authorization-bypass-in-component-acl-binding-rules-that-may-allow-an-attacker-to-obtai2026-10-26 https://bugrater.com/releases/cve-2026-116467-a-security-flaw-has-been-discovered-in-ggml-org-llama-cpp-up-to-0-7-0-affected-by-this-vulnerability-is-an-unknown-functionality-of-the-file-src-llama-sampler2026-10-26 https://bugrater.com/releases/cve-2026-116471-a-security-flaw-has-been-discovered-in-bkwld-decoy-up-to-5-11-1-the-impacted-element-is-an-unknown-function-of-the-file-policy-php-of-the-component-authorizati2026-10-26 https://bugrater.com/releases/cve-2026-116476-a-weakness-has-been-identified-in-a2aproject-a2a-dotnet-up-to-1-0-0-preview3-the-affected-element-is-the-function-taskprojection-applystatus-of-the-component-t2026-10-26 https://bugrater.com/releases/cve-2026-116477-a-security-vulnerability-has-been-detected-in-a2aproject-a2a-dotnet-up-to-1-0-0-preview2-the-impacted-element-is-the-function-a2ajsonrpcprocessor-processreques2026-10-26 https://bugrater.com/releases/cve-2026-116478-a-vulnerability-was-detected-in-a2aproject-a2a-go-up-to-2-4-0-this-affects-the-function-createexecutor-of-the-file-a2asrv-agentexec-go-of-the-component-push-no2026-10-26 https://bugrater.com/releases/cve-2026-116479-a-flaw-has-been-found-in-a2aproject-a2a-java-up-to-1-2-0-final-this-impacts-the-function-getmessage-of-the-component-json-rpc-error-handler-this-manipulation2026-10-26 https://bugrater.com/releases/cve-2026-116482-a-vulnerability-has-been-found-in-subhajitkhan-online-clinic-management-system-up-to-e9ee77a8827a1446220fa07ee693dc4d9a29a578-affected-is-an-unknown-function-o2026-10-26 https://bugrater.com/releases/cve-2026-65625-the-pure-erlang-aes-gcm-fallback-in-jose-jwa-aes-derives-the-number-of-verified-authentication-tag-bits-from-the-attacker-supplied-tag-itself-in-the-aes-gcm2026-10-26 https://bugrater.com/releases/cve-2026-65626-the-pure-erlang-rsaes-pkcs1-v1-5-decryption-in-the-jose-jwa-pkcs1-module-is-a-bleichenbacher-padding-oracle-eme-pkcs1-decode-2-returns-the-recovered-message-wh2026-10-26 https://bugrater.com/releases/cve-2026-65627-improper-handling-of-highly-compressed-data-data-amplification-vulnerability-in-potatosalad-jose-erlang-jose-allows-a-remote-attacker-to-exhaust-a-node-s-me2026-10-26 https://bugrater.com/releases/cve-2026-65628-jose-jwk-shared-secret-2-exposed-in-elixir-as-jose-jwk-shared-secret-2-derives-an-ecdh-shared-secret-from-two-jwks-its-first-function-clause-only-matches-whe2026-10-26 https://bugrater.com/releases/cve-2026-65629-use-of-password-hash-with-insufficient-computational-effort-in-the-jose-library-allows-an-attacker-who-obtains-a-password-encrypted-private-key-export-to-recove2026-10-26 https://bugrater.com/releases/cve-2026-65630-observable-timing-discrepancy-vulnerability-in-potatosalad-jose-allows-recovery-of-a-long-term-x25519-private-key-through-a-timing-side-channel-in-the-pure-erla2026-10-26 https://bugrater.com/releases/cve-2026-65631-inefficient-algorithmic-complexity-in-erlang-jose-allows-an-unauthenticated-remote-attacker-to-cause-a-cpu-exhaustion-denial-of-service-by-submitting-a-crafted2026-10-26 https://bugrater.com/releases/cve-2026-65632-the-jose-library-accepts-ecdsa-es256-es256k-es384-and-es512-jws-signatures-of-a-non-canonical-length-when-verifying-an-ecdsa-signature-jose-jwk-kty-ec-ve2026-10-26 https://bugrater.com/releases/cve-2026-70380-a-denial-of-service-vulnerability-has-been-identified-in-the-miracast-over-infrastructure-connection-establishment-mice-service-an-unauthenticated-attacker-w2026-10-26 https://bugrater.com/releases/cve-2026-70381-an-access-control-vulnerability-has-been-identified-in-the-web-server-configuration-some-resources-intended-for-on-device-use-only-could-be-accessed-remotely-b2026-10-26 https://bugrater.com/releases/cve-2026-70382-some-externally-supplied-values-stored-by-the-device-may-be-rendered-in-the-web-interface-without-sufficient-output-encoding-an-attacker-who-can-influence-one2026-10-26 https://bugrater.com/releases/lenovo-security-releases-october-20262026-10-27 https://bugrater.com/releases/bitcoinj-security-releases-october-20262026-10-27 https://bugrater.com/releases/imprintlab-security-releases-october-20262026-10-27 https://bugrater.com/releases/ultralytics-security-releases-october-20262026-10-27 https://bugrater.com/releases/deltaww-security-releases-october-20262026-10-27 https://bugrater.com/releases/ays-pro-security-releases-october-20262026-10-27 https://bugrater.com/releases/moxa-security-releases-october-20262026-10-27 https://bugrater.com/releases/wpcodefactory-security-releases-october-20262026-10-27 https://bugrater.com/releases/asadkn-security-releases-october-20262026-10-27 https://bugrater.com/releases/extendthemes-security-releases-october-20262026-10-27 https://bugrater.com/releases/themeisle-security-releases-october-20262026-10-27 https://bugrater.com/releases/gijo-security-releases-october-20262026-10-27 https://bugrater.com/releases/goratech-security-releases-october-20262026-10-27 https://bugrater.com/releases/dokaninc-security-releases-october-20262026-10-27 https://bugrater.com/releases/wppool-security-releases-october-20262026-10-27 https://bugrater.com/releases/softaculous-security-releases-october-20262026-10-27 https://bugrater.com/releases/complianz-security-releases-october-20262026-10-27 https://bugrater.com/releases/wpmudev-security-releases-october-20262026-10-27 https://bugrater.com/releases/mpol-security-releases-october-20262026-10-27 https://bugrater.com/releases/cyberlord92-security-releases-october-20262026-10-27 https://bugrater.com/releases/joedolson-security-releases-october-20262026-10-27 https://bugrater.com/releases/wpchill-security-releases-october-20262026-10-27 https://bugrater.com/releases/teamfunnelkit-security-releases-october-20262026-10-27 https://bugrater.com/releases/instawp-security-releases-october-20262026-10-27 https://bugrater.com/releases/properfraction-security-releases-october-20262026-10-27 https://bugrater.com/releases/niklaslindemann-security-releases-october-20262026-10-27 https://bugrater.com/releases/klarnaplugin-security-releases-october-20262026-10-27 https://bugrater.com/releases/wpdevteam-security-releases-october-20262026-10-27 https://bugrater.com/releases/getwpfunnels-security-releases-october-20262026-10-27 https://bugrater.com/releases/posimyththemes-security-releases-october-20262026-10-27 https://bugrater.com/releases/elvinhaci-security-releases-october-20262026-10-27 https://bugrater.com/releases/cozmoslabs-security-releases-october-20262026-10-27 https://bugrater.com/releases/themefic-security-releases-october-20262026-10-27 https://bugrater.com/releases/croixhaug-security-releases-october-20262026-10-27 https://bugrater.com/releases/rilwis-security-releases-october-20262026-10-27 https://bugrater.com/releases/johnny5-security-releases-october-20262026-10-27 https://bugrater.com/releases/gpriday-security-releases-october-20262026-10-27 https://bugrater.com/releases/wordpresschef-security-releases-october-20262026-10-27 https://bugrater.com/releases/appsbd-security-releases-october-20262026-10-27 https://bugrater.com/releases/fullworks-security-releases-october-20262026-10-27 https://bugrater.com/releases/adulau-security-releases-october-20262026-10-27 https://bugrater.com/releases/daext-security-releases-october-20262026-10-27 https://bugrater.com/releases/ontraport-security-releases-october-20262026-10-27 https://bugrater.com/releases/johndarrel-security-releases-october-20262026-10-27 https://bugrater.com/releases/jfarthing84-security-releases-october-20262026-10-27 https://bugrater.com/releases/optiuser-security-releases-october-20262026-10-27 https://bugrater.com/releases/magazine3-security-releases-october-20262026-10-27 https://bugrater.com/releases/mobile-builder-security-releases-october-20262026-10-27 https://bugrater.com/releases/ios-27-2-and-ipados-27-22026-10-27 https://bugrater.com/releases/ios-26-7-2-and-ipados-26-7-22026-10-27 https://bugrater.com/releases/ios-18-7-11-and-ipados-18-7-112026-10-27 https://bugrater.com/releases/cve-2025-13833-a-vulnerability-exists-in-secureconnector-for-windows-when-the-additional-appliance-connections-setting-is-enabled-and-the-agent-s-configuration-file-contains2026-10-27 https://bugrater.com/releases/cve-2026-116502-a-flaw-has-been-found-in-turboderp-org-exllamav2-up-to-0-3-2-the-impacted-element-is-the-function-qmatrix-make-sequential-of-the-file-exllamav2-exllamav2-ext2026-10-27 https://bugrater.com/releases/cve-2026-116504-a-vulnerability-has-been-found-in-totolink-a950rg-4-1-2cu-5268-b20221104-this-affects-the-function-setcloudupgradefw-of-the-file-lib-cste-modules-upgrade-so-of2026-10-27 https://bugrater.com/releases/cve-2026-116505-a-vulnerability-was-found-in-totolink-a950rg-4-1-2cu-5268-b20221104-this-impacts-the-function-getdeviceinfo-of-the-file-var-lib-misc-udhcpd-leases-of-the-comp2026-10-27 https://bugrater.com/releases/cve-2026-116506-a-vulnerability-was-determined-in-totolink-a950rg-4-1-2cu-5268-b20221104-affected-is-the-function-apmib-set-of-the-file-firewall-so-this-manipulation-causes-c2026-10-27 https://bugrater.com/releases/cve-2026-116671-infinite-loop-in-xpdf-4-06-and-earlier-due-to-incorrect-validation-of-progression-order-field-in-jpeg-2000-image2026-10-27 https://bugrater.com/releases/security-vulnerabilities-fixed-in-firefox-for-ios-156-12026-10-27 https://bugrater.com/releases/security-vulnerabilities-fixed-in-firefox-esr-115-432026-10-27 https://bugrater.com/releases/security-vulnerabilities-fixed-in-firefox-1582026-10-27 https://bugrater.com/releases/cve-2026-116507-a-vulnerability-was-identified-in-totolink-a950rg-4-1-2cu-5268-b20221104-affected-by-this-vulnerability-is-the-function-getlanguagecfg-of-the-file-global-so-s2026-10-27 https://bugrater.com/releases/cve-2026-116508-a-security-flaw-has-been-discovered-in-totolink-a950rg-4-1-2cu-5268-b20221104-affected-by-this-issue-is-the-function-sub-402340-of-the-file-infostat-cgi-of-the2026-10-27 https://bugrater.com/releases/cve-2026-116514-a-weakness-has-been-identified-in-itsourcecode-airline-reservation-system-1-0-this-affects-an-unknown-part-of-the-file-book-flight-php-executing-a-manipulati2026-10-27 https://bugrater.com/releases/cve-2026-116515-a-security-vulnerability-has-been-detected-in-itsourcecode-online-book-store-1-0-this-vulnerability-affects-unknown-code-of-the-file-book-php-the-manipulatio2026-10-27 https://bugrater.com/releases/cve-2026-116723-fltk-through-1-4-5-contains-a-stack-based-buffer-overflow-vulnerability-in-fl-bmp-image-load-bmp-that-allows-attackers-to-corrupt-stack-memory-by-supplying2026-10-27 https://bugrater.com/releases/cve-2026-116724-fltk-through-1-4-5-contains-an-integer-overflow-vulnerability-in-fl-bmp-image-load-bmp-that-causes-undersized-pixel-buffer-allocation-from-file-supplied-wid2026-10-27 https://bugrater.com/releases/cve-2026-116725-gbsplay-through-0-0-103-contains-an-out-of-bounds-read-vulnerability-in-mapper-map-in-mapper-c-that-fails-to-reject-rom-bank-indexes-beyond-the-rom-size-caus2026-10-27 https://bugrater.com/releases/cve-2026-116726-gbsplay-through-0-0-103-contains-a-heap-out-of-bounds-read-vulnerability-in-gbr-open-in-gbs-c-that-fails-to-verify-file-length-before-scanning-the-gbr-rom-tit2026-10-27 https://bugrater.com/releases/cve-2026-116727-gbsplay-through-0-0-103-contains-a-heap-out-of-bounds-read-vulnerability-in-vgm-open-in-gbs-c-that-walks-the-vgm-command-stream-without-bounds-checks-attacke2026-10-27 https://bugrater.com/releases/cve-2026-116728-libfvde-through-20260923-contains-a-heap-out-of-bounds-read-vulnerability-in-libfvde-encrypted-metadata-read-type-0x0024-because-xml-plist-data-size-is-not-ch2026-10-27 https://bugrater.com/releases/cve-2026-116729-libfvde-through-20260923-contains-a-heap-out-of-bounds-read-vulnerability-in-libfvde-encrypted-metadata-read-type-0x001a-caused-by-an-unbounded-strlen-on-embe2026-10-27 https://bugrater.com/releases/cve-2026-116730-furnace-through-0-6-8-3-contains-an-out-of-bounds-heap-read-vulnerability-in-divengine-loadftm-in-src-engine-fileops-ftm-cpp-triggered-by-an-unbounded-dpcm2026-10-27 https://bugrater.com/releases/cve-2026-116731-furnace-through-0-6-8-3-contains-an-out-of-bounds-write-vulnerability-in-divengine-loadftm-that-allows-attackers-to-corrupt-heap-memory-via-an-unchecked-subs2026-10-27 https://bugrater.com/releases/cve-2026-116732-libdwarf-through-2-3-3-contains-a-heap-out-of-bounds-read-vulnerability-in-dwarf-debug-addr-table-that-omits-the-table-starting-offset-when-validating-debug2026-10-27 https://bugrater.com/releases/cve-2026-116733-flatcc-through-0-6-4-contains-an-out-of-bounds-read-vulnerability-in-flatcc-json-parser-number-that-allows-attackers-to-read-past-the-input-buffer-via-numbers2026-10-27 https://bugrater.com/releases/cve-2026-116734-flatcc-through-0-6-4-contains-an-integer-overflow-vulnerability-in-the-check-header-function-of-the-flatbuffers-verifier-because-its-overflow-guard-is-dead-code2026-10-27 https://bugrater.com/releases/cve-2026-116735-libpff-through-20260926-contains-an-off-by-one-bounds-check-in-libpff-table-read-6c-record-entries-that-allows-attackers-to-trigger-a-heap-out-of-bounds-read-vi2026-10-27 https://bugrater.com/releases/cve-2026-116736-libpff-through-20260926-contains-a-heap-out-of-bounds-read-vulnerability-in-libpff-table-read-values-array-because-a-7c-column-definition-s-values-array-size-is2026-10-27 https://bugrater.com/releases/cve-2026-116737-libphdi-through-20260902-contains-a-heap-out-of-bounds-read-vulnerability-in-libphdi-data-files-get-extent-data-file-path-that-uses-the-directory-prefix-length2026-10-27 https://bugrater.com/releases/cve-2026-116738-vmime-through-0-9-2-contains-an-integer-underflow-in-the-uuencoder-decode-function-that-allows-remote-attackers-to-trigger-a-stack-based-buffer-overflow-via-cr2026-10-27 https://bugrater.com/releases/cve-2026-116739-vmime-through-0-9-2-contains-an-information-disclosure-vulnerability-in-the-uuencoder-decode-function-that-writes-uninitialized-stack-memory-into-decoded-outpu2026-10-27 https://bugrater.com/releases/cve-2026-116740-libcss-through-0-9-2-contains-a-null-pointer-dereference-vulnerability-in-mq-parse-media-query-that-allows-remote-attackers-to-crash-consumers-by-supplying-me2026-10-27 https://bugrater.com/releases/cve-2026-116741-speex-libspeex-through-1-2-1-contains-an-out-of-bounds-write-vulnerability-in-speex-bits-read-whole-bytes-in-libspeex-bits-c-that-mishandles-length-truncati2026-10-27 https://bugrater.com/releases/cve-2026-116742-htslib-through-1-24-contains-a-heap-out-of-bounds-write-and-read-vulnerability-in-bgzf-index-load-hfile-in-bgzf-c-that-allows-attackers-to-corrupt-heap-memory2026-10-27 https://bugrater.com/releases/cve-2026-116743-libyal-libmsiecf-through-20260525-contains-a-double-free-vulnerability-in-libmsiecf-url-values-read-data-that-allows-attackers-to-corrupt-heap-memory-via-craf2026-10-27 https://bugrater.com/releases/cve-2026-116744-ntop-ndpi-through-6-0-contains-an-out-of-bounds-read-vulnerability-in-dissect-softether-host-fqdn-in-softether-c-that-compares-host-name-using-the-consumed-by2026-10-27 https://bugrater.com/releases/cve-2026-116745-qloapps-through-1-7-0-contains-an-information-disclosure-vulnerability-in-orderconfirmationcontroller-init-that-allows-unauthenticated-attackers-to-obtain-gu2026-10-27 https://bugrater.com/releases/cve-2026-116746-qloapps-1-6-0-through-1-7-0-contains-a-missing-authorization-vulnerability-in-the-qlohotelreview-module-s-addreview-ajax-action-that-allows-unauthenticated-atta2026-10-27 https://bugrater.com/releases/cve-2026-116747-kener-3-0-0-before-4-1-10-contains-an-authentication-bypass-vulnerability-that-allows-unauthenticated-attackers-to-forge-session-tokens-by-using-the-hardcoded-d2026-10-27 https://bugrater.com/releases/cve-2026-116748-transmission-4-0-0-before-4-1-3-contains-a-permissive-cors-vulnerability-in-handle-request-in-rpc-server-cc-that-exposes-the-x-transmission-session-id-anti-cs2026-10-27 https://bugrater.com/releases/cve-2026-116554-a-flaw-has-been-found-in-argilla-up-to-2-8-0-the-affected-element-is-the-function-dataset-from-disk-of-the-file-argilla-frontend-components-features-annotation2026-10-27 https://bugrater.com/releases/cve-2026-116555-a-vulnerability-has-been-found-in-argilla-up-to-2-8-0-the-impacted-element-is-an-unknown-function-of-the-file-argilla-frontend-components-features-annotation-c2026-10-27 https://bugrater.com/releases/cve-2026-116556-a-vulnerability-was-found-in-argilla-up-to-2-8-0-this-affects-an-unknown-function-of-the-file-argilla-frontend-components-features-annotation-container-fields2026-10-27 https://bugrater.com/releases/cve-2026-116602-a-vulnerability-was-detected-in-sourcecodester-online-food-ordering-system-1-0-this-issue-affects-the-function-unlink-of-the-file-admin-delete-php-performing2026-10-27 https://bugrater.com/releases/cve-2026-2270-a-confused-deputy-attack-exists-in-the-statefulset-controller-that-allows-a-user-with-namespace-scoped-write-permissions-on-statefulset-and-controllerrevision-o2026-10-27 https://bugrater.com/releases/cve-2026-76654-an-ntlm-coercion-vulnerability-exists-on-windows-nodes-when-the-subpath-supplied-in-a-pod-s-volumemounts-is-set-to-a-symbolic-link-that-points-to-an-attacker-co2026-10-27 https://bugrater.com/releases/cve-2026-111422-in-apache-airflow-providers-ssh-before-7-0-1-sshremotejoboperator-quoted-the-values-of-its-templated-environment-parameter-only-once-although-they-are-place2026-10-27 https://bugrater.com/releases/cve-2026-116603-a-flaw-has-been-found-in-sourcecodester-online-food-ordering-system-1-0-impacted-is-an-unknown-function-of-the-file-admin-add-food-php-executing-a-manipulatio2026-10-27 https://bugrater.com/releases/cve-2026-116604-a-vulnerability-has-been-found-in-sourcecodester-online-food-ordering-system-1-0-the-affected-element-is-an-unknown-function-of-the-file-admin-delete-admin-php2026-10-27 https://bugrater.com/releases/cve-2026-116800-wwbn-avideo-before-29-5-0-contains-a-local-file-inclusion-vulnerability-that-allows-unauthenticated-attackers-to-include-php-files-outside-the-locale-directory2026-10-27 https://bugrater.com/releases/cve-2026-116801-parse-server-before-8-6-105-and-9-0-0-before-9-10-5-alpha-6-does-not-validate-the-owning-object-reference-in-relatedto-relation-queries-so-supplying-a-query-o2026-10-27 https://bugrater.com/releases/cve-2026-116802-dompurify-before-3-4-17-contains-a-cross-site-scripting-vulnerability-that-allows-attackers-to-bypass-the-smil-attributename-href-guard-when-parser-media-type-i2026-10-27 https://bugrater.com/releases/cve-2026-116803-dompurify-before-3-4-17-contains-a-cross-site-scripting-vulnerability-that-allows-attackers-to-keep-event-handlers-armed-when-an-in-place-hook-removes-a-parent2026-10-27 https://bugrater.com/releases/cve-2026-116804-dompurify-from-3-4-4-before-3-4-17-contains-a-safe-for-templates-bypass-that-lets-attackers-preserve-template-expressions-in-attached-shadow-roots-when-using-re2026-10-27 https://bugrater.com/releases/cve-2026-116805-openpanel-before-3-0-0-contains-an-information-disclosure-vulnerability-that-allows-read-level-project-members-to-obtain-argon2id-hashes-of-ingestion-credential2026-10-27 https://bugrater.com/releases/cve-2026-116806-openpanel-before-3-0-0-contains-a-missing-authorization-vulnerability-in-the-onboarding-project-trpc-mutation-that-allows-non-admin-organization-members-to-crea2026-10-27 https://bugrater.com/releases/cve-2026-116809-openpanel-before-3-0-0-contains-a-missing-authorization-vulnerability-in-the-event-bots-trpc-procedure-that-allows-unauthenticated-attackers-to-read-bot-events2026-10-27 https://bugrater.com/releases/cve-2026-116810-openpanel-before-3-0-0-contains-a-missing-authorization-vulnerability-that-allows-unauthenticated-attackers-to-read-any-project-s-annotations-by-calling-the-pub2026-10-27 https://bugrater.com/releases/cve-2026-116811-openpanel-before-3-0-0-contains-a-sandbox-escape-vulnerability-in-the-js-runtime-validator-that-allows-a-project-member-to-bypass-the-ast-allowlist-by-aliasing2026-10-27 https://bugrater.com/releases/cve-2026-116812-openpanel-before-3-0-0-contains-a-sql-injection-vulnerability-in-profilecolumnaccess-in-cohort-service-ts-that-allows-project-read-members-to-inject-sql-by-supp2026-10-27 https://bugrater.com/releases/cve-2026-116813-openpanel-before-3-0-0-contains-an-sql-injection-vulnerability-in-conversionservice-getconversion-that-allows-project-read-members-and-share-link-holders-to-inj2026-10-27 https://bugrater.com/releases/cve-2026-116814-openpanel-before-3-0-0-contains-an-information-exposure-vulnerability-that-writes-database-connection-urls-and-email-template-data-to-standard-output-logs-user2026-10-27 https://bugrater.com/releases/cve-2026-116815-openpanel-before-3-0-0-contains-an-improper-escaping-vulnerability-in-sankey-service-ts-that-allows-authenticated-project-members-to-break-clickhouse-string-lit2026-10-27 https://bugrater.com/releases/cve-2026-116817-openpanel-before-3-0-0-contains-a-missing-authentication-vulnerability-that-allows-unauthenticated-attackers-to-access-the-bull-board-dashboard-served-on-the-wo2026-10-27 https://bugrater.com/releases/cve-2026-116818-openpanel-before-3-0-0-contains-an-unauthenticated-clickhouse-sql-injection-vulnerability-that-allows-remote-attackers-to-inject-sql-through-the-projectid-param2026-10-27 https://bugrater.com/releases/cve-2026-116819-openpanel-before-3-0-0-contains-an-information-disclosure-vulnerability-that-allows-read-level-project-members-to-obtain-plaintext-integration-secrets-because-t2026-10-27 https://bugrater.com/releases/cve-2026-116820-yeswiki-from-4-6-0-before-4-7-0-contains-an-information-disclosure-vulnerability-that-allows-unauthenticated-attackers-to-view-assembled-sql-queries-by-adding-t2026-10-27 https://bugrater.com/releases/cve-2026-116821-yeswiki-before-4-7-0-contains-a-read-acl-bypass-in-aclservice-updaterequestwithacl-which-interpolates-usernames-into-sql-like-patterns-without-escaping-the2026-10-27 https://bugrater.com/releases/cve-2026-116822-yeswiki-before-4-7-0-contains-a-path-traversal-vulnerability-in-bazarlisteaction-that-allows-unauthenticated-attackers-to-select-arbitrary-templates-within-the2026-10-27 https://bugrater.com/releases/cve-2026-116823-yeswiki-before-4-7-0-contains-a-reflected-cross-site-scripting-vulnerability-that-allows-unauthenticated-attackers-to-inject-javascript-by-supplying-query-param2026-10-27 https://bugrater.com/releases/cve-2026-116824-yeswiki-before-4-7-0-contains-a-stored-cross-site-scripting-vulnerability-in-handlers-page-referrers-sites-php-that-allows-unauthenticated-attackers-to-inject-s2026-10-27 https://bugrater.com/releases/cve-2026-116825-yeswiki-from-4-6-2-before-4-7-0-lacks-replay-protection-in-httpsignatureservice-verifysignature-which-never-validates-the-date-header-or-tracks-seen-signatu2026-10-27 https://bugrater.com/releases/cve-2026-116826-yeswiki-before-4-7-0-contains-a-server-side-request-forgery-vulnerability-in-duplicationmanager-downloadfile-that-allows-authenticated-administrators-to-make2026-10-27 https://bugrater.com/releases/cve-2026-116827-yeswiki-before-4-7-0-contains-a-server-side-request-forgery-vulnerability-in-the-bazar-csv-import-copyurltolocalfile-function-that-allows-authenticated-admini2026-10-27 https://bugrater.com/releases/cve-2024-58399-llama-cpp-before-b2731-contains-an-out-of-bounds-read-vulnerability-in-llama-model-loader-that-allows-attackers-to-read-memory-outside-the-mapped-model-file-via2026-10-27 https://bugrater.com/releases/cve-2024-58400-llama-cpp-before-b3701-contains-an-out-of-bounds-read-vulnerability-in-llama-decode-internal-and-llama-encode-internal-that-allows-remote-unauthenticated-attack2026-10-27 https://bugrater.com/releases/cve-2025-71439-llama-cpp-before-b5649-contains-a-heap-out-of-bounds-read-vulnerability-in-llama-vocab-impl-print-info-that-allows-attackers-to-crash-model-loading-via-over2026-10-27 https://bugrater.com/releases/cve-2026-116605-a-vulnerability-was-found-in-sourcecodester-online-food-ordering-system-1-0-the-impacted-element-is-an-unknown-function-of-the-file-order-php-the-manipulation2026-10-27 https://bugrater.com/releases/cve-2026-116608-a-security-vulnerability-has-been-detected-in-damo-academy-videollama2-up-to-1-1-affected-by-this-issue-is-the-function-load-pretrained-model-of-the-file-video2026-10-27 https://bugrater.com/releases/cve-2026-116620-a-security-vulnerability-has-been-detected-in-tencent-rapidjson-up-to-1-1-0-this-issue-affects-the-function-genericstringstream-utf8-char-take-in-the-librar2026-10-27 https://bugrater.com/releases/cve-2026-116623-a-vulnerability-was-detected-in-code-projects-simple-content-management-system-1-0-impacted-is-an-unknown-function-of-the-file-web-admin-welcome-php-of-the-co2026-10-27 https://bugrater.com/releases/cve-2026-116816-llama-cpp-b5899-before-b10261-contains-a-heap-out-of-bounds-write-vulnerability-in-llm-tokenizer-plamo2-build-that-allows-attackers-to-corrupt-heap-memory-via2026-10-27 https://bugrater.com/releases/cve-2026-116829-llama-cpp-b10398-before-b11301-contains-an-integer-overflow-vulnerability-in-gguf-init-from-reader-that-allows-attackers-to-bypass-tensor-element-count-validati2026-10-27 https://bugrater.com/releases/cve-2026-116840-llama-cpp-b5854-before-b11275-contains-an-integer-overflow-vulnerability-in-gguf-init-from-reader-that-bypasses-the-cve-2025-53630-size-check-when-padding-near2026-10-27 https://bugrater.com/releases/cve-2026-116841-devilutionx-1-4-0-through-1-5-5-contains-an-out-of-bounds-read-vulnerability-in-the-bundled-libmpq-libmpq-file-number-from-hash-function-that-allows-attackers2026-10-27 https://bugrater.com/releases/cve-2026-116842-devilutionx-1-4-0-through-1-5-5-contains-a-heap-buffer-overflow-vulnerability-in-the-bundled-libmpq-libmpq-archive-dup-routine-when-opening-crafted-mpq-archive2026-10-27 https://bugrater.com/releases/cve-2026-116843-mistral-vibe-before-3-0-3-contains-a-remote-code-execution-vulnerability-that-allows-attackers-to-run-commands-by-defining-git-filter-drivers-in-an-untrusted-re2026-10-27 https://bugrater.com/releases/cve-2026-116844-fclairamb-ftpserverlib-through-0-32-4-contains-a-cleartext-transmission-vulnerability-because-transferopen-checks-only-the-transfertls-flag-set-by-prot-not-whe2026-10-27 https://bugrater.com/releases/cve-2026-116639-a-vulnerability-was-detected-in-md-mafujul-hasan-online-payroll-management-system-up-to-a8902bf64575e325f6d6bf93a55f7bd273ec58cd-affected-is-an-unknown-functio2026-10-27 https://bugrater.com/releases/cve-2026-116640-a-flaw-has-been-found-in-saruf-ratul-hr-payroll-management-system-e7cd81477001afdee95b843fd4137894d9418c9f-3fd6f45ead9f8197510c0910f759e06ee67251e5-affected-by2026-10-27 https://bugrater.com/releases/visual-form-builder-security-releases-october-20262026-10-27 https://bugrater.com/releases/mb-custom-post-types-custom-taxonomies-security-releases-october-20262026-10-27 https://bugrater.com/releases/salon-booking-system-security-releases-october-20262026-10-27 https://bugrater.com/releases/smush-security-releases-october-20262026-10-27 https://bugrater.com/releases/otp-login-register-woocommerce-security-releases-october-20262026-10-27 https://bugrater.com/releases/product-delivery-date-for-woocommerce-security-releases-october-20262026-10-27 https://bugrater.com/releases/subscribe-to-comments-security-releases-october-20262026-10-27 https://bugrater.com/releases/wx-subscribe-security-releases-october-20262026-10-27 https://bugrater.com/releases/coinsnap-bitcoin-crowdfunding-security-releases-october-20262026-10-27 https://bugrater.com/releases/sunshinephotocart-security-releases-october-20262026-10-27 https://bugrater.com/releases/aresit-security-releases-october-20262026-10-27 https://bugrater.com/releases/realmag777-security-releases-october-20262026-10-27 https://bugrater.com/releases/hivepress-security-releases-october-20262026-10-27 https://bugrater.com/releases/bilalnaseer-security-releases-october-20262026-10-27 https://bugrater.com/releases/smub-security-releases-october-20262026-10-27 https://bugrater.com/releases/etruel-security-releases-october-20262026-10-27 https://bugrater.com/releases/ajay-security-releases-october-20262026-10-27 https://bugrater.com/releases/murgroland-security-releases-october-20262026-10-27 https://bugrater.com/releases/wpeverest-security-releases-october-20262026-10-27 https://bugrater.com/releases/tusharimran-security-releases-october-20262026-10-27 https://bugrater.com/releases/opajaap-security-releases-october-20262026-10-27 https://bugrater.com/releases/yaycommerce-security-releases-october-20262026-10-27 https://bugrater.com/releases/gemini-labs-security-releases-october-20262026-10-27 https://bugrater.com/releases/mattermost-security-releases-october-20262026-10-27 https://bugrater.com/releases/theme-one-security-releases-october-20262026-10-27 https://bugrater.com/releases/halfdata-security-releases-october-20262026-10-27 https://bugrater.com/releases/houzez-co-security-releases-october-20262026-10-27 https://bugrater.com/releases/rocketgenius-inc-security-releases-october-20262026-10-27 https://bugrater.com/releases/jeroen-peters-security-releases-october-20262026-10-27 https://bugrater.com/releases/damian-gora-security-releases-october-20262026-10-27 https://bugrater.com/releases/manuelgalan-security-releases-october-20262026-10-27 https://bugrater.com/releases/brainstormforce-security-releases-october-20262026-10-27 https://bugrater.com/releases/jeroenpeters1986-security-releases-october-20262026-10-27 https://bugrater.com/releases/surecart-security-releases-october-20262026-10-27 https://bugrater.com/releases/samuelgallegos-security-releases-october-20262026-10-27 https://bugrater.com/releases/tsg-security-releases-october-20262026-10-27 https://bugrater.com/releases/sfm-software-technologies-inc-security-releases-october-20262026-10-27 https://bugrater.com/releases/wegow-technologies-security-releases-october-20262026-10-27 https://bugrater.com/releases/liedekef-security-releases-october-20262026-10-27 https://bugrater.com/releases/nord-security-security-releases-october-20262026-10-27 https://bugrater.com/releases/ikus-soft-security-releases-october-20262026-10-27 https://bugrater.com/releases/the-webkitgtk-team-security-releases-december-20252026-10-27 https://bugrater.com/releases/maio-security-releases-october-20262026-10-27 https://bugrater.com/releases/squeeze-security-releases-october-20262026-10-27 https://bugrater.com/releases/innovs-hr-security-releases-march-20242026-10-27 https://bugrater.com/releases/ecs-security-releases-august-20262026-10-27 https://bugrater.com/releases/stylemixthemes-security-releases-july-20262026-10-27 https://bugrater.com/releases/switcorp-security-releases-october-20262026-10-27 https://bugrater.com/releases/rpm-software-management-security-releases-august-20262026-10-27 https://bugrater.com/releases/erupts-security-releases-october-20262026-10-27 https://bugrater.com/releases/aorimn-security-releases-october-20262026-10-27 https://bugrater.com/releases/pt-norther-lights-production-security-releases-october-20262026-10-27 https://bugrater.com/releases/vim-security-releases-august-20262026-10-27 https://bugrater.com/releases/liquid-web-stellarwp-security-releases-october-20262026-10-27 https://bugrater.com/releases/gocsaf-development-community-security-releases-october-20262026-10-27 https://bugrater.com/releases/athemeart-security-releases-october-20262026-10-27 https://bugrater.com/releases/arcadia-technology-llc-security-releases-october-20262026-10-27 https://bugrater.com/releases/guangzhou-juan-iot-technology-co-ltd-security-releases-october-20262026-10-27 https://bugrater.com/releases/j4care-security-releases-october-20262026-10-27 https://bugrater.com/releases/thermo-fisher-security-releases-october-20262026-10-27 https://bugrater.com/releases/5rahim-security-releases-october-20262026-10-27 https://bugrater.com/releases/cve-2026-103312-the-payment-integration-wompi-wordpress-plugin-through-4-0-1-does-not-verify-the-authenticity-of-incoming-payment-notifications-on-a-stock-install-because-the2026-10-27 https://bugrater.com/releases/cve-2026-103332-the-payex-payment-gateway-for-woocommerce-wordpress-plugin-through-1-2-10-does-not-properly-verify-the-authenticity-of-incoming-payment-notifications-relying-o2026-10-27 https://bugrater.com/releases/cve-2026-111820-the-analytics-insights-google-analytics-dashboard-for-wordpress-plugin-for-wordpress-is-vulnerable-to-stored-cross-site-scripting-via-the-page-title-in-all-ve2026-10-27 https://bugrater.com/releases/cve-2026-117468-psono-server-versions-5-3-5-through-7-2-3-used-a-permission-class-that-did-not-enforce-token-write-scope-when-claiming-a-device-code-an-authenticated-remote-at2026-10-27 https://bugrater.com/releases/cve-2026-117469-psono-server-ce-ee-versions-1-0-0-through-7-2-3-did-not-enforce-the-direction-of-file-transfer-credentials-on-file-repository-operations-an-authenticated-r2026-10-27 https://bugrater.com/releases/cve-2026-117470-psono-server-ce-ee-versions-3-1-0-through-7-2-3-did-not-consume-a-stored-webauthn-challenge-after-assertion-verification-an-unauthenticated-remote-attacker-w2026-10-27 https://bugrater.com/releases/cve-2026-117471-psono-server-ce-ee-versions-0-1-0-through-7-2-3-accepted-a-user-controlled-host-when-configuring-a-personal-duo-device-and-passed-it-to-the-duo-client-withou2026-10-27 https://bugrater.com/releases/cve-2026-117472-psono-server-ce-ee-versions-4-0-33-through-7-2-3-compared-the-request-path-for-the-bulk-secret-read-endpoint-with-a-hard-coded-unprefixed-path-in-deployment2026-10-27 https://bugrater.com/releases/cve-2026-103325-the-tiendacrypto-para-woocommerce-wordpress-plugin-through-1-2-1-does-not-correctly-verify-the-authenticity-of-its-payment-webhook-validating-the-request-signa2026-10-27 https://bugrater.com/releases/cve-2026-103359-the-paydunya-woocommerce-payment-gateway-wordpress-plugin-through-1-1-6-does-not-verify-the-authenticity-of-incoming-payment-notifications-and-until-the-gatewa2026-10-27 https://bugrater.com/releases/cve-2026-106174-a-improper-locking-vulnerability-in-fortinet-fortios-8-0-0-fortios-7-6-4-through-7-6-6-may-allow-an-unauthenticated-attacker-with-network-access-to-the-device2026-10-27 https://bugrater.com/releases/cve-2026-110910-summary-qs-stringify-with-allowemptyarrays-true-writes-the-key-of-an-empty-array-without-encoding-it-even-though-keys-are-encoded-by-default-a-key2026-10-27 https://bugrater.com/releases/cve-2026-75891-the-kirki-plugin-for-wordpress-is-vulnerable-to-privilege-escalation-via-php-object-injection-in-all-versions-up-to-and-including-6-2-5-via-deserialization-of2026-10-27 https://bugrater.com/releases/cve-2026-101034-an-attacker-who-obtained-the-hardcoded-key-could-decrypt-domain-service-account-passwords-task-run-as-credentials-and-sysprep-passwords-stored-in-or-transmitt2026-10-27 https://bugrater.com/releases/cve-2026-10511-the-jupiter-x-core-plugin-for-wordpress-is-vulnerable-to-stored-cross-site-scripting-via-the-forget-password-link-parameter-in-all-versions-up-to-and-includi2026-10-27 https://bugrater.com/releases/cve-2026-111459-an-improper-certificate-validation-vulnerability-exists-in-moxa-remote-connect-suite-mrc-client-under-certain-conditions-an-unauthenticated-attacker-with-on2026-10-27 https://bugrater.com/releases/cve-2026-111460-a-hard-coded-cryptographic-key-vulnerability-exists-in-the-oncell-g3150a-lte-series-under-certain-conditions-an-unauthenticated-remote-attacker-could-obtain-s2026-10-27 https://bugrater.com/releases/cve-2026-111461-an-os-command-injection-vulnerability-exists-in-oncell-g3150a-lte-series-when-the-sms-management-functionality-is-enabled-and-configured-a-remote-attacker-wit2026-10-27 https://bugrater.com/releases/cve-2026-16521-an-os-command-injection-vulnerability-exists-because-of-insufficient-input-filtering-an-attacker-can-inject-a-command-payload-into-a-bmc-function-the-payload2026-10-27 https://bugrater.com/releases/cve-2026-18449-the-bmc-does-not-correctly-enforce-integrity-and-encryption-requirements-for-ipmi-commands-an-attacker-may-be-able-to-craft-packets-that-execute-arbitrary-comm2026-10-27 https://bugrater.com/releases/cve-2026-18450-the-bmc-does-not-correctly-enforce-integrity-and-encryption-requirements-for-ipmi-commands-an-attacker-may-be-able-to-craft-packets-that-execute-arbitrary-comm2026-10-27 https://bugrater.com/releases/cve-2026-18451-the-html5-kvm-over-ip-console-authenticates-with-a-token-returned-by-the-web-interface-weaknesses-in-token-generation-may-allow-an-attacker-to-guess-the-sessio2026-10-27 https://bugrater.com/releases/cve-2026-65210-this-issue-may-allow-an-authenticated-ipmi-administrator-to-read-arbitrary-files-from-the-bmc-filesystem-disclosing-material-well-beyond-the-intended-ipmi-mana2026-10-27 https://bugrater.com/releases/cve-2026-65219-a-flaw-in-the-bmc-rakp-implementation-may-allow-an-attacker-to-send-a-request-followed-by-a-specially-crafted-rakp-message-and-establish-an-rmcp-session-whic2026-10-27 https://bugrater.com/releases/cve-2026-65220-a-logic-flaw-in-the-bmc-ipmi-implementation-may-allow-an-attacker-to-send-specially-crafted-rakp-messages-and-escalate-an-account-to-administrator-privileges2026-10-27 https://bugrater.com/releases/cve-2026-65211-this-issue-may-allow-an-authenticated-ipmi-administrator-to-read-and-write-arbitrary-bmc-physical-memory-and-thereby-execute-code-on-the-bmc-operating-system2026-10-27 https://bugrater.com/releases/cve-2026-65213-this-issue-may-allow-an-ipmi-authenticated-administrator-to-execute-commands-as-the-operating-system-root-user-on-the-bmc2026-10-27 https://bugrater.com/releases/cve-2026-92885-the-qode-membership-plugin-for-wordpress-is-vulnerable-to-authentication-bypass-leading-to-account-takeover-in-all-versions-up-to-and-including-2-0-6-2-via-th2026-10-27 https://bugrater.com/releases/cve-2026-102788-joomla-extension-balbooa-com-unauthenticated-sql-injection-in-gridbox-2-20-4-2-on-store-product-list-pages-the-value-of-the-sort-by-url-parameter-is-re2026-10-27 https://bugrater.com/releases/cve-2026-102789-joomla-extension-balbooa-com-missing-authorization-check-on-editor-controller-task-in-gridbox-2-20-4-2-editorcontroller-getblogposts-reads-the-order2026-10-27 https://bugrater.com/releases/cve-2026-107145-the-twofactor-gauthenticator-plugin-for-roundcube-is-vulnerable-to-brute-forcing-of-the-second-factor-code-due-to-the-lack-of-rate-limiting-an-attacker-who-ob2026-10-27 https://bugrater.com/releases/cve-2026-107146-the-twofactor-gauthenticator-plugin-for-roundcube-is-vulnerable-to-session-persistence-after-failed-2fa-verification-due-to-the-lack-of-server-side-session-des2026-10-27 https://bugrater.com/releases/cve-2026-107147-the-twofactor-gauthenticator-plugin-for-roundcube-is-vulnerable-to-2fa-authentication-bypass-by-spoofed-client-address-headers-due-to-the-lack-of-validation-of2026-10-27 https://bugrater.com/releases/cve-2026-117493-stored-cross-site-scripting-xss-in-blox-widgets-the-api-dashboards-id-widgets-id-api-accepts-html-and-javascript-content-in-the-desc-and-text-parame2026-10-27 https://bugrater.com/releases/cve-2026-117494-cross-site-scripting-xss-in-the-processing-of-svg-images-submitted-to-the-api-v2-ai-sessions-api-in-the-format-data-image-svg-xml-base64-script-tags-embedde2026-10-27 https://bugrater.com/releases/cve-2026-85299-a-missing-authorization-vulnerability-in-the-disks-createsnapshot-and-regiondisks-createsnapshot-apis-in-google-compute-engine-versions-prior-to-2026-08-31-on-g2026-10-27 https://bugrater.com/releases/cve-2026-116870-in-affected-versions-of-octopus-server-oidc-token-issuer-validation-was-performed-inconsistently-this-could-result-in-a-token-issued-from-a-suitably-configure2026-10-27 https://bugrater.com/releases/cve-2026-116871-semantic-mediawiki-3-0-0-before-7-3-1-contains-an-uncontrolled-recursion-vulnerability-in-legacyparser-getsubquerydescription-that-processes-nested-query-tok2026-10-27 https://bugrater.com/releases/cve-2026-116872-semantic-mediawiki-from-3-0-0-before-7-3-1-contains-an-algorithmic-complexity-vulnerability-in-termparser-normalize-compact-form-that-allows-unauthenticated2026-10-27 https://bugrater.com/releases/cve-2026-116873-semantic-mediawiki-from-7-3-0-before-7-3-1-contains-a-missing-authorization-vulnerability-in-the-smwtask-api-module-that-allows-unauthenticated-attackers-to-run2026-10-27 https://bugrater.com/releases/cve-2026-116874-semanticmediawiki-from-3-1-0-before-7-3-1-contains-a-reflected-cross-site-scripting-vulnerability-that-allows-unauthenticated-attackers-to-inject-scripts-throug2026-10-27 https://bugrater.com/releases/cve-2026-116875-semanticmediawiki-from-3-0-0-before-7-3-1-contains-a-reflected-cross-site-scripting-vulnerability-in-special-ask-which-outputs-separator-parameters-sep-props2026-10-27 https://bugrater.com/releases/cve-2026-116876-semantic-mediawiki-from-2-5-0-before-7-3-1-contains-an-improper-authorization-vulnerability-that-allows-ordinary-editors-to-permanently-protect-pages-by-adding2026-10-27 https://bugrater.com/releases/cve-2026-116877-semantic-mediawiki-from-2-5-0-before-7-3-1-contains-an-uncontrolled-resource-consumption-vulnerability-that-allows-low-privilege-editors-to-bypass-smwgmaxnumrec2026-10-27 https://bugrater.com/releases/cve-2026-116878-semantic-mediawiki-from-2-5-0-before-7-3-1-contains-an-uncontrolled-resource-consumption-vulnerability-that-allows-anonymous-attackers-to-force-quadratic-comput2026-10-27 https://bugrater.com/releases/cve-2026-116879-semantic-mediawiki-from-7-3-0-before-7-3-1-contains-a-missing-authorization-vulnerability-in-the-smwtask-update-task-that-allows-users-with-edit-rights-to-force2026-10-27 https://bugrater.com/releases/cve-2026-116880-semantic-mediawiki-from-3-0-0-before-7-3-1-contains-a-cross-site-request-forgery-vulnerability-in-special-smwadmin-because-it-overwrites-the-wpedittoken-with-a2026-10-27 https://bugrater.com/releases/cve-2026-116881-semantic-mediawiki-from-3-0-0-before-7-3-1-contains-a-cross-site-scripting-vulnerability-that-allows-attackers-to-inject-markup-by-storing-malicious-semantic-pr2026-10-27 https://bugrater.com/releases/cve-2026-116882-semantic-mediawiki-from-4-2-0-before-7-3-1-contains-a-stored-cross-site-scripting-vulnerability-that-allows-authenticated-profile-or-schema-editors-to-inject-ht2026-10-27 https://bugrater.com/releases/cve-2026-116883-semantic-mediawiki-from-3-1-0-before-7-3-1-contains-a-stored-cross-site-scripting-vulnerability-that-allows-authenticated-schema-editors-to-inject-html-through2026-10-27 https://bugrater.com/releases/cve-2026-116884-semanticmediawiki-from-5-0-0-before-7-3-1-contains-a-stored-cross-site-scripting-vulnerability-in-ext-smw-tooltip-tippy-js-that-renders-data-attributes-via-in2026-10-27 https://bugrater.com/releases/cve-2026-116885-semantic-mediawiki-from-3-1-0-before-7-3-1-contains-a-reflected-cross-site-scripting-vulnerability-in-the-special-smwadmin-id-lookup-that-allows-unauthenticated2026-10-27 https://bugrater.com/releases/cve-2026-116886-semantic-mediawiki-from-2-5-0-before-7-3-1-contains-a-stored-cross-site-scripting-vulnerability-that-allows-users-with-page-edit-rights-to-inject-scripts-via-ex2026-10-27 https://bugrater.com/releases/cve-2026-116887-semantic-mediawiki-from-3-0-0-before-7-3-1-contains-a-stored-cross-site-scripting-vulnerability-that-allows-users-with-page-edit-rights-to-inject-html-through-k2026-10-27 https://bugrater.com/releases/cve-2026-116888-semanticmediawiki-from-3-2-0-before-7-3-1-contains-a-stored-cross-site-scripting-vulnerability-that-allows-users-with-the-smw-schemaedit-right-to-inject-markup2026-10-27 https://bugrater.com/releases/cve-2026-116889-semanticmediawiki-from-2-5-0-before-7-3-1-contains-a-stored-cross-site-scripting-vulnerability-that-allows-users-with-page-edit-rights-to-inject-script-through2026-10-27 https://bugrater.com/releases/cve-2026-116891-semanticmediawiki-from-4-2-0-before-7-2-1-contains-a-reflected-cross-site-scripting-vulnerability-that-allows-unauthenticated-attackers-to-inject-html-via-unesc2026-10-27 https://bugrater.com/releases/cve-2026-116892-semanticmediawiki-from-3-1-0-before-7-3-1-contains-a-reflected-cross-site-scripting-vulnerability-that-allows-unauthenticated-attackers-to-inject-markup-through2026-10-27 https://bugrater.com/releases/cve-2026-116893-redaxo-core-before-5-21-5-contains-a-missing-authorization-vulnerability-in-the-rex-api-package-api-function-that-lets-non-admin-backend-users-manage-packages-w2026-10-27 https://bugrater.com/releases/cve-2026-116894-redaxo-before-5-21-5-contains-an-insufficient-session-expiration-vulnerability-that-allows-attackers-to-retain-account-access-by-keeping-the-current-session-and2026-10-27 https://bugrater.com/releases/cve-2026-116895-redaxo-before-5-21-5-contains-a-cross-site-request-forgery-vulnerability-because-the-backend-processes-the-safemode-get-parameter-in-index-php-without-validatin2026-10-27 https://bugrater.com/releases/cve-2026-116896-redaxo-before-5-21-5-contains-a-missing-authorization-vulnerability-in-the-backup-addon-export-that-accepts-any-database-table-allowing-non-admin-users-with-th2026-10-27 https://bugrater.com/releases/cve-2026-116898-redaxo-before-5-21-4-contains-a-missing-authorization-vulnerability-in-the-media-pool-bulk-move-that-checks-only-target-category-permission-ignoring-the-source2026-10-27 https://bugrater.com/releases/cve-2026-116899-redaxo-before-5-21-4-contains-a-broken-access-control-vulnerability-that-allows-authenticated-editors-to-modify-slices-in-unauthorized-categories-by-pairing-a-p2026-10-27 https://bugrater.com/releases/cve-2026-116900-redaxo-before-5-21-4-contains-a-stored-cross-site-scripting-vulnerability-that-allows-content-editors-to-inject-html-by-storing-unescaped-values-rendered-by-med2026-10-27 https://bugrater.com/releases/cve-2026-117341-in-affected-versions-of-octopus-server-creating-a-user-invitation-writes-the-invitation-code-to-the-audit-event-log-when-the-invitation-is-linked-to-a-space2026-10-27 https://bugrater.com/releases/cve-2026-117466-in-affected-versions-of-octopus-server-a-user-holding-the-system-manager-role-could-escalate-their-privileges-to-full-system-administrator2026-10-27 https://bugrater.com/releases/cve-2026-117532-redaxo-core-from-5-3-0-before-5-21-4-contains-an-authentication-bypass-vulnerability-in-the-structure-history-plugin-that-allows-unauthenticated-attackers-to-fo2026-10-27 https://bugrater.com/releases/cve-2026-117533-redaxo-from-5-18-0-before-5-21-4-contains-a-stored-cross-site-scripting-vulnerability-because-rex-media-service-moves-uploaded-svg-files-into-the-public-media-f2026-10-27 https://bugrater.com/releases/cve-2026-117534-redaxo-before-5-21-3-contains-a-cross-site-request-forgery-vulnerability-in-the-structure-history-plugin-that-allows-attackers-to-delete-history-or-roll-back-co2026-10-27 https://bugrater.com/releases/cve-2026-117535-redaxo-before-5-21-3-contains-a-reflected-cross-site-scripting-vulnerability-in-the-backend-media-pool-detail-page-where-the-opener-link-parameter-is-rendered2026-10-27 https://bugrater.com/releases/cve-2026-117536-redaxo-before-5-21-3-contains-a-cross-site-request-forgery-vulnerability-in-the-backend-user-administration-page-users-users-because-the-csrf-token-check-only2026-10-27 https://bugrater.com/releases/cve-2026-117537-redaxo-before-5-21-0-contains-a-reflected-cross-site-scripting-vulnerability-that-allows-authenticated-attackers-to-inject-scripts-via-the-type-parameter-of-the2026-10-27 https://bugrater.com/releases/cve-2026-117538-redaxo-before-5-21-0-contains-a-reflected-cross-site-scripting-vulnerability-in-the-backend-packages-api-where-the-function-parameter-is-concatenated-into-an-e2026-10-27 https://bugrater.com/releases/cve-2026-117539-darylldoyle-svg-sanitizer-before-1-0-0-contains-css-injection-and-remote-reference-bypass-vulnerabilities-that-allow-attackers-to-embed-external-resources-by-up2026-10-27 https://bugrater.com/releases/cve-2026-117540-svg-sanitizer-from-0-5-3-before-1-1-0-contains-a-denial-of-service-vulnerability-in-sanitizer-sanitize-that-repeatedly-rescans-the-whole-input-while-strippin2026-10-27 https://bugrater.com/releases/cve-2026-117541-svg-sanitizer-from-0-11-0-before-1-1-0-contains-an-uncaught-exception-vulnerability-that-allows-attackers-to-crash-callers-by-submitting-well-formed-xml-without2026-10-27 https://bugrater.com/releases/cve-2026-102800-joomla-extension-dj-extensions-com-unauthenticated-stored-xss-in-dj-helpfularticles-1-3-0-the-was-this-article-helpful-voting-widget-posts-a-client-su2026-10-27 https://bugrater.com/releases/cve-2026-105323-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-vulnerability-in-kulga-software-and-telecommunications-limited-company-kulg2026-10-27 https://bugrater.com/releases/cve-2026-109995-the-advanced-views-display-framework-for-gutenberg-elementor-plugin-for-wordpress-is-vulnerable-to-stored-cross-site-scripting-via-the-comment-parameter-i2026-10-27 https://bugrater.com/releases/cve-2026-10752-the-advanced-custom-fields-extended-plugin-for-wordpress-is-vulnerable-to-authorization-bypass-in-all-versions-up-to-and-including-0-9-2-6-this-is-due-to-th2026-10-27 https://bugrater.com/releases/cve-2026-112362-fastify-express-is-a-fastify-plugin-that-runs-express-middleware-inside-fastify-in-versions-4-0-5-through-4-0-8-when-fastify-runs-with-the-non-default-ignore2026-10-27 https://bugrater.com/releases/cve-2026-113644-in-eclipse-iofog-iofogctl-versions-1-0-0-through-3-7-0-and-3-8-0-rc-1-through-3-9-1-the-provisioning-key-and-ca-certificate-returned-by-the-controller-api-are2026-10-27 https://bugrater.com/releases/cve-2026-115408-in-github-com-eclipse-keypont-crypto11-v2-versions-2-0-0-rc3-2-0-0-rc8-the-ml-kem-key-pair-lookup-functions-findmlkemkeypair-findmlkemkeypairs2026-10-27 https://bugrater.com/releases/cve-2026-117499-fastify-session-is-a-session-plugin-for-fastify-in-all-releases-before-11-1-6-with-the-default-rolling-session-behavior-a-request-that-restored-a-session-be2026-10-27 https://bugrater.com/releases/cve-2026-4337-unrestricted-upload-of-file-with-dangerous-type-vulnerability-in-the-pumukit-application-allows-a-unauthenticated-user-to-upload-any-type-of-file-to-the-server2026-10-27 https://bugrater.com/releases/cve-2026-56084-dell-powerprotect-data-domain-feature-release-versions-7-7-1-0-through-8-7-lts2024-release-versions-7-13-1-0-through-7-13-1-80-lts2025-release-versions-8-3-12026-10-27 https://bugrater.com/releases/cve-2026-90731-dell-powerprotect-data-domain-feature-release-versions-7-7-1-0-through-8-7-lts2024-release-versions-7-13-1-0-through-7-13-1-80-lts2025-release-versions-8-3-12026-10-27 https://bugrater.com/releases/cve-2026-90732-dell-powerprotect-data-domain-feature-release-versions-7-7-1-0-through-lts-2026-lts2024-release-versions-7-13-1-0-through-7-13-1-80-lts2025-release-versions2026-10-27 https://bugrater.com/releases/cve-2026-114409-docker-desktop-before-version-4-97-0-could-write-third-party-api-keys-and-oauth-access-tokens-in-cleartext-to-local-application-logs-and-diagnostics-bundles-due2026-10-27 https://bugrater.com/releases/cve-2026-15586-improper-restriction-of-excessive-authentication-attempts-vulnerability-in-dvlabs-software-and-consulting-services-inc-ontime-allows-brute-force-this-issue2026-10-27 https://bugrater.com/releases/cve-2026-92546-authentication-bypass-by-spoofing-vulnerability-in-keepnet-labs-cybersecurity-inc-agentic-ai-agentic-ally-allows-authentication-bypass-this-issue-affects-a2026-10-27 https://bugrater.com/releases/cve-2026-10537-a-misconfiguration-issue-in-the-affected-service-in-control-m-enterprise-manager-and-control-m-server-may-allow-unauthenticated-remote-users-to-access-certain-s2026-10-27 https://bugrater.com/releases/cve-2026-117503-a-vulnerability-was-determined-in-a2aproject-a2a-go-up-to-2-4-0-impacted-is-an-unknown-function-of-the-file-a2asrv-rest-go-of-the-component-rest-sse-handler-t2026-10-27 https://bugrater.com/releases/cve-2026-117504-a-vulnerability-was-identified-in-a2aproject-a2a-go-up-to-2-4-0-the-affected-element-is-the-function-cancel-of-the-file-internal-taskexec-distributed-manager-g2026-10-27 https://bugrater.com/releases/cve-2026-117553-umbraco-cms-before-17-7-2-and-18-2-2-contains-an-authentication-bypass-vulnerability-that-allows-unauthenticated-attackers-to-register-attacker-controlled-oauth2026-10-27 https://bugrater.com/releases/cve-2026-117554-admidio-before-5-0-17-contains-an-improper-access-control-vulnerability-that-allows-authenticated-members-to-register-event-guests-by-submitting-the-additional2026-10-27 https://bugrater.com/releases/cve-2026-117555-cimg-through-4-0-6-contains-a-heap-out-of-bounds-read-vulnerability-in-the-load-bmp-function-of-cimg-h-caused-by-an-integer-overflow-in-the-row-byte-count-a2026-10-27 https://bugrater.com/releases/cve-2026-117556-zchunk-before-1-5-5-contains-a-heap-out-of-bounds-read-vulnerability-in-read-preface-in-src-lib-header-c-that-passes-the-total-header-length-instead-of-remain2026-10-27 https://bugrater.com/releases/cve-2026-117557-sdl-image-through-3-4-8-and-through-2-8-12-contains-a-stack-out-of-bounds-read-vulnerability-in-img-loadlbm-io-in-src-img-lbm-c-that-skips-bitplane-count-vali2026-10-27 https://bugrater.com/releases/cve-2026-117560-atxp-gemini-cli-extension-through-1-0-0-contains-an-os-command-injection-vulnerability-in-runatxp-that-allows-attackers-to-execute-shell-commands-through-unsa2026-10-27 https://bugrater.com/releases/cve-2026-117561-codefriar-sf-mcp-through-1-3-2-contains-an-os-command-injection-vulnerability-that-allows-attackers-to-execute-shell-commands-by-supplying-crafted-salesforce-cl2026-10-27 https://bugrater.com/releases/cve-2026-117562-rssant-1-9-0-through-1-9-1-contains-an-authorization-bypass-vulnerability-that-allows-unauthenticated-attackers-to-read-stories-from-unpublished-feeds-through-t2026-10-27 https://bugrater.com/releases/cve-2026-117563-mrdoc-through-1-1-1-contains-a-broken-access-control-vulnerability-in-the-manage-doc-share-type-3-branch-that-allows-authenticated-users-to-modify-other-users2026-10-27 https://bugrater.com/releases/cve-2026-117564-nest-admin-before-1-0-1-contains-an-authentication-bypass-vulnerability-that-allows-unauthenticated-attackers-to-forge-administrator-tokens-by-using-a-hardcoded2026-10-27 https://bugrater.com/releases/cve-2026-117565-artalk-before-2-10-1-contains-an-unauthenticated-server-side-request-forgery-vulnerability-that-allows-remote-attackers-to-make-the-server-fetch-arbitrary-urls2026-10-27 https://bugrater.com/releases/cve-2026-117566-easyimages2-0-through-2-8-6-contains-an-unauthenticated-path-traversal-vulnerability-in-app-down-php-app-thumb-php-and-app-info-php-that-allows-reading-files-o2026-10-27 https://bugrater.com/releases/cve-2026-117567-esp-mcp-through-commit-28afddf-contains-an-os-command-injection-vulnerability-that-allows-attackers-to-run-arbitrary-commands-by-supplying-shell-metacharacters2026-10-27 https://bugrater.com/releases/cve-2026-117568-mcp-ffmpeg-through-1-0-5-contains-an-os-command-injection-vulnerability-that-allows-attackers-to-run-shell-commands-by-supplying-crafted-videopath-or-outputdir2026-10-27 https://bugrater.com/releases/cve-2026-117569-kali-gpt-through-commit-a608c74-contains-an-os-command-injection-vulnerability-in-execute-tool-in-kali-gpt-tools-mcp-server-py-that-allows-mcp-clients-to-run2026-10-27 https://bugrater.com/releases/cve-2026-117570-vorota-ai-nmap-mcp-through-commit-3636afa-contains-an-improper-allowlist-validation-vulnerability-in-the-scan-vulnerabilities-tool-that-lets-callers-run-blocked2026-10-27 https://bugrater.com/releases/cve-2026-117601-electrum-before-4-8-3-fails-to-verify-signatures-of-wallet-owned-inputs-in-unconfirmed-mempool-transactions-allowing-malicious-servers-to-replace-a-just-broadc2026-10-27 https://bugrater.com/releases/cve-2026-117603-electrum-before-4-7-2-contains-a-spending-limit-bypass-vulnerability-in-the-nostr-wallet-connect-plugin-that-allows-malicious-nwc-clients-to-exceed-daily-limit2026-10-27 https://bugrater.com/releases/cve-2026-12887-in-affected-versions-of-octopus-server-a-user-with-permission-to-upload-a-malicious-nuget-package-is-able-to-deploy-a-script-step-so-the-script-executes-outsid2026-10-27 https://bugrater.com/releases/cve-2026-16307-authorization-bypass-through-user-controlled-key-vulnerability-in-netiket-information-technologies-edoweb-allows-accessing-functionality-not-properly-constraine2026-10-27 https://bugrater.com/releases/cve-2026-90725-dell-powerprotect-data-domain-feature-release-versions-7-7-1-0-through-8-8-lts2024-release-versions-7-13-1-0-through-7-13-1-80-lts2025-release-versions-8-3-12026-10-27 https://bugrater.com/releases/cve-2026-105987-kgs-software-tia-viewer-is-vulnerable-to-stored-xss-via-the-annotation-api-due-to-the-lack-of-input-validation-an-authenticated-attacker-can-inject-arbitrary2026-10-27 https://bugrater.com/releases/cve-2026-117505-a-security-flaw-has-been-discovered-in-a2aproject-a2a-java-up-to-1-2-0-final-the-impacted-element-is-the-function-queue-offer-of-the-component-childqueue-perf2026-10-27 https://bugrater.com/releases/cve-2026-117506-a-weakness-has-been-identified-in-a2aproject-a2a-java-up-to-1-2-0-final-this-affects-the-function-inmemorypushnotificationconfigstore-setinfo-of-the-file-extra2026-10-27 https://bugrater.com/releases/cve-2026-117507-a-security-vulnerability-has-been-detected-in-a2aproject-a2a-java-up-to-1-2-0-final-this-impacts-the-function-taskmanager-savetaskevent-the-manipulation-leads2026-10-27 https://bugrater.com/releases/cve-2026-117604-grav-from-1-7-53-3-before-1-7-53-6-contains-an-authorization-bypass-in-debugger-isdebuggerrequestauthorized-that-allows-unauthenticated-visitors-to-read-c2026-10-27 https://bugrater.com/releases/ubports-security-releases-october-20262026-10-27 https://bugrater.com/releases/cohesity-security-releases-october-20262026-10-27 https://bugrater.com/releases/interuse-security-releases-october-20262026-10-27 https://bugrater.com/releases/cve-2026-103593-a-stack-based-buffer-overflow-vulnerability-in-the-fireware-os-logging-service-allows-a-network-adjacent-attacker-who-can-impersonate-or-intercept-traffic-to-th2026-10-27 https://bugrater.com/releases/cve-2026-103594-a-stack-based-buffer-overflow-vulnerability-in-fireware-os-s-wireguard-configuration-processing-allows-a-remote-attacker-that-has-man-in-the-middle-tls-decrypte2026-10-27 https://bugrater.com/releases/cve-2026-104381-a-missing-authentication-vulnerability-in-fireware-os-s-firecluster-state-synchronization-feature-allows-an-unauthenticated-attacker-positioned-on-the-cluster-s2026-10-27 https://bugrater.com/releases/cve-2026-109823-an-attacker-can-read-the-name-of-filesystem-paths-of-your-application-present-via-tidewave-configuration-via-tidewave-connect-or-via-the-rendered-toolbar-nei2026-10-27 https://bugrater.com/releases/cve-2026-111107-a-null-pointer-dereference-vulnerability-in-watchguard-fireware-os-s-management-interface-allows-a-remote-unauthenticated-attacker-with-network-access-to-the-m2026-10-27 https://bugrater.com/releases/cve-2026-111582-a-dll-loading-vulnerability-in-the-teamviewer-remote-management-monitoring-installer-for-windows-prior-to-version-26-10-1-allows-a-local-authenticated-attacker2026-10-27 https://bugrater.com/releases/cve-2026-111583-improper-access-control-in-the-installer-staging-directory-used-by-teamviewer-full-client-and-host-prior-to-version-15-82-for-windows-during-installation-of-adv2026-10-27 https://bugrater.com/releases/cve-2026-111584-a-race-condition-in-the-installation-process-of-teamviewer-remote-management-patch-management-for-windows-prior-to-version-26-9-1-allows-a-local-authenticated2026-10-27 https://bugrater.com/releases/cve-2026-111585-an-integer-overflow-in-the-remote-control-screen-processing-component-of-teamviewer-clients-full-client-portable-and-remote-control-app-prior-to-version-15-82026-10-27 https://bugrater.com/releases/cve-2026-112709-a-heap-based-buffer-overflow-vulnerability-in-the-fireware-os-authentication-service-allows-an-attacker-who-controls-or-intercepts-traffic-to-the-configured-act2026-10-27 https://bugrater.com/releases/cve-2026-112710-a-heap-based-buffer-overflow-vulnerability-exists-in-the-fireware-os-authentication-service-allows-an-attacker-who-controls-or-intercepts-traffic-to-the-configu2026-10-27 https://bugrater.com/releases/cve-2026-113881-a-stack-based-buffer-overflow-vulnerability-in-fireware-os-s-vpn-network-access-enforcement-process-allows-an-authenticated-mobile-vpn-user-to-create-a-denial-o2026-10-27 https://bugrater.com/releases/cve-2026-115495-cleartext-transmission-of-sensitive-information-vulnerability-in-the-watchguard-mobile-vpn-with-ssl-client-for-windows-allows-a-local-attacker-who-can-capture-l2026-10-27 https://bugrater.com/releases/cve-2026-116863-cross-site-request-forgery-csrf-vulnerability-in-tribulant-software-newsletters-newsletters-lite-allows-cross-site-request-forgery-this-issue-affects-newslett2026-10-27 https://bugrater.com/releases/cve-2026-117509-a-vulnerability-was-detected-in-crownpku-rasa-nlu-chi-up-to-0-12-2-affected-is-the-function-persistor-decompress-of-the-file-rasa-nlu-persistor-py-of-the-comp2026-10-27 https://bugrater.com/releases/cve-2026-117510-a-flaw-has-been-found-in-dexmal-dexbotic-up-to-0-2-0-affected-by-this-vulnerability-is-the-function-load-pretrained-gr00t-of-the-file-dexbotic-model-gr00tsonic2026-10-27 https://bugrater.com/releases/cve-2026-117511-a-vulnerability-has-been-found-in-desmondmorris-node-tesseract-up-to-0-2-7-affected-by-this-issue-is-the-function-process-of-the-file-lib-tesseract-js-of-the-c2026-10-27 https://bugrater.com/releases/cve-2026-82332-an-improper-authentication-vulnerability-in-watchguard-fireware-os-s-authpoint-multi-factor-authentication-process-allows-a-local-unauthenticated-attacker-on-t2026-10-27 https://bugrater.com/releases/cve-2026-90442-a-stack-based-buffer-overflow-vulnerability-in-the-fireware-os-certd-process-allows-an-authenticated-attacker-with-access-to-the-firebox-management-interface-to2026-10-27 https://bugrater.com/releases/cve-2026-90464-an-external-control-of-file-path-vulnerability-in-a-watchguard-fireware-os-firewall-diagnostic-command-allows-a-remote-authenticated-attacker-with-at-least-rea2026-10-27 https://bugrater.com/releases/cve-2026-90465-a-missing-authentication-vulnerability-in-the-firecluster-sync-processing-allows-an-attacker-positioned-on-the-cluster-interconnect-such-as-a-compromised-clust2026-10-27 https://bugrater.com/releases/cve-2026-92372-an-out-of-bounds-write-vulnerability-in-the-screen-image-decoder-of-teamviewer-full-client-for-linux-and-macos-prior-to-version-15-83-allows-a-remote-attacker-t2026-10-27 https://bugrater.com/releases/cve-2026-92374-a-time-of-check-time-of-use-toctou-race-condition-combined-with-improper-symbolic-link-handling-in-the-privileged-helper-of-teamviewer-full-client-and-host-pr2026-10-27 https://bugrater.com/releases/cve-2026-92375-an-improper-access-control-vulnerability-in-the-ipc-communication-between-teamviewer-full-client-or-host-prior-to-version-15-83-and-the-remote-management-monito2026-10-27 https://bugrater.com/releases/cve-2026-92376-improper-authentication-in-the-inter-process-communication-ipc-mechanism-of-teamviewer-remote-management-monitoring-for-windows-prior-to-version-26-10-1-allow2026-10-27 https://bugrater.com/releases/cve-2026-92377-improper-access-control-in-the-patch-management-update-mechanism-of-teamviewer-full-client-and-host-for-windows-prior-to-version-15-82-allows-a-local-authentica2026-10-27 https://bugrater.com/releases/cve-2026-93434-an-xpath-injection-vulnerability-in-watchguard-fireware-os-s-ssh-authentication-process-allows-a-remote-unauthenticated-attacker-with-access-to-the-management2026-10-27 https://bugrater.com/releases/cve-2026-93857-a-stack-based-buffer-overflow-vulnerability-in-fireware-os-s-sip-proxy-allows-a-remote-unauthenticated-attacker-to-execute-arbitrary-code-by-sending-a-speciall2026-10-27 https://bugrater.com/releases/cve-2026-93862-an-out-of-bounds-read-vulnerability-in-the-firecluster-sync-processing-allows-an-attacker-positioned-on-the-cluster-interconnect-such-as-a-compromised-cluster2026-10-27 https://bugrater.com/releases/cve-2026-93864-a-link-following-vulnerability-in-watchguard-fireware-os-s-firewall-daemon-allows-a-local-attacker-with-code-execution-as-a-low-privileged-system-process-to-ove2026-10-27 https://bugrater.com/releases/cve-2026-93865-a-missing-authentication-vulnerability-in-the-fireware-os-firecluster-synchronization-daemon-allows-a-remote-unauthenticated-attacker-to-invoke-privileged-syst2026-10-27 https://bugrater.com/releases/cve-2026-93866-an-integer-overflow-vulnerability-in-the-websocket-connection-handling-used-by-watchguard-fireware-os-s-access-portal-allows-a-remote-unauthenticated-attacker2026-10-27 https://bugrater.com/releases/cve-2026-109088-a-malicious-x-server-could-send-malformed-record-enablecontext-reolies-that-can-cause-a-x-client-using-the-parse-reply-call-callback-function-in-libxtst-before2026-10-27 https://bugrater.com/releases/cve-2026-109089-a-buffer-overflow-when-handling-device-resolution-in-libxi-before-1-8-4-could-overflow-a-heap-triggered-by-a-malicious-x-server2026-10-27 https://bugrater.com/releases/cve-2026-109090-a-malicious-x-server-could-cause-a-heap-overflow-by-injecting-a-large-device-enable-reply-when-processed-by-libxi-before-1-8-42026-10-27 https://bugrater.com/releases/cve-2026-112353-gfi-kerioconnect-kerio-connect-before-10-0-8-patch-2-contains-a-stored-cross-site-scripting-vulnerability-in-the-webmail-component-that-allows-a-remote-attack2026-10-27 https://bugrater.com/releases/cve-2026-114595-in-epics-base-release-7-0-10-and-prior-an-integer-overflow-in-network-request-processing-can-cause-memory-to-be-allocated-with-an-incorrect-size-subsequent-ha2026-10-27 https://bugrater.com/releases/cve-2026-114596-in-epics-base-release-7-0-10-and-prior-an-improper-validation-of-message-length-values-during-protocol-parsing-can-trigger-an-integer-overflow-resulting-in-an2026-10-27 https://bugrater.com/releases/cve-2026-114597-in-epics-base-release-7-0-10-and-prior-an-insufficient-validation-of-element-or-length-values-in-a-network-message-can-cause-the-application-to-read-beyond-the2026-10-27 https://bugrater.com/releases/cve-2026-114598-in-epics-base-release-7-0-10-and-prior-an-insufficient-validation-of-element-or-length-values-in-a-network-message-can-cause-the-application-to-read-beyond-the2026-10-27 https://bugrater.com/releases/cve-2026-117512-a-vulnerability-was-found-in-oretnom23-php-travel-agency-system-this-affects-an-unknown-part-of-the-file-admin-employee-insert-php-performing-a-manipulation-o2026-10-27 https://bugrater.com/releases/cve-2026-117513-a-vulnerability-was-determined-in-oretnom23-php-travel-agency-system-this-vulnerability-affects-unknown-code-of-the-file-admin-customer-search-php-of-the-compo2026-10-27 https://bugrater.com/releases/cve-2026-117514-a-vulnerability-was-identified-in-oretnom23-php-travel-agency-system-this-issue-affects-some-unknown-processing-of-the-file-admin-customer-detail-php-of-the-co2026-10-27 https://bugrater.com/releases/cve-2026-67400-a-missing-token-type-check-allowed-to-retrieve-more-additional-information-about-the-wopi-configuration-with-a-user-or-guest-token2026-10-27 https://bugrater.com/releases/cve-2026-77167-abusing-the-federated-share-endpoint-an-attacker-can-write-arbitrary-rows-into-the-oc-share-external-database-table-these-rows-persist-indefinitely-there-is2026-10-27 https://bugrater.com/releases/cve-2026-77171-a-public-shared-collective-always-allowed-recipients-of-the-link-to-create-pages2026-10-27 https://bugrater.com/releases/cve-2026-77172-app-passwords-were-allowed-to-bypass-password-confirmation-on-sensitive-endpoints2026-10-27 https://bugrater.com/releases/cve-2026-77173-a-user-could-create-a-docx-or-odt-file-with-a-in-the-filename-with-confidential-information-such-as-a-credit-card-number-and-have-it-not-be-marked-as-confiden2026-10-27 https://bugrater.com/releases/cve-2026-82983-the-tables-app-s-share-listing-endpoint-get-apps-tables-share-table-tableid-did-not-verify-that-the-requesting-user-has-manage-level-permission-on-the-tabl2026-10-27 https://bugrater.com/releases/cve-2026-82984-when-a-team-was-configured-as-visible-to-everyone-the-web-ui-correctly-blocked-non-members-from-viewing-the-team-you-are-not-a-member-of-but-the-res2026-10-27 https://bugrater.com/releases/cve-2026-87897-a-ssrf-vulnerability-found-that-enables-access-to-internal-chrome-devtools-protocol-apis-that-can-leak-the-jwt-authentication-token-for-another-user-a-low-priv2026-10-27 https://bugrater.com/releases/cve-2026-102812-a-hard-coded-cryptographic-key-vulnerability-exists-in-the-user-configuration-backup-mechanism-of-tp-link-re305-v3-and-archer-c7-v5-a-fixed-aes-128-key-and-ini2026-10-27 https://bugrater.com/releases/cve-2026-102813-an-authentication-flaw-exists-in-the-password-recovery-functionality-of-tp-link-re305-v3-the-verification-code-interface-allows-an-unauthenticated-attacker-on2026-10-27 https://bugrater.com/releases/cve-2026-102814-an-authentication-weakness-exists-in-the-tp-link-tddp-v2-service-of-tp-link-re305-v3-tddp-v2-uses-a-fixed-and-derivable-cryptographic-key-which-may-allow-an-u2026-10-27 https://bugrater.com/releases/cve-2026-102815-an-operating-system-command-injection-vulnerability-exists-in-the-tmpserver-service-of-tp-link-re305-v3-the-service-runs-with-root-privileges-and-listens-on-th2026-10-27 https://bugrater.com/releases/cve-2026-102816-an-authorization-vulnerability-exists-in-the-country-or-region-configuration-interface-of-tp-link-re305-v3-an-unauthenticated-attacker-on-the-same-local-networ2026-10-27 https://bugrater.com/releases/cve-2026-117515-a-security-flaw-has-been-discovered-in-oretnom23-php-travel-agency-system-4e28b8f84d72420373dd15c3ae32900beb7e0635-impacted-is-an-unknown-function-of-the-file2026-10-27 https://bugrater.com/releases/cve-2026-117516-a-weakness-has-been-identified-in-oretnom23-php-travel-agency-system-the-affected-element-is-an-unknown-function-of-the-file-contact-insert-php-of-the-componen2026-10-27 https://bugrater.com/releases/cve-2026-117526-a-vulnerability-was-found-in-reduxjs-redux-devtools-5-0-0-affected-by-this-vulnerability-is-the-function-evalaction-of-the-component-remotedev-server-the-mani2026-10-27 https://bugrater.com/releases/cve-2026-88812-a-double-free-in-xkb-setgeometryin-x-org-x-server-before-21-1-25-and-x-wayland-before-24-1-14-could-be-used-by-attached-clients-to-cause-a-crash-or-potentially2026-10-27 https://bugrater.com/releases/cve-2026-103995-response-body-and-chunk-parsing-would-handle-non-hex-or-negative-integers-incorrectly-which-could-result-in-misinterpreting-http-response-contents2026-10-27 https://bugrater.com/releases/cve-2026-112350-sunhillo-sureline-before-9-1-5-contains-a-path-traversal-vulnerability-in-the-radarupdater-cgi-endpoint-that-allows-unauthenticated-remote-attackers-to-read-arb2026-10-27 https://bugrater.com/releases/cve-2026-112351-sunhillo-sureline-before-9-1-5-contains-an-os-command-injection-vulnerability-in-the-networkdiag-cgi-endpoint-that-allows-an-authenticated-remote-attacker-with2026-10-27 https://bugrater.com/releases/cve-2026-112352-sunhillo-sureline-before-9-1-5-contains-an-authentication-bypass-vulnerability-that-allows-an-unauthenticated-remote-attacker-to-impersonate-any-user-with-an-ac2026-10-27 https://bugrater.com/releases/cve-2026-112355-the-membershipworks-plugin-for-wordpress-before-6-17-contains-an-information-disclosure-vulnerability-that-allows-unauthenticated-attackers-to-access-member-onl2026-10-27 https://bugrater.com/releases/stable-channel-update-for-desktop-156-0-8078-73-742026-10-28 https://bugrater.com/releases/freertos-security-releases-october-20262026-10-28 https://bugrater.com/releases/playedu-security-releases-october-20262026-10-28 https://bugrater.com/releases/hcengineering-security-releases-october-20262026-10-28 https://bugrater.com/releases/jeequan-security-releases-october-20262026-10-28 https://bugrater.com/releases/pkp-security-releases-october-20262026-10-28 https://bugrater.com/releases/roncoo-security-releases-october-20262026-10-28 https://bugrater.com/releases/qaiu-security-releases-october-20262026-10-28 https://bugrater.com/releases/alldatacenter-security-releases-october-20262026-10-28 https://bugrater.com/releases/devlive-community-security-releases-october-20262026-10-28 https://bugrater.com/releases/oqtane-security-releases-october-20262026-10-28 https://bugrater.com/releases/mgdaaslab-security-releases-october-20262026-10-28 https://bugrater.com/releases/coaidev-security-releases-october-20262026-10-28 https://bugrater.com/releases/zyx0814-security-releases-october-20262026-10-28 https://bugrater.com/releases/o2oa-security-releases-october-20262026-10-28 https://bugrater.com/releases/a466350665-security-releases-october-20262026-10-28 https://bugrater.com/releases/joey-zhou-security-releases-october-20262026-10-28 https://bugrater.com/releases/umbraco-security-releases-october-20262026-10-28 https://bugrater.com/releases/webreaper-security-releases-october-20262026-10-28 https://bugrater.com/releases/iotsharp-security-releases-october-20262026-10-28 https://bugrater.com/releases/colinin-security-releases-october-20262026-10-28 https://bugrater.com/releases/seriawei-security-releases-october-20262026-10-28 https://bugrater.com/releases/helicalinsight-security-releases-october-20262026-10-28 https://bugrater.com/releases/openbmb-security-releases-october-20262026-10-28 https://bugrater.com/releases/blair2004-security-releases-october-20262026-10-28 https://bugrater.com/releases/moul-security-releases-october-20262026-10-28 https://bugrater.com/releases/kuaifan-security-releases-october-20262026-10-28 https://bugrater.com/releases/fastapiadmin-security-releases-october-20262026-10-28 https://bugrater.com/releases/l429609201-security-releases-october-20262026-10-28 https://bugrater.com/releases/zmister2016-security-releases-october-20262026-10-28 https://bugrater.com/releases/javahuang-security-releases-october-20262026-10-28 https://bugrater.com/releases/build-admin-security-releases-october-20262026-10-28 https://bugrater.com/releases/rocboss-security-releases-october-20262026-10-28 https://bugrater.com/releases/hoshinosuzumi-security-releases-october-20262026-10-28 https://bugrater.com/releases/3xxx-security-releases-october-20262026-10-28 https://bugrater.com/releases/53ai-security-releases-october-20262026-10-28 https://bugrater.com/releases/zoujingli-security-releases-october-20262026-10-28 https://bugrater.com/releases/zhimaai-security-releases-october-20262026-10-28 https://bugrater.com/releases/beikeshop-security-releases-october-20262026-10-28 https://bugrater.com/releases/siteserver-security-releases-october-20262026-10-28 https://bugrater.com/releases/chaskiq-security-releases-october-20262026-10-28 https://bugrater.com/releases/safing-security-releases-october-20262026-10-28 https://bugrater.com/releases/piranhacms-security-releases-october-20262026-10-28 https://bugrater.com/releases/steedos-security-releases-october-20262026-10-28 https://bugrater.com/releases/beizhu-1209-security-releases-october-20262026-10-28 https://bugrater.com/releases/izhaorui-security-releases-october-20262026-10-28 https://bugrater.com/releases/clickvisual-security-releases-october-20262026-10-28 https://bugrater.com/releases/data-infra-security-releases-october-20262026-10-28 https://bugrater.com/releases/thecosy-security-releases-october-20262026-10-28 https://bugrater.com/releases/hello-hao-security-releases-october-20262026-10-28 https://bugrater.com/releases/xiaochong0302-security-releases-october-20262026-10-28 https://bugrater.com/releases/faveosuite-security-releases-october-20262026-10-28 https://bugrater.com/releases/adri-van-os-security-releases-october-20262026-10-28 https://bugrater.com/releases/ekkolearnai-security-releases-october-20262026-10-28 https://bugrater.com/releases/smartloli-security-releases-october-20262026-10-28 https://bugrater.com/releases/allegro-security-releases-october-20262026-10-28 https://bugrater.com/releases/absmach-security-releases-october-20262026-10-28 https://bugrater.com/releases/exrick-security-releases-october-20262026-10-28 https://bugrater.com/releases/suyuan32-security-releases-october-20262026-10-28 https://bugrater.com/releases/wimoor-erp-security-releases-october-20262026-10-28 https://bugrater.com/releases/databufflabs-security-releases-october-20262026-10-28 https://bugrater.com/releases/qiantongtech-security-releases-october-20262026-10-28 https://bugrater.com/releases/shaiwz-security-releases-october-20262026-10-28 https://bugrater.com/releases/roinli-security-releases-october-20262026-10-28 https://bugrater.com/releases/niefy-security-releases-october-20262026-10-28 https://bugrater.com/releases/webvella-security-releases-october-20262026-10-28 https://bugrater.com/releases/ottermind-security-releases-october-20262026-10-28 https://bugrater.com/releases/sugarforever-security-releases-october-20262026-10-28 https://bugrater.com/releases/langchat-security-releases-october-20262026-10-28 https://bugrater.com/releases/vastxie-security-releases-october-20262026-10-28 https://bugrater.com/releases/canove-security-releases-october-20262026-10-28 https://bugrater.com/releases/amauric-security-releases-october-20262026-10-28 https://bugrater.com/releases/nduckmink-security-releases-october-20262026-10-28 https://bugrater.com/releases/kuafuai-security-releases-october-20262026-10-28 https://bugrater.com/releases/google-chrome-security-releases-july-20262026-10-28 https://bugrater.com/releases/google-chrome-security-releases-august-20262026-10-28 https://bugrater.com/releases/google-chrome-security-releases-september-20262026-10-28 https://bugrater.com/releases/google-chrome-security-releases-october-20262026-10-28 https://bugrater.com/releases/grandnode-security-releases-october-20262026-10-28 https://bugrater.com/releases/grokability-security-releases-october-20262026-10-28 https://bugrater.com/releases/cve-2026-78661-when-coalescing-adjacent-text-nodes-in-addtext-and-fosterparent-appending-to-an-existing-textnode-s-data-via-string-concatenation-n-data-text-reallocated2026-10-28 https://bugrater.com/releases/cve-2026-97045-in-childtextnodesareliteral-walking-up-the-tree-previously-stopped-at-the-nearest-foreign-ancestor-once-an-html-integration-point-was-found-however-that-inte2026-10-28 https://bugrater.com/releases/cve-2026-118128-a-vulnerability-has-been-found-in-a2aproject-a2a-js-up-to-1-1-0-impacted-is-the-function-resultmanager-applystatusupdate-of-the-file-src-server-result-manager2026-10-28 https://bugrater.com/releases/cve-2026-104016-protobufparser-parses-length-prefixed-protobuf-string-and-bytes-fields-by-checking-inputptr-len-inputend-and-then-on-the-fast-path-calling-finishsho2026-10-28 https://bugrater.com/releases/cve-2026-104895-the-asynchronous-smile-parser-nonblockingbytearrayparser-uses-a-raw-binary-length-prefix-taken-from-untrusted-input-to-allocate-a-byte-before-the-body-is-re2026-10-28 https://bugrater.com/releases/cve-2026-118129-a-vulnerability-was-found-in-jeremyckahn-chitchatter-up-to-f82538633813c854a81a8b2112a2f6ba17b39cbc-the-affected-element-is-the-function-isconfigmessageevent-o2026-10-28 https://bugrater.com/releases/cve-2026-110747-protobufparser-readstringkey-reads-the-length-prefix-of-a-protobuf-map-entry-s-string-key-into-an-attacker-controlled-int-and-then-checks-inputptr-len2026-10-28 https://bugrater.com/releases/cve-2026-110879-jackson-databind-validates-the-outer-class-of-a-class-name-type-id-but-accepts-attacker-selected-classes-inside-its-generic-arguments-even-when-those-classes-v2026-10-28 https://bugrater.com/releases/cve-2026-106013-the-jupiter-x-core-plugin-for-wordpress-is-vulnerable-to-authentication-bypass-via-the-twitter-x-social-login-handler-in-all-versions-up-to-and-including-4-61-02026-10-28 https://bugrater.com/releases/cve-2026-118271-a-security-vulnerability-has-been-detected-in-a2ui-project-a2ui-up-to-0-10-6-this-impacts-an-unknown-function-of-the-file-renderers-web-core-src-v0-9-rendering2026-10-28 https://bugrater.com/releases/cve-2026-118272-a-vulnerability-was-detected-in-a2ui-project-a2ui-up-to-0-10-6-affected-is-the-function-datacontext-dispatchexpressionerror-of-the-file-renderers-web-core-src2026-10-28 https://bugrater.com/releases/cve-2013-20007-linksys-wag200g-through-1-01-06-contains-an-os-command-injection-vulnerability-that-allows-authenticated-attackers-to-execute-commands-by-injecting-backtick-del2026-10-28 https://bugrater.com/releases/cve-2013-20008-linksys-wag200g-through-1-01-06-contains-a-weak-password-change-mechanism-that-allows-attackers-to-change-the-administrator-password-without-supplying-the-curre2026-10-28 https://bugrater.com/releases/cve-2013-20009-linksys-wag200g-through-1-01-06-contains-a-stored-cross-site-scripting-vulnerability-that-allows-authenticated-attackers-to-inject-scripts-via-the-policy-name-p2026-10-28 https://bugrater.com/releases/cve-2014-125136-c97net-qengine-cms-through-6-0-0-kemana-directory-through-1-5-6-and-cart-engine-through-3-0-0-contain-an-information-disclosure-vulnerability-that-exposes-dat2026-10-28 https://bugrater.com/releases/cve-2014-125137-c97net-qengine-cms-through-6-0-0-kemana-directory-through-1-5-6-and-cart-engine-through-3-0-0-contain-a-local-file-inclusion-vulnerability-in-the-run-paramete2026-10-28 https://bugrater.com/releases/cve-2014-125138-c97net-qengine-cms-through-6-0-0-kemana-directory-through-1-5-6-and-cart-engine-through-3-0-0-contain-an-unrestricted-file-upload-vulnerability-in-administrat2026-10-28 https://bugrater.com/releases/cve-2015-20129-crushftp-before-7-3-0-contains-a-cross-site-request-forgery-vulnerability-that-allows-attackers-to-perform-administrative-actions-because-csrf-protection-is-dis2026-10-28 https://bugrater.com/releases/cve-2026-107625-the-ultimate-member-user-profile-registration-login-member-directory-content-restriction-membership-plugin-plugin-for-wordpress-is-vulnerable-to-stored2026-10-28 https://bugrater.com/releases/cve-2026-107745-the-ai-engine-the-chatbot-ai-framework-mcp-for-wordpress-plugin-for-wordpress-is-vulnerable-to-limited-media-file-deletion-due-to-insufficient-file-path-va2026-10-28 https://bugrater.com/releases/cve-2026-109209-the-all-in-one-video-gallery-video-player-galleries-for-youtube-vimeo-self-hosted-videos-plugin-for-wordpress-is-vulnerable-to-stored-cross-site-scriptin2026-10-28 https://bugrater.com/releases/cve-2026-109974-the-all-in-one-video-gallery-video-player-galleries-for-youtube-vimeo-self-hosted-videos-plugin-for-wordpress-is-vulnerable-to-stored-cross-site-scriptin2026-10-28 https://bugrater.com/releases/cve-2026-109999-the-ai-marketing-expert-ai-email-marketing-ai-content-generator-seo-analyzer-ai-workflow-automation-social-media-ai-chatbot-plugin-for-wordpress-is-vuln2026-10-28 https://bugrater.com/releases/cve-2026-111314-the-affiliate-toolkit-multi-network-affiliate-amazon-product-display-plugin-for-wordpress-is-vulnerable-to-stored-cross-site-scripting-via-the-atkp-product2026-10-28 https://bugrater.com/releases/cve-2026-117605-nopcommerce-before-5-00-0-contains-a-missing-authorization-vulnerability-in-the-admin-productcontroller-relatedproductaddpopup-crosssellproductaddpopup-and-ass2026-10-28 https://bugrater.com/releases/cve-2026-117606-nexopos-through-6-3-0-contains-a-missing-authorization-vulnerability-that-allows-authenticated-cashiers-to-manipulate-other-cashiers-register-sessions-because2026-10-28 https://bugrater.com/releases/cve-2026-117607-xerte-online-toolkits-through-3-15-5-contains-a-remote-code-execution-vulnerability-that-allows-authenticated-users-with-system-permission-to-run-php-by-importi2026-10-28 https://bugrater.com/releases/cve-2026-117608-assimp-through-6-0-5-contains-an-integer-overflow-vulnerability-in-md2importer-validateheader-that-allows-attackers-to-bypass-frame-table-bounds-checks-using2026-10-28 https://bugrater.com/releases/cve-2026-117609-rtl-433-through-25-12-contains-a-stack-based-buffer-overflow-vulnerability-in-proflame2-mc-that-allows-nearby-attackers-to-write-past-a-7-byte-stack-buffer-by2026-10-28 https://bugrater.com/releases/cve-2026-117610-libexpat-through-2-9-0-contains-a-null-pointer-dereference-vulnerability-in-externalentityinitprocessor2-in-lib-xmlparse-c-that-mishandles-the-xml-tok-none-to2026-10-28 https://bugrater.com/releases/cve-2026-118273-a-flaw-has-been-found-in-a2ui-project-a2ui-up-to-0-10-6-affected-by-this-vulnerability-is-the-function-datamodel-set-of-the-file-renderers-web-core-src-v0-9-st2026-10-28 https://bugrater.com/releases/cve-2026-118274-a-vulnerability-has-been-found-in-a2ui-project-a2ui-up-to-0-10-6-affected-by-this-issue-is-some-unknown-functionality-of-the-file-renderers-web-core-src-v0-9-r2026-10-28 https://bugrater.com/releases/cve-2026-118370-libexpat-through-2-9-0-contains-a-signed-integer-overflow-vulnerability-in-storeatts-in-lib-xmlparse-c-that-allows-attackers-to-trigger-out-of-bounds-writes-v2026-10-28 https://bugrater.com/releases/cve-2026-118371-libressl-through-4-4-0-contains-a-crlf-injection-vulnerability-in-the-libcrypto-ocsp-sendreq-new-and-ocsp-parse-url-functions-which-write-unvalidated-reque2026-10-28 https://bugrater.com/releases/cve-2026-118372-libressl-ocspcheck-through-4-4-0-contains-a-crlf-injection-vulnerability-that-allows-attackers-to-inject-http-headers-by-embedding-cr-lf-sequences-in-a-certific2026-10-28 https://bugrater.com/releases/cve-2026-118373-libressl-ocspcheck-through-4-4-0-contains-a-cleartext-transmission-vulnerability-because-url2host-discards-the-ocsp-url-scheme-and-http-alloc-only-selects-t2026-10-28 https://bugrater.com/releases/cve-2026-118374-libressl-ocspcheck-through-4-4-0-contains-a-memory-exhaustion-vulnerability-that-allows-malicious-ocsp-responders-to-exhaust-memory-by-sending-unbounded-http-re2026-10-28 https://bugrater.com/releases/cve-2026-118375-llama-cpp-b8841-before-b11865-contains-an-out-of-bounds-write-vulnerability-in-the-ggml-rpc-rdma-transport-rdma-recv-function-that-allows-unauthenticated-peer2026-10-28 https://bugrater.com/releases/cve-2026-118376-weknora-before-0-8-2-contains-a-server-side-request-forgery-vulnerability-in-isrestrictedip-that-misclassifies-nat64-prefixed-ipv6-addresses-as-public-authen2026-10-28 https://bugrater.com/releases/cve-2026-118377-mews-pos-through-2-0-0-contains-an-insufficient-verification-of-data-authenticity-vulnerability-that-allows-unauthenticated-attackers-to-forge-payment-results-b2026-10-28 https://bugrater.com/releases/cve-2026-118378-tabularis-before-0-28-0-contains-an-sql-injection-vulnerability-in-its-sqlite-driver-that-allows-mcp-clients-to-execute-stacked-statements-by-supplying-a-crafte2026-10-28 https://bugrater.com/releases/cve-2026-118384-gnu-mtools-through-4-0-49-has-an-out-of-bounds-write-in-parse-vses-in-vfat-c2026-10-28 https://bugrater.com/releases/cve-2026-84999-the-pie-register-premium-plugin-for-wordpress-is-vulnerable-to-unrestricted-file-type-upload-in-all-versions-up-to-and-including-3-8-4-0-via-the-piereg-file-u2026-10-28 https://bugrater.com/releases/cve-2026-97019-the-amp-for-wp-accelerated-mobile-pages-plugin-for-wordpress-is-vulnerable-to-stored-cross-site-scripting-via-headline-shortcode-attribute-in-all-versions2026-10-28 https://bugrater.com/releases/cve-2026-111255-the-affiliate-toolkit-multi-network-affiliate-amazon-product-display-plugin-for-wordpress-is-vulnerable-to-arbitrary-file-upload-in-all-versions-up-to-and2026-10-28 https://bugrater.com/releases/cve-2026-111727-the-appointment-booking-calendar-plugin-for-wordpress-is-vulnerable-to-stored-cross-site-scripting-via-the-vs-text-submitbtn-parameter-in-all-versions-up-to2026-10-28 https://bugrater.com/releases/cve-2026-116613-the-animated-text-block-plugin-for-wordpress-is-vulnerable-to-sensitive-information-exposure-in-versions-up-to-and-including-1-2-6-via-the-animated-text-sho2026-10-28 https://bugrater.com/releases/cve-2026-118275-a-vulnerability-was-found-in-a2ui-project-a2ui-up-to-0-10-6-this-affects-the-function-datacontext-resolvesignal-of-the-file-renderers-web-core-src-v0-9-renderi2026-10-28 https://bugrater.com/releases/cve-2026-118276-a-vulnerability-was-determined-in-a2ui-project-a2ui-up-to-0-10-6-this-vulnerability-affects-the-function-formatstring-of-the-file-renderers-web-core-src-v0-9-b2026-10-28 https://bugrater.com/releases/cve-2026-1928-the-rank-math-seo-ai-seo-tools-to-dominate-seo-rankings-plugin-for-wordpress-is-vulnerable-to-php-object-injection-in-all-versions-up-to-and-including-1-0-22026-10-28 https://bugrater.com/releases/security-vulnerabilities-fixed-in-thunderbird-153-62026-10-28 https://bugrater.com/releases/security-vulnerabilities-fixed-in-thunderbird-1592026-10-28 https://bugrater.com/releases/security-vulnerabilities-fixed-in-firefox-esr-153-62026-10-28 https://bugrater.com/releases/lhccong-security-releases-october-20262026-10-28 https://bugrater.com/releases/jingsewu-security-releases-october-20262026-10-28 https://bugrater.com/releases/lingguoai-security-releases-october-20262026-10-28 https://bugrater.com/releases/mozilla-security-releases-september-20262026-10-28 https://bugrater.com/releases/python-software-foundation-security-releases-september-20262026-10-28 https://bugrater.com/releases/gg-soft-software-services-inc-security-releases-october-20262026-10-28 https://bugrater.com/releases/cve-2026-115522-exposure-of-resource-to-wrong-sphere-cwe-668-in-fileartifactservice-in-google-agent-development-kit-adk-for-python-google-adk-versions-1-19-0-before-1-392026-10-28 https://bugrater.com/releases/cve-2026-103331-the-unipay-payment-gateway-for-woocommerce-wordpress-plugin-through-2-3-does-not-properly-verify-the-authenticity-of-payment-notifications-as-their-signature-i2026-10-28 https://bugrater.com/releases/cve-2026-103372-the-payconiq-wordpress-plugin-through-1-0-4-does-not-check-that-a-visitor-is-allowed-to-see-an-order-before-returning-its-confirmation-link-allowing-unauthenti2026-10-28 https://bugrater.com/releases/cve-2026-103382-the-casso-flow-wordpress-plugin-before-4-2-0-does-not-properly-authenticate-incoming-bank-transfer-payment-notifications-as-the-token-used-to-verify-them-is-e2026-10-28 https://bugrater.com/releases/cve-2026-103688-the-checkout-files-upload-for-woocommerce-wordpress-plugin-before-2-4-0-does-not-validate-uploaded-file-types-when-its-accepted-file-types-setting-is-left-empty2026-10-28 https://bugrater.com/releases/cve-2026-104694-the-thrive-automator-wordpress-plugin-before-11-2-does-not-properly-sanitize-and-escape-a-parameter-s-array-key-before-using-it-in-a-sql-query-allowing-authent2026-10-28 https://bugrater.com/releases/cve-2026-105972-the-menu-cart-for-woocommerce-wordpress-plugin-before-3-2-1-does-not-sanitise-and-escape-cart-item-variation-data-before-outputting-it-in-its-cart-slide-out-al2026-10-28 https://bugrater.com/releases/cve-2026-105997-the-booking-package-wordpress-plugin-before-1-7-33-does-not-restrict-who-can-trigger-its-booking-verification-code-emails-nor-bind-the-recipient-to-server-side2026-10-28 https://bugrater.com/releases/cve-2026-106002-the-court-reservation-wordpress-plugin-before-1-12-4-does-not-perform-any-authorisation-or-nonce-verification-on-one-of-its-challenge-management-actions-allow2026-10-28 https://bugrater.com/releases/cve-2026-106003-the-court-reservation-wordpress-plugin-before-1-12-4-does-not-perform-any-authorization-authentication-or-nonce-validation-on-one-of-its-ajax-actions-allowin2026-10-28 https://bugrater.com/releases/cve-2026-106647-the-royal-addons-for-elementor-wordpress-plugin-before-1-7-1070-does-not-scope-a-contact-form-s-email-delivery-configuration-to-the-form-s-own-document-or-owne2026-10-28 https://bugrater.com/releases/cve-2026-107097-the-royal-addons-for-elementor-wordpress-plugin-before-1-7-1070-does-not-perform-any-authorization-check-before-using-the-site-owner-s-stored-mailchimp-credent2026-10-28 https://bugrater.com/releases/cve-2026-107098-the-royal-addons-for-elementor-wordpress-plugin-before-1-7-1070-does-not-sanitise-and-escape-one-of-its-map-widget-s-size-settings-before-concatenating-it-into2026-10-28 https://bugrater.com/releases/cve-2026-107100-the-royal-addons-for-elementor-wordpress-plugin-before-1-7-1070-does-not-verify-that-a-requested-post-is-publicly-viewable-before-returning-its-content-via-an2026-10-28 https://bugrater.com/releases/cve-2026-109236-the-customer-email-verification-for-woocommerce-plugin-for-wordpress-is-vulnerable-to-authentication-bypass-via-a-predictable-email-verification-token-in-all-ve2026-10-28 https://bugrater.com/releases/cve-2026-110292-the-payplug-for-woocommerce-official-wordpress-plugin-before-3-1-1-does-not-verify-that-the-requester-owns-the-woocommerce-order-named-in-a-payment-request-a2026-10-28 https://bugrater.com/releases/cve-2026-110506-the-page-builder-by-siteorigin-wordpress-plugin-before-2-38-0-does-not-sanitize-or-escape-a-widget-property-before-storing-it-and-outputting-it-in-the-page-buil2026-10-28 https://bugrater.com/releases/cve-2026-110507-the-page-builder-by-siteorigin-wordpress-plugin-before-2-38-0-does-not-restrict-the-query-arguments-users-can-add-to-its-post-loop-widget-or-limit-the-loop-to-p2026-10-28 https://bugrater.com/releases/cve-2026-110509-the-essential-addons-for-elementor-wordpress-plugin-before-6-8-7-does-not-restrict-the-post-type-or-meta-query-an-unauthenticated-visitor-can-pass-to-its-pagin2026-10-28 https://bugrater.com/releases/cve-2026-110524-the-copy-anything-to-clipboard-for-wordpress-wordpress-plugin-before-5-5-5-does-not-sanitize-and-escape-a-shortcode-attribute-before-storing-it-and-writing-it2026-10-28 https://bugrater.com/releases/cve-2026-110691-the-wporlogin-wordpress-plugin-before-3-1-0-does-not-perform-a-capability-check-or-validate-a-nonce-before-updating-its-hidden-login-url-settings-which-could2026-10-28 https://bugrater.com/releases/cve-2026-111021-the-persian-woocommerce-sms-wordpress-plugin-before-7-3-2-does-not-sanitise-and-escape-a-parameter-before-reflecting-it-back-into-an-html2026-10-28 https://bugrater.com/releases/cve-2026-111027-the-welcart-e-commerce-wordpress-plugin-before-2-12-6-does-not-properly-sanitise-and-escape-a-parameter-before-using-it-in-a-sql-query-and-strips-the-escaping2026-10-28 https://bugrater.com/releases/cve-2026-111031-the-welcart-e-commerce-wordpress-plugin-before-2-12-6-does-not-validate-a-user-supplied-url-before-using-it-in-a-redirect-allowing-unauthenticated-attackers-to2026-10-28 https://bugrater.com/releases/cve-2026-111032-the-welcart-e-commerce-wordpress-plugin-before-2-12-6-does-not-properly-verify-authorization-against-the-targeted-product-before-processing-sku-changes-because2026-10-28 https://bugrater.com/releases/cve-2026-111577-the-gosmtp-wordpress-plugin-before-1-2-5-does-not-perform-a-settings-management-authorization-check-on-its-smtp-configuration-page-which-is-gated-only-on-the2026-10-28 https://bugrater.com/releases/cve-2026-111960-the-royal-mcp-wordpress-plugin-before-1-5-10-does-not-perform-object-level-or-post-type-authorisation-checks-in-one-of-its-search-tools-allowing-authenticated2026-10-28 https://bugrater.com/releases/cve-2026-111961-the-royal-mcp-wordpress-plugin-before-1-5-10-does-not-perform-an-object-level-permission-check-before-duplicating-a-requested-page-relying-on-a-generic-capabi2026-10-28 https://bugrater.com/releases/cve-2026-111967-the-mp3-audio-player-wordpress-plugin-before-5-16-does-not-escape-one-of-its-audio-player-shortcode-attributes-before-outputting-it-into-an-html-attribute-all2026-10-28 https://bugrater.com/releases/cve-2026-113485-the-media-library-assistant-wordpress-plugin-before-3-42-does-not-consistently-validate-its-csrf-nonce-on-the-media-library-bulk-action-handler-checking-the-no2026-10-28 https://bugrater.com/releases/cve-2026-113486-the-media-library-assistant-wordpress-plugin-before-3-42-does-not-verify-a-csrf-nonce-on-its-empty-trash-media-action-so-a-forged-cross-site-request-can-cause2026-10-28 https://bugrater.com/releases/cve-2026-113487-the-geodirectory-wordpress-plugin-before-2-8-196-does-not-properly-sanitise-or-escape-a-post-badge-click-through-link-value-before-outputting-it-in-an-anchor-e2026-10-28 https://bugrater.com/releases/cve-2026-113488-the-geodirectory-wordpress-plugin-before-2-8-196-does-not-properly-escape-a-post-badge-shortcode-attribute-for-a-javascript-context-before-placing-it-in-an-inl2026-10-28 https://bugrater.com/releases/cve-2026-113494-the-geodirectory-wordpress-plugin-before-2-8-195-does-not-perform-any-status-or-ownership-check-when-rendering-a-listing-referenced-by-an-id-attribute-in-its-f2026-10-28 https://bugrater.com/releases/cve-2026-113813-the-payplug-for-woocommerce-official-wordpress-plugin-before-3-1-1-does-not-perform-any-capability-or-ownership-check-on-a-set-of-unauthenticated-ajax-actions2026-10-28 https://bugrater.com/releases/cve-2026-115224-the-customer-engagement-system-wordpress-plugin-before-2-0-2-does-not-safely-build-the-sql-statements-that-store-a-popup-s-page-and-category-visibility-rules2026-10-28 https://bugrater.com/releases/cve-2026-115225-the-customer-engagement-system-wordpress-plugin-before-2-0-2-does-not-restrict-access-to-its-mailchimp-interest-group-lookup-or-validate-the-api-key-supplied-t2026-10-28 https://bugrater.com/releases/cve-2026-115255-the-wp-roster-wordpress-plugin-before-2-35-does-not-perform-any-capability-or-nonce-checks-on-one-of-its-ajax-actions-allowing-unauthenticated-attackers-to-del2026-10-28 https://bugrater.com/releases/cve-2026-115281-the-recipe-card-blocks-lite-wordpress-plugin-before-3-6-4-does-not-sanitize-and-cast-a-block-and-shortcode-attribute-before-concatenating-it-into-sql-queries-a2026-10-28 https://bugrater.com/releases/cve-2026-15323-the-product-designer-for-woocommerce-wordpress-lumise-plugin-for-wordpress-is-vulnerable-to-directory-traversal-in-all-versions-up-to-and-including-2-1-2-vi2026-10-28 https://bugrater.com/releases/cve-2026-100175-the-postie-plugin-for-wordpress-is-vulnerable-to-stored-cross-site-scripting-via-email-body-url-autolink-in-all-versions-up-to-and-including-1-9-87-due-to-ins2026-10-28 https://bugrater.com/releases/cve-2026-103370-the-awesome-support-wordpress-helpdesk-support-plugin-plugin-for-wordpress-is-vulnerable-to-stored-cross-site-scripting-via-the-wpas-files-parameter-in-al2026-10-28 https://bugrater.com/releases/cve-2026-103996-the-if-so-dynamic-content-elementor-all-page-builders-personalization-plugin-for-wordpress-is-vulnerable-to-stored-cross-site-scripting-via-the-url-parame2026-10-28 https://bugrater.com/releases/cve-2026-104729-the-avada-fusion-builder-plugin-for-wordpress-is-vulnerable-to-stored-cross-site-scripting-via-the-tab-index-empty-notice-parameter-in-all-versions-up-to2026-10-28 https://bugrater.com/releases/cve-2026-104740-the-if-so-dynamic-content-elementor-all-page-builders-personalization-plugin-for-wordpress-is-vulnerable-to-stored-cross-site-scripting-via-conversion-sho2026-10-28 https://bugrater.com/releases/cve-2026-104743-the-tainacan-plugin-for-wordpress-is-vulnerable-to-directory-traversal-in-all-versions-up-to-and-including-1-3-0-via-the-tmp-file-parameter-parameter-this2026-10-28 https://bugrater.com/releases/cve-2026-107710-the-hustle-email-marketing-lead-generation-optins-popups-plugin-for-wordpress-is-vulnerable-to-stored-cross-site-scripting-via-the-content-title-paramet2026-10-28 https://bugrater.com/releases/cve-2026-108366-the-easy-jobs-ai-powered-job-listing-job-board-career-page-recruitment-hiring-solution-plugin-for-wordpress-is-vulnerable-to-authenticated-contributor2026-10-28 https://bugrater.com/releases/cve-2026-109218-the-contact-manager-plugin-for-wordpress-is-vulnerable-to-arbitrary-file-upload-in-all-versions-up-to-and-including-9-1-2-via-the-add-message-function-this-i2026-10-28 https://bugrater.com/releases/cve-2026-109370-the-document-embedder-let-visitors-read-files-without-downloading-plugin-for-wordpress-is-vulnerable-to-stored-dom-based-cross-site-scripting-via-the-content2026-10-28 https://bugrater.com/releases/cve-2026-109381-the-mage-eventpress-plugin-for-wordpress-is-vulnerable-to-privilege-escalation-in-versions-up-to-and-including-5-7-8-this-is-due-to-the-mep-grant-shop-manager2026-10-28 https://bugrater.com/releases/cve-2026-109384-the-the-innovative-form-builder-ivyforms-plugin-for-wordpress-is-vulnerable-to-arbitrary-file-upload-in-all-versions-up-to-and-including-1-5-1-via-the-filte2026-10-28 https://bugrater.com/releases/cve-2026-109385-the-uichemy-convert-figma-prompts-and-ai-builds-to-elementor-gutenberg-and-bricks-plugin-for-wordpress-is-vulnerable-to-stored-cross-site-scripting-via-the2026-10-28 https://bugrater.com/releases/cve-2026-109590-the-tour-booking-manager-plugin-for-wordpress-is-vulnerable-to-stored-cross-site-scripting-via-the-width-height-and-zoom-shortcode-attributes-of-the-ttb2026-10-28 https://bugrater.com/releases/cve-2026-109972-the-s2member-excellent-for-all-kinds-of-memberships-content-restriction-paywalls-member-access-subscriptions-plugin-for-wordpress-is-vulnerable-to-stored-c2026-10-28 https://bugrater.com/releases/cve-2026-109975-the-cozy-blocks-website-builder-for-wordpress-block-editor-gutenberg-blocks-patterns-templates-plugin-for-wordpress-is-vulnerable-to-stored-cross-site-sc2026-10-28 https://bugrater.com/releases/cve-2026-109978-the-cozy-blocks-website-builder-for-wordpress-block-editor-gutenberg-blocks-patterns-templates-plugin-for-wordpress-is-vulnerable-to-stored-cross-site-sc2026-10-28 https://bugrater.com/releases/cve-2026-109979-the-related-posts-for-wordpress-plugin-for-wordpress-is-vulnerable-to-sensitive-information-exposure-in-versions-up-to-and-including-3-0-0-via-the-rp4wp-crea2026-10-28 https://bugrater.com/releases/cve-2026-109980-the-related-posts-for-wordpress-plugin-for-wordpress-is-vulnerable-to-sensitive-information-exposure-in-all-versions-up-to-and-including-3-0-0-via-the-rp4wp2026-10-28 https://bugrater.com/releases/cve-2026-109988-the-product-addons-for-woocommerce-product-options-with-custom-fields-plugin-for-wordpress-is-vulnerable-to-stored-cross-site-scripting-via-the-fields-sectio2026-10-28 https://bugrater.com/releases/cve-2026-110020-the-rich-showcase-for-google-reviews-plugin-for-wordpress-is-vulnerable-to-authorization-bypass-in-all-versions-up-to-and-including-7-1-6-this-is-due-to-the-p2026-10-28 https://bugrater.com/releases/cve-2026-110071-the-mang-board-plugin-for-wordpress-is-vulnerable-to-stored-cross-site-scripting-via-the-align-parameter-in-all-versions-up-to-and-including-2-4-5-due-to-in2026-10-28 https://bugrater.com/releases/cve-2026-110185-the-bit-flows-ai-agent-automation-integrations-for-forms-crm-ecommerce-google-sheets-and-more-plugin-for-wordpress-is-vulnerable-to-local-file-inclusion2026-10-28 https://bugrater.com/releases/cve-2026-110662-the-mxchat-ai-chatbot-content-generation-for-wordpress-plugin-for-wordpress-is-vulnerable-to-stored-dom-based-cross-site-scripting-via-the-feedback-parame2026-10-28 https://bugrater.com/releases/cve-2026-111068-the-designsetgo-plugin-for-wordpress-is-vulnerable-to-stored-cross-site-scripting-via-the-tagname-parameter-in-all-versions-up-to-and-including-2-11-0-due-t2026-10-28 https://bugrater.com/releases/cve-2026-111111-the-prime-slider-hero-slider-carousel-woocommerce-post-slider-elementor-addons-plugin-for-wordpress-is-vulnerable-to-stored-cross-site-scripting-via-the2026-10-28 https://bugrater.com/releases/cve-2026-111120-the-vikrentcar-car-rental-management-system-plugin-for-wordpress-is-vulnerable-to-cross-site-request-forgery-in-all-versions-up-to-and-including-1-4-8-this-i2026-10-28 https://bugrater.com/releases/cve-2026-111213-the-travelly-tour-travel-booking-manager-for-woocommerce-plugin-for-wordpress-is-vulnerable-to-authorization-bypass-in-all-versions-up-to-and-including-22026-10-28 https://bugrater.com/releases/cve-2026-111372-the-ai-chatbot-for-woocommerce-woowbot-plugin-for-wordpress-is-vulnerable-to-authorization-bypass-in-all-versions-up-to-and-including-5-0-0-this-is-due-to2026-10-28 https://bugrater.com/releases/cve-2026-116609-the-wp-visitor-statistics-real-time-traffic-plugin-for-wordpress-is-vulnerable-to-sql-injection-via-the-from-and-sibling-to-first-second-shortcode-a2026-10-28 https://bugrater.com/releases/cve-2026-116610-the-clean-login-plugin-for-wordpress-is-vulnerable-to-missing-authorization-in-versions-up-to-and-including-1-20-1-due-to-a-missing-capability-check-on-the-cl2026-10-28 https://bugrater.com/releases/cve-2026-116749-the-vikrentcar-car-rental-management-system-plugin-for-wordpress-is-vulnerable-to-stored-cross-site-scripting-via-the-classname-parameter-in-all-versions-up-t2026-10-28 https://bugrater.com/releases/cve-2026-116750-the-vikrentcar-car-rental-management-system-plugin-for-wordpress-is-vulnerable-to-blind-sql-injection-via-the-catid-parameter-in-all-versions-up-to-and-inclu2026-10-28 https://bugrater.com/releases/cve-2026-116761-the-cmb2-plugin-for-wordpress-is-vulnerable-to-stored-cross-site-scripting-via-the-cmb43ex1-grp-0-txt-wysiwyg-field-inside-group-field-id-controlled-by-in2026-10-28 https://bugrater.com/releases/cve-2026-118164-the-if-so-dynamic-content-elementor-all-page-builders-personalization-plugin-for-wordpress-is-vulnerable-to-stored-cross-site-scripting-via-the-repeater2026-10-28 https://bugrater.com/releases/cve-2026-118169-the-hustle-email-marketing-lead-generation-optins-popups-plugin-for-wordpress-is-vulnerable-to-stored-cross-site-scripting-via-the-content-cta-label-par2026-10-28 https://bugrater.com/releases/cve-2026-2839-the-advanced-custom-fields-extended-plugin-for-wordpress-is-vulnerable-to-unauthorized-access-of-data-and-triggering-of-server-side-actions-in-all-versions-up2026-10-28 https://bugrater.com/releases/cve-2026-63286-database-backups-are-vulnerable-to-offline-attacks-backups-created-using-a-version-prior-to-the-patched-version-are-still-vulnerable-axis-camera-station-pro-a2026-10-28 https://bugrater.com/releases/cve-2026-76005-the-wp-inventory-manager-plugin-for-wordpress-is-vulnerable-to-time-based-sql-injection-via-sort-order-shortcode-attribute-in-all-versions-up-to-and-includin2026-10-28 https://bugrater.com/releases/cve-2026-76058-the-paypal-brasil-para-woocommerce-plugin-for-wordpress-is-vulnerable-to-authorization-bypass-in-all-versions-up-to-and-including-1-7-8-this-is-due-to-the-pl2026-10-28 https://bugrater.com/releases/cve-2026-76780-the-beyondseo-plugin-for-wordpress-is-vulnerable-to-unauthorized-access-in-versions-up-to-and-including-1-3-6-this-is-due-to-the-plugin-permanently-granting2026-10-28 https://bugrater.com/releases/cve-2026-77188-the-waitlist-woocommerce-back-in-stock-notifier-plugin-for-wordpress-is-vulnerable-to-stored-cross-site-scripting-via-type-shortcode-attribute-in-all-vers2026-10-28 https://bugrater.com/releases/cve-2026-77871-the-post-snippets-custom-wordpress-code-snippets-customizer-plugin-for-wordpress-is-vulnerable-to-stored-cross-site-scripting-via-shortcode-attributes-in-all2026-10-28 https://bugrater.com/releases/cve-2026-92098-the-webheadcoder-multi-step-forms-for-contact-form-7-plugin-for-wordpress-is-vulnerable-to-reflected-cross-site-scripting-via-the-l10n-print-after-parameter-i2026-10-28 https://bugrater.com/releases/cve-2026-101935-the-echo-knowledge-base-documentation-faqs-chat-smart-search-plugin-for-wordpress-is-vulnerable-to-reflected-cross-site-scripting-via-the-new-kb-config2026-10-28 https://bugrater.com/releases/cve-2026-118435-out-of-bounds-write-vulnerability-in-samsung-open-source-escargot-allows-buffer-manipulation2026-10-28 https://bugrater.com/releases/cve-2026-85655-the-enable-media-replace-plugin-for-wordpress-is-vulnerable-to-authorization-bypass-in-all-versions-up-to-and-including-4-2-2-this-is-due-to-the-plugin-not-p2026-10-28 https://bugrater.com/releases/cve-2026-92797-the-memberpress-plugin-for-wordpress-is-vulnerable-to-cross-site-request-forgery-in-versions-up-to-and-including-1-14-1-this-is-due-to-a-bypassable-nonce-ver2026-10-28 https://bugrater.com/releases/revolution-slider-security-releases-june-20262026-10-28 https://bugrater.com/releases/electronic-arts-security-releases-october-20262026-10-28 https://bugrater.com/releases/fasterxml-security-releases-october-20262026-10-28 https://bugrater.com/releases/hostspa-security-releases-october-20262026-10-28 https://bugrater.com/releases/thimpress-security-releases-october-20262026-10-28 https://bugrater.com/releases/daigo75-security-releases-october-20262026-10-28 https://bugrater.com/releases/uscnanbu-security-releases-october-20262026-10-28 https://bugrater.com/releases/themifyme-security-releases-october-20262026-10-28 https://bugrater.com/releases/peachpay-payments-express-checkout-for-woocommerce-supports-stripe-paypal-square-authorize-net-nmi-security-releases-october-20262026-10-28 https://bugrater.com/releases/ukr-to-lat-security-releases-october-20262026-10-28 https://bugrater.com/releases/contact-form-7-signature-addon-security-releases-october-20262026-10-28 https://bugrater.com/releases/acf-frontend-admin-by-dynamiapps-security-releases-october-20262026-10-28 https://bugrater.com/releases/bsk-pdf-manager-security-releases-october-20262026-10-28 https://bugrater.com/releases/patreon-wordpress-security-releases-october-20262026-10-28 https://bugrater.com/releases/thirstyaffiliates-security-releases-october-20262026-10-28 https://bugrater.com/releases/lmcache-security-releases-june-20262026-10-28 https://bugrater.com/releases/heateor-support-security-releases-october-20262026-10-28 https://bugrater.com/releases/davidanderson-security-releases-october-20262026-10-28 https://bugrater.com/releases/wssoffice21-security-releases-october-20262026-10-28 https://bugrater.com/releases/stiofansisland-security-releases-october-20262026-10-28 https://bugrater.com/releases/automattic-security-releases-september-20262026-10-28 https://bugrater.com/releases/ruben-garcia-security-releases-september-20262026-10-28 https://bugrater.com/releases/gantry-security-releases-october-20262026-10-28 https://bugrater.com/releases/sourcecodester-security-releases-september-20262026-10-28 https://bugrater.com/releases/paycomet-security-releases-october-20262026-10-28 https://bugrater.com/releases/coder-security-releases-october-20262026-10-28 https://bugrater.com/releases/fleetdm-security-releases-october-20262026-10-28 https://bugrater.com/releases/thu-mig-security-releases-october-20262026-10-28 https://bugrater.com/releases/nemotyrant-security-releases-october-20262026-10-28 https://bugrater.com/releases/datastax-security-releases-october-20262026-10-28 https://bugrater.com/releases/alexpasmantier-security-releases-october-20262026-10-28 https://bugrater.com/releases/otter-blocks-security-releases-october-20262026-10-28 https://bugrater.com/releases/tasty-recipes-lite-security-releases-october-20262026-10-28 https://bugrater.com/releases/modern-events-calendar-lite-security-releases-october-20262026-10-28 https://bugrater.com/releases/ai-engine-security-releases-october-20262026-10-28 https://bugrater.com/releases/wp-photo-album-plus-security-releases-october-20262026-10-28 https://bugrater.com/releases/dext34-morgan-security-releases-october-20262026-10-28 https://bugrater.com/releases/hrisikeshpal-security-releases-october-20262026-10-28 https://bugrater.com/releases/pickplugins-product-designer-for-woocommerce-security-releases-october-20262026-10-28 https://bugrater.com/releases/kit-security-releases-october-20262026-10-28 https://bugrater.com/releases/quantumcloud-security-releases-october-20262026-10-28 https://bugrater.com/releases/devitems-security-releases-october-20262026-10-28 https://bugrater.com/releases/vanus-labs-security-releases-october-20262026-10-28 https://bugrater.com/releases/projectsend-security-releases-october-20262026-10-28 https://bugrater.com/releases/teableio-security-releases-october-20262026-10-28 https://bugrater.com/releases/clidey-security-releases-october-20262026-10-28 https://bugrater.com/releases/opentelemetry-security-releases-october-20262026-10-28 https://bugrater.com/releases/schismtracker-security-releases-october-20262026-10-28 https://bugrater.com/releases/libmng-security-releases-october-20262026-10-28 https://bugrater.com/releases/true-audio-security-releases-october-20262026-10-28 https://bugrater.com/releases/omnigent-ai-security-releases-october-20262026-10-28 https://bugrater.com/releases/jkuhlmann-security-releases-october-20262026-10-28 https://bugrater.com/releases/lvandeve-security-releases-october-20262026-10-28 https://bugrater.com/releases/grunfink-security-releases-october-20262026-10-28 https://bugrater.com/releases/automatic1111-security-releases-october-20262026-10-28 https://bugrater.com/releases/immich-app-security-releases-october-20262026-10-28 https://bugrater.com/releases/openrefine-security-releases-october-20262026-10-28 https://bugrater.com/releases/tencentcloud-security-releases-october-20262026-10-28 https://bugrater.com/releases/innocommerce-security-releases-october-20262026-10-28 https://bugrater.com/releases/openlit-security-releases-october-20262026-10-28 https://bugrater.com/releases/helicone-security-releases-october-20262026-10-28 https://bugrater.com/releases/rill-data-security-releases-october-20262026-10-28 https://bugrater.com/releases/qingyuna-security-releases-october-20262026-10-28 https://bugrater.com/releases/flyteorg-security-releases-october-20262026-10-28 https://bugrater.com/releases/minasaad1-security-releases-october-20262026-10-28 https://bugrater.com/releases/tbphp-security-releases-october-20262026-10-28 https://bugrater.com/releases/thclaws-security-releases-october-20262026-10-28 https://bugrater.com/releases/mark3labs-security-releases-october-20262026-10-28 https://bugrater.com/releases/oneuptime-security-releases-october-20262026-10-28 https://bugrater.com/releases/spatialite-security-releases-october-20262026-10-28 https://bugrater.com/releases/vita3k-security-releases-october-20262026-10-28 https://bugrater.com/releases/gitify-app-security-releases-october-20262026-10-28 https://bugrater.com/releases/schroedinger-security-releases-october-20262026-10-28 https://bugrater.com/releases/wvware-security-releases-october-20262026-10-28 https://bugrater.com/releases/videolan-security-releases-october-20262026-10-28 https://bugrater.com/releases/liblas-security-releases-october-20262026-10-28 https://bugrater.com/releases/rtmpdump-security-releases-october-20262026-10-28 https://bugrater.com/releases/lwip-security-releases-october-20262026-10-28 https://bugrater.com/releases/strophe-security-releases-october-20262026-10-28 https://bugrater.com/releases/fastify-jwt-security-releases-october-20262026-10-28 https://bugrater.com/releases/dyad-sh-security-releases-october-20262026-10-28 https://bugrater.com/releases/kishan0725-security-releases-october-20262026-10-28 https://bugrater.com/releases/wongkinyiu-security-releases-october-20262026-10-28 https://bugrater.com/releases/cve-2026-16020-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-vulnerability-in-fazile-bacak-defterasist-financial-advisor-platform-allows2026-10-28 https://bugrater.com/releases/cve-2026-105457-improper-limitation-of-a-pathname-to-a-restricted-directory-path-traversal-vulnerability-in-havelsan-inc-liman-mys-allows-path-traversal-this-issue-affec2026-10-28 https://bugrater.com/releases/cve-2026-14571-a-blind-sql-injection-vulnerability-in-futurum-software-s-management-software-caused-by-a-lack-of-adequate-validation-and-sanitisation-of-user-provided-inputs2026-10-28 https://bugrater.com/releases/cve-2025-30414-local-privilege-escalation-due-to-improper-authentication-the-following-products-are-affected-acronis-cyber-protect-cloud-agent-windows-before-build-425692026-10-28 https://bugrater.com/releases/cve-2026-101272-the-mechanism-binding-files-generated-during-a-shredding-process-to-the-authentication-method-is-not-working-correctly-and-the-same-session-token-is-used-for-al2026-10-28 https://bugrater.com/releases/cve-2026-101273-some-of-our-api-endpoints-allowed-to-create-order-payments-referencing-a-gift-card-by-using-the-auto-incremented-internal-id-this-id-was-not-checked-and-allowe2026-10-28 https://bugrater.com/releases/cve-2026-101274-when-pretix-is-used-as-the-identity-provider-in-a-single-sign-on-sso-setup-for-customer-accounts-the-system-did-not-properly-validate-the-response-type-req2026-10-28 https://bugrater.com/releases/cve-2026-103313-the-bitpay-gateway-for-woocommerce-wordpress-plugin-through-4-1-3-does-not-bind-the-payment-provider-s-transaction-confirmation-to-the-order-it-completes-nor-v2026-10-28 https://bugrater.com/releases/cve-2026-103330-the-sadad-qa-payment-wordpress-plugin-through-1-28-does-not-correctly-verify-the-authenticity-of-incoming-payment-notifications-as-the-verification-is-keyed-on2026-10-28 https://bugrater.com/releases/cve-2026-106648-the-royal-elementor-addons-wordpress-plugin-before-1-7-1070-does-not-validate-submitted-form-field-values-before-substituting-them-into-the-recipient-addresses2026-10-28 https://bugrater.com/releases/cve-2026-110508-the-essential-addons-for-elementor-wordpress-plugin-before-6-8-7-does-not-apply-its-administrator-approval-requirement-to-accounts-registered-through-its-email2026-10-28 https://bugrater.com/releases/cve-2026-112197-vulnerability-due-to-a-lack-of-authentication-in-critical-functions-of-the-novigest-desktop-app-s-java-rmi-service-an-attacker-with-network-access-to-the-servi2026-10-28 https://bugrater.com/releases/cve-2026-112198-xml-external-entity-xxe-injection-vulnerability-in-the-saft-import-feature-of-the-novigest-desktop-app-the-application-processes-user-controlled-xml-files-us2026-10-28 https://bugrater.com/releases/cve-2026-115223-the-smart-popup-by-supsystic-wordpress-plugin-before-2-0-2-does-not-prevent-template-injection-payloads-from-being-stored-in-a-popup-text-block-and-later-evalua2026-10-28 https://bugrater.com/releases/cve-2026-6064-link-following-vulnerability-in-data-shredder-components-in-norton-antivirus-avast-antivirus-and-avg-internet-security-prior-to-26-5-10933-on-windows-allows-a2026-10-28 https://bugrater.com/releases/cve-2026-87099-cross-site-scripting-xss-vulnerability-due-to-improper-input-validation-the-following-products-are-affected-acronis-cyber-protect-17-linux-windows-before2026-10-28 https://bugrater.com/releases/media-alias-display-moderately-critical-information-disclosure-sa-contrib-2026-2922026-10-29 https://bugrater.com/releases/content-sync-content-sync-io-moderately-critical-information-disclosure-sa-contrib-2026-2912026-10-29 https://bugrater.com/releases/oauth2-token-manager-critical-access-bypass-sa-contrib-2026-2902026-10-29 https://bugrater.com/releases/field-permissions-moderately-critical-access-bypass-sa-contrib-2026-2892026-10-29 https://bugrater.com/releases/field-permissions-moderately-critical-access-bypass-sa-contrib-2026-2882026-10-29 https://bugrater.com/releases/openid-connect-client-moderately-critical-improper-authentication-sa-contrib-2026-2872026-10-29 https://bugrater.com/releases/stage-file-proxy-critical-cross-site-scripting-sa-contrib-2026-2862026-10-29 https://bugrater.com/releases/signature-pad-widget-critical-cross-site-scripting-sa-contrib-2026-2852026-10-29 https://bugrater.com/releases/handnot2-security-releases-october-20262026-10-29 https://bugrater.com/releases/hankcs-security-releases-october-20262026-10-29 https://bugrater.com/releases/harfbuzz-security-releases-october-20262026-10-29 https://bugrater.com/releases/hashicorp-security-releases-october-20262026-10-29 https://bugrater.com/releases/havelsan-inc-security-releases-october-20262026-10-29 https://bugrater.com/releases/msrc-cve-2026-1002082026-10-29 https://bugrater.com/releases/msrc-cve-2026-559462026-10-29 https://bugrater.com/releases/soarkey-security-releases-october-20262026-10-29 https://bugrater.com/releases/light0011-security-releases-october-20262026-10-29 https://bugrater.com/releases/diem-project-security-releases-october-20262026-10-29 https://bugrater.com/releases/chamilo-security-releases-october-20262026-10-29 https://bugrater.com/releases/aircheng-org-security-releases-october-20262026-10-29 https://bugrater.com/releases/artifex-security-releases-october-20262026-10-29 https://bugrater.com/releases/dotnet-security-releases-october-20262026-10-29 https://bugrater.com/releases/donetick-security-releases-october-20262026-10-29 https://bugrater.com/releases/unslothai-security-releases-october-20262026-10-29 https://bugrater.com/releases/alexta69-security-releases-october-20262026-10-29 https://bugrater.com/releases/radareorg-security-releases-october-20262026-10-29 https://bugrater.com/releases/rvc-project-security-releases-october-20262026-10-29 https://bugrater.com/releases/llamachinese-security-releases-october-20262026-10-29 https://bugrater.com/releases/koozali-security-releases-october-20262026-10-29 https://bugrater.com/releases/jenkins-security-advisory-2026-10-282026-10-29 https://bugrater.com/releases/security-vulnerabilities-fixed-in-firefox-esr-115-442026-10-29 https://bugrater.com/releases/security-vulnerabilities-fixed-in-firefox-1592026-10-29 https://bugrater.com/releases/security-vulnerabilities-fixed-in-firefox-for-ios-157-12026-10-29 https://bugrater.com/releases/cve-2026-99184-in-the-linux-kernel-the-following-vulnerability-has-been-resolved-accel-rocket-search-every-core-slot-when-a-core-is-removed-rocket-remove-decrements-rde2026-10-29 https://bugrater.com/releases/cve-2026-99207-in-the-linux-kernel-the-following-vulnerability-has-been-resolved-scsi-target-disable-interrupts-while-holding-delayed-cmd-lock-target-do-delayed-work-t2026-10-29 https://bugrater.com/releases/cve-2026-102790-joomla-extension-icagenda-com-stored-xss-via-url-type-event-custom-field-in-icagenda-3-2-1-to-4-0-162026-10-29 https://bugrater.com/releases/cve-2026-102799-joomla-extension-icagenda-com-csv-formula-injection-in-the-registrations-export-in-icagenda-3-5-0-to-4-0-162026-10-29 https://bugrater.com/releases/cve-2026-114278-the-che-machine-exec-service-constructs-a-shell-command-by-concatenating-user-controlled-input-the-username-and-namespace-fields-from-the-exec-init-and-exec2026-10-29 https://bugrater.com/releases/cve-2026-116855-missing-authorization-vulnerability-in-wphocus-my-auctions-allegro-my-auctions-allegro-free-edition-allows-exploiting-incorrectly-configured-access-control-secu2026-10-29 https://bugrater.com/releases/cve-2026-118477-the-ei-git-repo-url-parameter-in-the-git-remote-configuration-endpoint-of-kalifast-is-vulnerable-to-os-command-injection-this-os-command-injection-vulnerabilit2026-10-29 https://bugrater.com/releases/cve-2026-118485-axel-download-accelerator-2-17-14-and-earlier-performs-url-percent-decoding-http-decode-on-the-output-filename-after-the-url-has-been-parsed-and-the-filenam2026-10-29 https://bugrater.com/releases/cve-2026-81472-dell-idrac-service-module-ism-for-windows-dell-idrac-service-module-ism-for-linux-and-dell-idrac-service-module-ism-for-esxi-versions-prior-to-6-1-1-02026-10-29 https://bugrater.com/releases/cve-2026-111411-improper-neutralization-of-special-elements-used-in-an-sql-command-sql-injection-vulnerability-in-aman-funnelkit-automations-wp-marketing-automations-allows2026-10-29 https://bugrater.com/releases/cve-2026-111850-improper-neutralization-of-special-elements-used-in-an-sql-command-sql-injection-vulnerability-in-buddypress-buddypress-buddypress-allows-sql-injection-this2026-10-29 https://bugrater.com/releases/cve-2026-115591-insertion-of-sensitive-information-into-sent-data-vulnerability-in-supsystic-contact-form-by-supsystic-contact-form-by-supsystic-allows-retrieve-embedded-sensit2026-10-29 https://bugrater.com/releases/cve-2026-115593-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-vulnerability-in-unlimited-elements-unlimited-elements-for-elementor-free2026-10-29 https://bugrater.com/releases/cve-2026-115596-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-vulnerability-in-implecode-ecommerce-product-catalog-ecommerce-product-cata2026-10-29 https://bugrater.com/releases/cve-2026-115606-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-vulnerability-in-crowd-favorite-dxp-toolkit-dxp-toolkit-allows-stored-xss-t2026-10-29 https://bugrater.com/releases/cve-2026-115607-improper-neutralization-of-special-elements-used-in-an-sql-command-sql-injection-vulnerability-in-crowd-favorite-dxp-toolkit-dxp-toolkit-allows-sql-injectio2026-10-29 https://bugrater.com/releases/cve-2026-115609-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-vulnerability-in-stiofan-getpaid-invoicing-allows-stored-xss-this-issue-aff2026-10-29 https://bugrater.com/releases/cve-2026-115612-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-vulnerability-in-iova-mihai-slicewp-slicewp-allows-stored-xss-this-issue-af2026-10-29 https://bugrater.com/releases/cve-2026-115957-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-vulnerability-in-wp-discussion-board-wp-discussion-board-wp-discussion-boar2026-10-29 https://bugrater.com/releases/cve-2026-116391-deserialization-of-untrusted-data-vulnerability-in-gs-plugins-gs-logo-slider-gs-logo-slider-allows-object-injection-this-issue-affects-gs-logo-slider-from-n-a2026-10-29 https://bugrater.com/releases/cve-2026-116392-deserialization-of-untrusted-data-vulnerability-in-pickplugins-accordion-accordions-allows-object-injection-this-issue-affects-accordion-from-n-a-through-2-3-22026-10-29 https://bugrater.com/releases/cve-2026-116393-missing-authorization-vulnerability-in-ihomefinder-inc-optima-express-optima-express-allows-exploiting-incorrectly-configured-access-control-security-levels-t2026-10-29 https://bugrater.com/releases/cve-2026-116404-missing-authorization-vulnerability-in-david-anderson-redux-framework-redux-framework-allows-lifting-sensitive-data-embedded-in-cache-this-issue-affects-redux-f2026-10-29 https://bugrater.com/releases/cve-2026-93515-a-use-after-free-in-present-clear-window-notifies-in-the-x-org-x-server-before-21-1-25-and-x-wayland-before-24-1-14-could-be-used-by-malicious-x-clients-to-c2026-10-29 https://bugrater.com/releases/cve-2026-93516-a-use-after-free-caused-by-lack-of-lifecycle-management-when-adding-removing-xinput-master-devices-in-x-org-x-server-before-21-1-25-and-xwayland-before-24-1-12026-10-29 https://bugrater.com/releases/cve-2026-105420-wing-ftp-server-does-not-verify-user-s-base-folder-an-attacker-with-admin-privileges-can-add-user-directories-via-scripts-allowing-the-added-directories-to-es2026-10-29 https://bugrater.com/releases/cve-2026-115590-deserialization-of-untrusted-data-vulnerability-in-wedevs-dokan-dokan-lite-allows-object-injection-this-issue-affects-dokan-from-n-a-through-5-3-12026-10-29 https://bugrater.com/releases/cve-2026-115603-improper-neutralization-of-special-elements-used-in-an-sql-command-sql-injection-vulnerability-in-advanced-ads-gmbh-advanced-ads-tracking-advanced-ads-tra2026-10-29 https://bugrater.com/releases/cve-2026-115968-deserialization-of-untrusted-data-vulnerability-in-ultimate-member-ultimate-member-ultimate-member-allows-object-injection-this-issue-affects-ultimate-member-f2026-10-29 https://bugrater.com/releases/cve-2026-116078-allocation-of-resources-without-limits-or-throttling-vulnerability-in-the-http-2-request-body-reader-of-mtrudel-bandit-allows-an-unauthenticated-remote-attacker2026-10-29 https://bugrater.com/releases/cve-2026-116389-deserialization-of-untrusted-data-vulnerability-in-crossi72-phoenix-media-rename-phoenix-media-rename-allows-object-injection-this-issue-affects-phoenix-media-r2026-10-29 https://bugrater.com/releases/cve-2026-116390-deserialization-of-untrusted-data-vulnerability-in-stepasyuk-filter-everything-nbsp-wordpress-amp-woocommerce-filters-filter-everything-allows-object-inject2026-10-29 https://bugrater.com/releases/cve-2026-93517-a-heap-buffer-overflow-in-handling-glx-renderlarge-request-where-databytes-exceeds-cmdlen-in-x-org-x-server-before-21-1-25-and-xwayland-before-24-1-14-that-coul2026-10-29 https://bugrater.com/releases/cve-2026-93518-an-integer-truncation-issue-in-xkbresizekeytype-that-could-lead-to-a-heap-buffer-overflow-by-authenticated-x-clients-in-x-org-x-server-before-21-1-25-and-xway2026-10-29 https://bugrater.com/releases/cve-2026-93519-a-buffer-overflow-when-handling-pointer-barriers-in-the-xfixes-extension-in-x-org-x-server-before-21-1-25-and-xwayland-before-24-1-14-could-be-used-by-authentic2026-10-29 https://bugrater.com/releases/cve-2026-93520-a-heap-buffer-overflow-caused-by-mismatching-size-calculations-between-xkballocnames-and-changekeycoderange-in-x-org-x-server-before-2-1-25-and-xwayland-before2026-10-29 https://bugrater.com/releases/cve-2026-112356-gfi-kerioconnect-kerio-connect-before-10-0-9-patch-2-contains-a-cross-site-scripting-vulnerability-in-the-webmail-component-that-allows-a-remote-attacker-to-s2026-10-29 https://bugrater.com/releases/cve-2026-67187-ninja-forms-plugin-for-wordpress-before-3-15-4-contains-an-incomplete-server-side-validation-vulnerability-that-allows-unauthenticated-attackers-to-submit-arbit2026-10-29 https://bugrater.com/releases/cve-2026-93521-a-buffer-overflow-in-randr-changeproviderproperty-requests-in-x-org-x-server-before-2-1-25-and-xwayland-before-24-4-14-could-be-used-by-authenticated-x-clients2026-10-29 https://bugrater.com/releases/cve-2026-93522-a-heap-buffer-overflow-caused-by-mismatched-size-usage-in-copyarea-cpu-to-fbo-path-in-x-org-x-server-before-21-1-15-and-xwayland-before-24-1-14-could-be-used-by2026-10-29 https://bugrater.com/releases/gateway-for-vantiv-on-wc-security-releases-october-20262026-10-29 https://bugrater.com/releases/activetrail-for-woocommerce-security-releases-october-20262026-10-29 https://bugrater.com/releases/blaze-demo-importer-security-releases-october-20262026-10-29 https://bugrater.com/releases/espnet-security-releases-october-20262026-10-29 https://bugrater.com/releases/formflow-for-gohighlevel-ghl-security-releases-october-20262026-10-29 https://bugrater.com/releases/snap-finance-security-releases-october-20262026-10-29 https://bugrater.com/releases/coinbase-commerce-payment-gateway-for-woocommerce-security-releases-october-20262026-10-29 https://bugrater.com/releases/bdm-digital-payment-gateway-security-releases-october-20262026-10-29 https://bugrater.com/releases/dav-ee-security-releases-october-20262026-10-29 https://bugrater.com/releases/ipospays-payment-gateway-for-woocommerce-security-releases-october-20262026-10-29 https://bugrater.com/releases/truebooker-security-releases-october-20262026-10-29 https://bugrater.com/releases/app-builder-security-releases-october-20262026-10-29 https://bugrater.com/releases/themeum-security-releases-july-20262026-10-29 https://bugrater.com/releases/subhajitkhan-security-releases-october-20262026-10-29 https://bugrater.com/releases/michaelrsweet-security-releases-october-20262026-10-29 https://bugrater.com/releases/mobatek-security-releases-october-20262026-10-29 https://bugrater.com/releases/misp-security-releases-october-20262026-10-29 https://bugrater.com/releases/integratec-security-releases-october-20262026-10-29 https://bugrater.com/releases/cve-2026-103506-an-authenticated-user-in-grafana-can-read-sso-client-secrets-and-modify-instance-wide-sso-settings-without-the-required-permissions-missing-authorization-thi2026-10-29 https://bugrater.com/releases/cve-2026-110952-a-kafka-broker-that-authenticates-clients-with-sasl-oauthbearer-using-the-bundled-jwks-backed-validator-always-verifies-the-jwt-signature-but-two-further-check2026-10-29 https://bugrater.com/releases/cve-2026-110985-a-kafka-broker-using-sasl-oauthbearer-with-the-default-validator-sasl-oauthbearer-jwt-validator-class-defaultjwtvalidator-selects-its-implementation-from-conf2026-10-29 https://bugrater.com/releases/cve-2026-111073-the-broker-side-pushtelemetry-api-kip-714-validates-only-the-compressed-size-of-a-client-s-metrics-payload-against-telemetry-max-bytes-default-1-mb-before-d2026-10-29 https://bugrater.com/releases/cve-2026-111108-apache-kafka-s-code-generated-protocol-readers-pre-size-an-array-s-collection-from-the-element-count-declared-by-the-sender-that-count-is-checked-only-against2026-10-29 https://bugrater.com/releases/cve-2026-111115-apache-kafka-s-code-generated-readers-for-flexible-protocol-versions-read-a-tagged-field-count-declared-by-the-sender-and-retain-a-rawtaggedfield-object-for-eac2026-10-29 https://bugrater.com/releases/cve-2026-111496-kafka-streams-derives-its-stream-time-clock-from-record-timestamps-punctuationschedule-next-computed-the-next-punctuation-time-as-timestamp-intervalsmisse2026-10-29 https://bugrater.com/releases/cve-2026-111551-several-kafka-deserialization-paths-read-a-size-or-count-field-from-input-data-and-use-it-directly-to-allocate-an-array-collection-or-byte-buffer-with-no-che2026-10-29 https://bugrater.com/releases/cve-2026-112375-an-authenticated-kafka-principal-with-no-authorization-grants-not-even-alter-configs-can-make-a-broker-read-a-file-or-an-environment-variable-from-the-broker2026-10-29 https://bugrater.com/releases/cve-2026-114349-when-a-broker-decodes-a-compressed-record-batch-the-per-record-decoder-reads-a-declared-body-size-from-the-decompressed-stream-and-allocates-a-buffer-of-that-s2026-10-29 https://bugrater.com/releases/cve-2026-115644-apache-kafka-connect-contains-an-authentication-bypass-vulnerability-affecting-the-admin-rest-api-when-admin-listeners-is-configured-with-a-separate-listener-fr2026-10-29 https://bugrater.com/releases/cve-2026-116593-apache-kafka-connect-has-the-connector-plugins-connector-type-config-validate-endpoint-on-its-rest-api-to-validate-connector-configurations-apache-kafka-con2026-10-29 https://bugrater.com/releases/cve-2026-83525-incorrect-operator-cwe-480-in-the-fetchsnapshot-rpc-handler-in-apache-kafka-from-2-8-0-before-4-2-2-and-from-4-3-0-before-4-3-2-on-all-platforms-allows-an-au2026-10-29 https://bugrater.com/releases/cve-2026-88858-a-user-with-the-viewer-role-in-grafana-can-crash-the-server-by-submitting-a-crafted-server-side-math-expression-uncontrolled-recursion-a-user-with-permission2026-10-29 https://bugrater.com/releases/cve-2026-88967-a-user-with-query-access-to-an-azure-monitor-data-source-in-grafana-can-cause-server-side-requests-to-an-attacker-controlled-endpoint-that-disclose-the-data-sou2026-10-29 https://bugrater.com/releases/cve-2026-93523-a-heap-buffer-overflow-caused-by-a-xipassiveungrabdevice-request-with-an-out-of-range-modifier-value-in-x-org-x-server-before-21-1-15-and-xwayland-before-24-1-12026-10-29 https://bugrater.com/releases/cve-2026-93524-a-buffer-overread-in-checkkeysyms-in-x-org-x-server-before-21-1-25-and-xwayland-before-24-1-14-could-be-used-by-authenticated-x-clients-to-leak-small-amounts2026-10-29 https://bugrater.com/releases/cve-2026-93536-a-use-after-free-caused-by-missing-lifecycle-management-of-gesture-sprites-in-gesturebuildsprite-in-x-org-x-server-before-21-1-25-and-xwayland-before-24-1-142026-10-29 https://bugrater.com/releases/cve-2026-105612-postgresql-anonymizer-contains-a-vulnerability-that-data-modifying-ctes-to-bypass-the-read-only-restriction-of-masked-roles-the-problem-is-resolved-in-postgres2026-10-29 https://bugrater.com/releases/cve-2026-105613-postgresql-anonymizer-s-range-based-dummy-functions-dont-constraint-the-range-size-this-vulnerability-can-be-exploited-to-exhaust-the-memory-of-a-backend-and-o2026-10-29 https://bugrater.com/releases/cve-2026-105614-postgresql-anonymizer-s-anon-image-blur-function-doesn-t-check-the-declared-dimension-of-the-provided-image-allowing-an-attacker-to-provide-a-small-image-w2026-10-29 https://bugrater.com/releases/cve-2026-105615-postgresql-s-optimized-statistics-on-a-table-are-visible-as-long-as-you-have-select-privilege-on-said-table-a-masked-role-can-therefore-read-a-limited-subset-o2026-10-29 https://bugrater.com/releases/cve-2026-105616-postgresql-restricts-acces-to-the-salt-and-shift-via-the-show-command-for-users-not-member-of-pg-read-all-settings-but-they-are-visible-in-pg-db-role-sett2026-10-29 https://bugrater.com/releases/cve-2026-105617-postgresql-anonymizer-doesn-t-invalidate-plans-prepared-after-a-rule-was-added-or-a-role-changed-users-using-such-plans-can-still-see-the-unmasked-data-until-t2026-10-29 https://bugrater.com/releases/cve-2026-105618-postgresql-anonymizer-s-documentation-recommends-applying-rules-on-partitions-and-inheritance-tables-direct-access-to-the-paritions-inheritance-tables-is-mas2026-10-29 https://bugrater.com/releases/cve-2026-105619-postgresql-anonymizer-doesn-t-mask-data-accessed-thru-a-security-invoker-view-the-problem-is-resolved-in-postgresql-anonymizer-3-3-0-and-later-versions2026-10-29 https://bugrater.com/releases/cve-2026-105620-postgresql-anonymizer-doesn-t-mask-data-returned-by-a-sub-query-in-a-rule-the-problem-is-resolved-in-postgresql-anonymizer-3-3-0-and-later-versions2026-10-29 https://bugrater.com/releases/cve-2026-110181-postgresql-anonymizer-contains-a-vulnerability-related-to-anonymization-functions-defined-using-sql-standard-function-bodies-postgresql-analyses-such-functions2026-10-29 https://bugrater.com/releases/cve-2026-110182-postgresql-anonymizer-contains-a-vulnerability-related-to-the-anon-partial-and-anon-partial-email-functions-these-function-can-reveal-the-while-data-if-the2026-10-29 https://bugrater.com/releases/cve-2026-110183-postgresql-anonymizer-contains-a-vulnerability-related-to-static-masking-and-statistics-persistence-statistics-pertaining-to-the-original-data-remain-visible-i2026-10-29 https://bugrater.com/releases/cve-2026-58458-don-t-starve-together-steam-appid-322330-through-build-747465-contains-a-memory-corruption-vulnerability-in-the-native-persistent-string-decoder-that-allows-a2026-10-29 https://bugrater.com/releases/cve-2026-79656-a-user-with-read-access-to-grafana-s-server-logs-or-to-a-log-store-they-are-shipped-to-can-recover-the-oauth-and-oidc-access-refresh-and-id-tokens-of-users-w2026-10-29 https://bugrater.com/releases/cve-2026-118633-a-path-traversal-vulnerability-allows-a-remote-unauthenticated-attacker-to-execute-arbitrary-code-as-root-in-sophos-utm-all-versions-after-winning-a-race-cond2026-10-29 https://bugrater.com/releases/cve-2026-118640-n8n-before-1-123-85-2-43-5-and-2-44-1-contains-an-authorization-bypass-vulnerability-in-chat-hub-that-allows-chat-only-users-to-register-restricted-tool-types2026-10-29 https://bugrater.com/releases/cve-2026-118641-n8n-before-1-123-85-2-x-before-2-43-5-and-2-44-x-before-2-44-1-contains-an-odata-filter-injection-vulnerability-in-the-microsoft-outlook-contact-lookup-and-m2026-10-29 https://bugrater.com/releases/cve-2026-118642-n8n-before-1-123-85-2-43-5-and-2-44-1-contains-an-authorization-bypass-vulnerability-that-allows-authenticated-members-to-use-inaccessible-credentials-through2026-10-29 https://bugrater.com/releases/cve-2026-118643-n8n-before-1-123-85-2-x-before-2-43-5-and-2-44-x-before-2-44-1-stores-credential-secrets-in-execution-error-data-when-operations-fail-in-the-git-mongodb-atla2026-10-29 https://bugrater.com/releases/cve-2026-118644-n8n-before-2-41-5-and-2-42-x-before-2-42-2-passes-a-failed-workflow-s-full-execution-context-including-the-identity-of-the-user-who-started-the-run-to-the-con2026-10-29 https://bugrater.com/releases/cve-2026-118645-n8n-before-1-123-85-2-x-before-2-43-5-and-2-44-x-before-2-44-1-contains-a-filter-injection-vulnerability-in-the-quick-base-node-which-sends-the-where-filter2026-10-29 https://bugrater.com/releases/cve-2026-118646-n8n-before-1-123-85-2-43-5-and-2-44-1-contains-a-regular-expression-denial-of-service-vulnerability-that-allows-authenticated-members-to-block-the-event-loop2026-10-29 https://bugrater.com/releases/cve-2026-118647-n8n-before-1-123-85-2-x-before-2-43-5-and-2-44-x-before-2-44-1-saves-the-seatable-trigger-node-s-api-token-in-error-execution-data-because-failed-poll-reques2026-10-29 https://bugrater.com/releases/cve-2026-118648-n8n-before-1-123-85-2-x-before-2-43-5-and-2-44-x-before-2-44-1-contains-a-stored-cross-site-scripting-vulnerability-because-some-webhook-response-paths-such2026-10-29 https://bugrater.com/releases/cve-2026-118649-n8n-before-2-43-5-and-2-44-x-before-2-44-1-accepts-a-client-supplied-workflow-id-and-caches-each-workflow-s-owner-project-in-memory-by-that-id-so-a-crafted-id2026-10-29 https://bugrater.com/releases/cve-2026-118675-n8n-before-1-123-85-2-43-5-and-2-44-1-contains-a-credential-guard-bypass-vulnerability-that-allows-editors-of-shared-workflows-to-use-restricted-credentials-b2026-10-29 https://bugrater.com/releases/cve-2026-118676-n8n-before-1-123-85-2-43-5-and-2-44-1-contains-an-authorization-bypass-vulnerability-that-allows-member-users-to-use-credentials-they-cannot-access-by-omittin2026-10-29 https://bugrater.com/releases/cve-2026-118677-n8n-before-2-41-4-and-2-42-x-before-2-42-1-contains-a-missing-confirmation-vulnerability-in-the-local-gateway-desktop-app-that-allows-its-deep-link-connect-hand2026-10-29 https://bugrater.com/releases/cve-2026-118678-n8n-before-2-41-4-and-2-42-x-before-2-42-1-contains-a-prototype-pollution-vulnerability-that-allows-low-privileged-users-to-alter-built-in-object-behaviour-by-s2026-10-29 https://bugrater.com/releases/cve-2026-118680-siyuan-3-8-7-through-3-8-8-fails-to-normalize-windows-globalroot-device-namespace-aliases-bypassing-the-issensitivepath-denylist-attackers-can-invoke-importst2026-10-29 https://bugrater.com/releases/cve-2026-118681-go-chi-chi-before-5-5-0-contains-an-authentication-bypass-in-middleware-supressnotfound-which-calls-match-with-the-live-routing-context-and-leaves-a-mounted-ro2026-10-29 https://bugrater.com/releases/cve-2026-118683-monai-from-1-2-0-before-1-6-1-contains-a-remote-code-execution-vulnerability-in-configworkflow-init-which-passes-a-bundle-s-configs-logging-conf-to-logging2026-10-29 https://bugrater.com/releases/cve-2026-118686-espocrm-before-9-3-11-and-10-x-before-10-0-8-contains-a-denial-of-service-vulnerability-in-which-the-password-redaction-regular-expression-applied-during-api-er2026-10-29 https://bugrater.com/releases/cve-2026-118687-coder-before-2-29-21-2-30-0-before-2-34-12-2-35-0-before-2-35-9-2-36-0-before-2-36-7-and-2-37-0-before-2-37-4-does-not-validate-the-audience-claim-of-gce-in2026-10-29 https://bugrater.com/releases/cve-2026-118688-wasmtime-wasi-in-wasmtime-before-36-0-18-37-0-0-before-48-0-6-and-49-0-0-before-49-0-3-re-appends-a-trailing-slash-to-rename-source-paths-causing-renameat-on2026-10-29 https://bugrater.com/releases/cve-2025-14260-due-to-the-improper-implementation-of-access-control-rules-the-wso2-product-accepts-user-supplied-input-related-to-resource-location-without-enforcing-expected2026-10-29 https://bugrater.com/releases/cve-2026-109411-an-access-control-bypass-flaw-was-found-in-samba-s-vfs-ceph-rgw-module-in-it-s-openat-function-an-authenticated-user-can-bypass-access-controls-to-read-or-ov2026-10-29 https://bugrater.com/releases/cve-2026-78674-the-bpmn-system-rest-apis-do-not-sufficiently-validate-input-parameters-allowing-authenticated-users-to-submit-crafted-requests-that-can-lead-to-the-execution2026-10-29 https://bugrater.com/releases/cve-2026-118537-a-vulnerability-was-found-in-a2ui-up-to-0-10-4-this-vulnerability-affects-unknown-code-of-the-file-src-v0-9-basic-catalog-components-image-js-of-the-component2026-10-29 https://bugrater.com/releases/cve-2026-118538-a-vulnerability-was-determined-in-a2ui-project-a2ui-up-to-0-12-0-this-issue-affects-the-function-root-rendercomponenttree-of-the-file-src-0-8-ui-root-js-of-the2026-10-29 https://bugrater.com/releases/cve-2026-118682-karingx-clashmi-through-1-0-32-1801-disables-tls-certificate-validation-by-default-in-the-httputils-helper-allowing-attackers-to-intercept-https-traffic-by-pre2026-10-29 https://bugrater.com/releases/cve-2026-118689-ovenmediaengine-through-0-21-0-contains-a-denial-of-service-vulnerability-in-ovtpacket-loadheader-that-allows-unauthenticated-attackers-to-stall-connections2026-10-29 https://bugrater.com/releases/cve-2026-118690-signal-k-server-before-2-33-0-contains-a-missing-authentication-vulnerability-that-allows-unauthenticated-remote-attackers-to-download-log-archives-via-the-sks2026-10-29 https://bugrater.com/releases/cve-2026-118691-xianyu-auto-reply-fix-through-2-0-7-contains-a-missing-authorization-vulnerability-in-the-post-send-message-endpoint-that-allows-unauthenticated-attackers-to-s2026-10-29 https://bugrater.com/releases/cve-2026-118692-cherrytree-through-1-7-2-contains-an-os-command-injection-vulnerability-in-ctactions-link-clicked-that-allows-attackers-to-execute-commands-by-embedding-shell2026-10-29 https://bugrater.com/releases/cve-2026-118693-cherrytree-through-1-7-2-contains-a-path-traversal-vulnerability-in-ctstoragexmlhelper-create-image-from-xml-that-trusts-unvalidated-embedded-file-filename2026-10-29 https://bugrater.com/releases/cve-2026-118694-python-markdown2-through-2-5-5-contains-a-denial-of-service-vulnerability-that-allows-remote-users-to-exhaust-cpu-by-submitting-markdown-with-unclosed-inline-li2026-10-29 https://bugrater.com/releases/cve-2026-118752-freeimage-danoli3-fork-before-3-19-22-contains-a-heap-buffer-overflow-vulnerability-in-the-pbm-rle-decoder-of-pluginiff-cpp-that-lacks-bounds-checks-on-byteru2026-10-29 https://bugrater.com/releases/cve-2026-118753-freeimage-danoli3-fork-before-3-19-25-contains-a-heap-buffer-overflow-vulnerability-in-plugingif-cpp-that-allows-attackers-to-write-past-the-canvas-allocation2026-10-29 https://bugrater.com/releases/cve-2026-118754-dolibarr-erp-crm-before-24-0-2-contains-a-missing-authorization-vulnerability-in-htdocs-public-recruitment-view-php-that-allows-unauthenticated-attackers-to-vie2026-10-29 https://bugrater.com/releases/cve-2026-118755-volmarg-personal-management-system-through-2-1-0-contains-an-os-command-injection-vulnerability-that-allows-authenticated-users-to-execute-shell-commands-via-un2026-10-29 https://bugrater.com/releases/cve-2026-118756-gopass-before-1-17-0-contains-a-path-traversal-vulnerability-in-the-filesystem-storage-backend-that-allows-attackers-to-delete-directories-outside-the-password2026-10-29 https://bugrater.com/releases/cve-2026-118757-piweb-disable-payment-method-partial-payment-for-woocommerce-before-1-1-10-9-contains-a-missing-authorization-vulnerability-in-the-update-fees-ajax-handler-th2026-10-29 https://bugrater.com/releases/cve-2026-118803-bricks-theme-2-4-3-and-before-contains-an-unauthenticated-dynamic-data-tag-injection-vulnerability-that-allows-anonymous-attackers-to-control-the-urlparams-obje2026-10-29 https://bugrater.com/releases/cve-2026-118804-bricks-builder-2-4-3-and-before-contains-a-broken-access-control-vulnerability-that-allows-unauthenticated-attackers-to-access-restricted-post-content-by-submit2026-10-29 https://bugrater.com/releases/cve-2026-93851-mattermost-versions-11-9-x-11-9-1-11-8-x-11-8-5-11-7-x-11-7-10-fail-to-validate-the-target-post-id-in-the-agents-plugin-s-mention-reminder-component2026-10-29 https://bugrater.com/releases/cve-2026-118577-a-vulnerability-was-identified-in-maotoumao-musicfreedesktop-0-0-6-0-0-7-0-0-8-impacted-is-an-unknown-function-of-the-component-request-forwarder-the-manipula2026-10-29 https://bugrater.com/releases/cve-2026-118578-a-security-flaw-has-been-discovered-in-maotoumao-musicfreedesktop-0-0-6-0-0-7-0-0-8-the-affected-element-is-an-unknown-function-of-the-component-request-forwar2026-10-29 https://bugrater.com/releases/cve-2026-118579-a-weakness-has-been-identified-in-d-link-dir-505-1-10b02-the-impacted-element-is-the-function-main-of-the-file-secmark1524-cgi-of-the-component-web-management2026-10-29 https://bugrater.com/releases/cve-2026-118585-a-vulnerability-was-identified-in-configuroweb-inventariobasico-c9377cdba474deb3eb5a0704d197b5733af16b47-f9db0c0a04d79ad931c218140df4fb23809d4fab-this-vulnerab2026-10-29 https://bugrater.com/releases/cve-2026-118586-a-security-flaw-has-been-discovered-in-dfm-feedfinder2-up-to-0-0-4-this-issue-affects-the-function-find-feeds-of-the-file-feedfinder2-py-performing-a-manipula2026-10-29 https://bugrater.com/releases/cve-2026-118589-a-weakness-has-been-identified-in-nschloe-meshio-up-to-5-3-5-impacted-is-an-unknown-function-of-the-file-meshio-vtk-42-py-of-the-component-vtk-reader-executi2026-10-29 https://bugrater.com/releases/cve-2026-118590-a-security-vulnerability-has-been-detected-in-nipy-nibabel-up-to-5-4-2-the-affected-element-is-the-function-array-from-file-of-the-file-nibabel-volumeutils-py2026-10-29 https://bugrater.com/releases/cve-2026-113387-the-ortto-plugin-for-wordpress-before-1-0-25-did-not-authenticate-configuration-update-requests-relying-only-on-a-secret-exposed-in-public-html-an-unauthentic2026-10-29 https://bugrater.com/releases/cve-2026-113409-the-ortto-plugin-for-wordpress-before-1-0-25-did-not-escape-stored-settings-on-its-admin-settings-page-leading-to-stored-cross-site-scripting-a-threat-actor-a2026-10-29 https://bugrater.com/releases/cve-2026-114173-the-ortto-plugin-for-wordpress-before-1-0-25-did-not-filter-the-woocommerce-product-data-it-embedded-in-public-storefront-pages-an-unauthenticated-threat-actor2026-10-29 https://bugrater.com/releases/cve-2026-16889-in-openequella-before-2026-1-the-pre-login-notice-image-upload-endpoint-put-api-preloginnotice-image-name-does-not-validate-the-type-of-uploaded-files-and2026-10-29 https://bugrater.com/releases/cve-2026-66088-in-openequella-before-2026-1-the-system-execute-function-available-to-the-scripting-engine-runs-supplied-operating-system-commands-without-validation-or-an-a2026-10-29 https://bugrater.com/releases/cve-2026-66089-in-openequella-before-2026-1-the-soap-api-parses-xml-supplied-in-the-stopedit-operation-with-a-parser-that-resolves-external-entities-this-allows-an-attacker2026-10-29 https://bugrater.com/releases/cve-2026-66090-in-openequella-before-2026-1-the-xml-parser-used-for-item-metadata-does-not-disable-external-entity-resolution-a-user-permitted-to-create-items-create-item2026-10-29 https://bugrater.com/releases/cve-2026-66091-in-openequella-before-2026-1-the-get-api-userquery-userinfobackup-endpoint-performs-no-authentication-or-authorisation-check-an-unauthenticated-attacker-who2026-10-29 https://bugrater.com/releases/cve-2026-66092-in-openequella-before-2026-2-the-pre-login-notice-is-stored-as-html-and-rendered-on-the-legacy-logon-page-without-encoding-or-sanitisation-a-user-holding-the2026-10-29 https://bugrater.com/releases/cve-2026-109516-the-bot-for-telegram-on-woocommerce-plugin-for-wordpress-is-vulnerable-to-authentication-bypass-leading-to-account-takeover-in-all-versions-up-to-and-including2026-10-29 https://bugrater.com/releases/cve-2026-118426-in-affected-versions-of-octopus-server-with-the-ldap-authentication-provider-enabled-any-authenticated-user-could-call-the-ldap-user-search-and-ldap-group-sear2026-10-29 https://bugrater.com/releases/cve-2026-40063-a-information-disclosure-vulnerability-exists-in-the-nodered-fuxa-scripts-functionality-of-fuxa-version-s-1-3-2-2809-a-specially-crafted-http-request-can2026-10-29 https://bugrater.com/releases/cve-2026-42922-a-authorization-bypass-vulnerability-exists-in-the-nodered-functionality-of-fuxa-version-s-1-3-2-2809-a-specially-crafted-http-request-can-lead-to-a-arbit2026-10-29 https://bugrater.com/releases/cve-2026-42949-a-authorization-bypass-vulnerability-exists-in-the-api-runscript-functionality-of-fuxa-version-s-1-3-2-2809-a-specially-crafted-http-request-can-lead-to-e2026-10-29 https://bugrater.com/releases/cve-2026-93757-the-wild-apricot-login-plugin-for-wordpress-is-vulnerable-to-authentication-bypass-via-sso-email-collision-account-binding-in-all-versions-up-to-and-including2026-10-29 https://bugrater.com/releases/cve-2026-93855-the-sendpress-newsletters-plugin-for-wordpress-is-vulnerable-to-time-based-sql-injection-via-the-subscriberid-parameter-in-all-versions-up-to-and-including2026-10-29 https://bugrater.com/releases/cve-2026-93904-the-social-web-suite-social-media-auto-post-social-media-auto-publish-plugin-for-wordpress-is-vulnerable-to-generic-sql-injection-via-the-exclude-posts-par2026-10-29 https://bugrater.com/releases/cve-2026-96228-ssl-wireless-sms-notification-for-wordpress-is-vulnerable-to-authentication-bypass-in-all-versions-up-to-and-including-3-8-1-the-public-final-login-ajax-acti2026-10-29 https://bugrater.com/releases/cve-2026-96666-the-schema-app-structured-data-plugin-for-wordpress-is-vulnerable-to-stored-cross-site-scripting-via-comment-content-via-remove-microdata-output-filter-in-all2026-10-29 https://bugrater.com/releases/cve-2026-96669-the-food-store-online-food-delivery-pickup-plugin-for-wordpress-is-vulnerable-to-stored-cross-site-scripting-via-service-type-cookie-in-all-versions-up-to2026-10-29 https://bugrater.com/releases/cve-2026-96741-the-dsgvo-all-in-one-for-wp-plugin-for-wordpress-is-vulnerable-to-stored-cross-site-scripting-via-comment-content-via-output-buffer-regex-corruption-in-all-vers2026-10-29 https://bugrater.com/releases/cve-2024-3586-the-letterpress-wordpress-plugin-before-2-4-0-does-not-sanitise-and-escape-some-of-its-settings-which-could-allow-high-privilege-users-such-as-admin-to-perfor2026-10-29 https://bugrater.com/releases/cve-2026-105258-the-appointment-booking-plugin-wordpress-plugin-before-5-7-6-does-not-escape-several-booking-form-step-content-settings-before-rendering-them-on-the-public-boo2026-10-29 https://bugrater.com/releases/cve-2026-108685-the-wp-post-author-wordpress-plugin-before-4-2-0-does-not-check-that-the-account-was-created-before-updating-its-profile-during-front-end-registration-allowin2026-10-29 https://bugrater.com/releases/cve-2026-108686-the-wp-post-author-wordpress-plugin-before-4-2-0-does-not-restrict-the-integration-settings-it-returns-to-visitors-allowing-unauthenticated-users-to-read-the2026-10-29 https://bugrater.com/releases/cve-2026-108763-the-wallet-system-for-woocommerce-wordpress-plugin-before-2-8-2-does-not-restrict-its-kyc-document-submission-handler-to-the-current-user-s-own-account-taking2026-10-29 https://bugrater.com/releases/cve-2026-110030-the-hide-price-until-login-wordpress-plugin-before-1-1-2-does-not-restrict-a-guest-registration-handler-and-does-not-honour-the-site-s-user-registration-setting2026-10-29 https://bugrater.com/releases/cve-2026-110504-the-enable-svg-webp-and-ico-upload-wordpress-plugin-before-1-1-6-does-not-sanitize-uploaded-svg-files-whose-content-is-not-detected-as-svg-while-still-storin2026-10-29 https://bugrater.com/releases/cve-2026-110505-the-enable-svg-webp-and-ico-upload-wordpress-plugin-before-1-1-6-does-not-prevent-animation-elements-in-uploaded-svg-files-from-changing-a-link-s-target-to-a2026-10-29 https://bugrater.com/releases/cve-2026-110983-the-wp-photo-album-plus-wordpress-plugin-before-9-3-04-004-does-not-verify-the-origin-or-a-security-token-for-one-of-its-comment-management-requests-allowing-a2026-10-29 https://bugrater.com/releases/cve-2026-113616-the-logixfast-auth-wordpress-plugin-before-1-0-4-does-not-deliver-its-password-reset-one-time-code-to-the-resolved-account-s-own-email-address-mailing-it-to-th2026-10-29 https://bugrater.com/releases/cve-2026-113617-the-automated-import-products-to-cart-wordpress-plugin-before-1-0-4-does-not-sanitize-a-user-supplied-file-path-before-using-it-to-read-and-delete-files-allowi2026-10-29 https://bugrater.com/releases/cve-2026-114270-the-geodirectory-wordpress-plugin-before-2-8-197-does-not-honour-post-password-protection-when-rendering-a-listing-allowing-unauthenticated-users-to-disclose2026-10-29 https://bugrater.com/releases/cve-2026-115245-the-chat-ai-with-dispatcher-wordpress-plugin-before-2-4-does-not-properly-validate-uploaded-files-relying-only-on-a-spoofable-client-supplied-content-type-all2026-10-29 https://bugrater.com/releases/cve-2026-115259-the-photo-engine-media-organizer-lightroom-wordpress-plugin-before-6-6-0-does-not-have-proper-authorization-checks-when-updating-post-data-through-one-of-it2026-10-29 https://bugrater.com/releases/cve-2026-115282-the-recipe-card-blocks-lite-wordpress-plugin-before-3-6-4-does-not-perform-an-authorization-check-before-rendering-posts-through-its-recipe-print-feature-allow2026-10-29 https://bugrater.com/releases/cve-2026-115299-the-contact-form-by-supsystic-wordpress-plugin-before-1-11-1-does-not-verify-a-csrf-nonce-before-saving-its-mail-settings-allowing-an-attacker-to-overwrite-th2026-10-29 https://bugrater.com/releases/cve-2026-115300-the-contact-form-by-supsystic-wordpress-plugin-before-1-11-1-does-not-validate-a-csrf-token-or-request-origin-on-two-administrator-only-actions-that-bulk-delet2026-10-29 https://bugrater.com/releases/cve-2026-115301-the-contact-form-by-supsystic-wordpress-plugin-before-1-11-1-does-not-sandbox-the-template-engine-used-to-render-its-forms-and-allows-stored-form-editor-conten2026-10-29 https://bugrater.com/releases/cve-2026-115302-the-contact-form-by-supsystic-wordpress-plugin-before-1-11-1-does-not-restrict-access-to-an-ajax-action-that-deletes-stored-form-statistics-records-allowing-u2026-10-29 https://bugrater.com/releases/cve-2026-118905-node-version-manager-nvm-is-a-posix-compliant-shell-function-for-managing-multiple-node-js-versions-in-versions-0-31-2-through-0-40-5-nvm-ls-filters-insta2026-10-29 https://bugrater.com/releases/cve-2026-78395-the-link-library-wordpress-plugin-before-7-10-0-does-not-re-check-the-selected-library-s-own-login-requirement-when-processing-its-front-end-link-submission-al2026-10-29 https://bugrater.com/releases/cve-2026-78396-the-link-library-wordpress-plugin-before-7-10-0-does-not-verify-that-a-requested-link-belongs-to-the-settings-set-whose-display-template-is-used-to-render-it-a2026-10-29 https://bugrater.com/releases/cve-2026-85007-the-video-player-for-youtube-wordpress-plugin-before-2-1-4-does-not-perform-a-capability-check-on-its-player-preset-ajax-handler-allowing-users-with-the-contr2026-10-29 https://bugrater.com/releases/cve-2026-86794-the-community-events-wordpress-plugin-before-1-6-0-does-not-have-authorisation-or-nonce-checks-when-processing-public-event-submissions-and-does-not-escape-sev2026-10-29 https://bugrater.com/releases/cve-2026-88928-the-paycomet-for-woocommerce-wordpress-plugin-before-5-46-does-not-verify-the-cryptographic-signature-on-its-payment-notification-endpoint-when-the-request-refe2026-10-29 https://bugrater.com/releases/cve-2026-89216-the-vtables-wordpress-plugin-before-0-3-does-not-properly-sanitise-and-escape-a-parameter-before-using-it-in-a-sql-statement-which-allows-unauthenticated-atta2026-10-29 https://bugrater.com/releases/cve-2026-93293-the-password-protected-plugin-for-wordpress-is-vulnerable-to-stored-cross-site-scripting-via-the-bundled-freemius-sdk-s-purchase-completion-handler-in-all-versi2026-10-29 https://bugrater.com/releases/cve-2026-117548-a-null-pointer-dereference-flaw-was-found-in-389-ds-base-this-flaw-occurs-when-a-modifydn-rename-operation-uses-an-attribute-s-schema-alias-name-such-as-co2026-10-29 https://bugrater.com/releases/cve-2026-117627-a-flaw-was-found-in-the-jwt-authorization-grant-implementation-of-the-keycloak-services-component-when-an-oidc-or-google-identity-provider-is-configured-with-s2026-10-29 https://bugrater.com/releases/cve-2026-117688-a-flaw-was-found-in-the-client-registration-component-of-keycloak-an-open-source-identity-and-access-management-solution-when-a-vault-provider-is-used-to-stor2026-10-29 https://bugrater.com/releases/cve-2026-117859-a-flaw-was-found-in-the-pushed-authorization-request-par-implementation-of-the-keycloak-services-component-the-issue-occurs-when-an-authentication-flow-is-rest2026-10-29 https://bugrater.com/releases/cve-2026-118030-a-flaw-was-found-in-the-hotp-authentication-mechanism-of-the-keycloak-services-component-which-provides-identity-and-access-management-services-the-issue-occu2026-10-29 https://bugrater.com/releases/cve-2025-62839-an-use-of-hard-coded-cryptographic-key-vulnerability-has-been-reported-to-affect-hbs-3-hybrid-backup-sync-and-hybrid-backup-sync-if-exploited-the-vulnerabilit2026-10-29 https://bugrater.com/releases/cve-2025-62841-an-use-of-hard-coded-cryptographic-key-vulnerability-has-been-reported-to-affect-hbs-3-hybrid-backup-sync-and-hybrid-backup-sync-if-exploited-the-vulnerabilit2026-10-29 https://bugrater.com/releases/cve-2026-114358-this-vulnerability-exists-in-the-radius-xenia-m2m-platform-due-to-insufficient-validation-of-user-supplied-input-in-the-password-recovery-functionality-in-the-w2026-10-29 https://bugrater.com/releases/cve-2026-115303-the-contact-form-by-supsystic-wordpress-plugin-before-1-11-1-does-not-strip-cr-lf-characters-or-re-validate-submitted-field-values-before-concatenating-them-int2026-10-29 https://bugrater.com/releases/cve-2026-7190-a-cross-site-scripting-xss-vulnerability-in-the-ictbroadcast-software-which-affects-the-demo-environment-the-vulnerability-is-found-in-the-login-php-endpo2026-10-29 https://bugrater.com/releases/cve-2026-85498-a-flaw-was-found-in-polkit-when-processing-input-that-begins-with-a-null-byte-an-arithmetic-error-in-the-authentication-agent-helper-causes-an-integer-underfl2026-10-29 https://bugrater.com/releases/cve-2026-103485-the-extensions-for-leaflet-map-plugin-for-wordpress-is-vulnerable-to-stored-dom-based-cross-site-scripting-via-the-feature-properties-template-token-parame2026-10-29 https://bugrater.com/releases/cve-2026-103875-the-media-library-assistant-plugin-for-wordpress-is-vulnerable-to-reflected-cross-site-scripting-via-the-search-string-parameter-in-all-versions-up-to-and-in2026-10-29 https://bugrater.com/releases/cve-2026-104727-the-sequential-order-numbers-for-woocommerce-plugin-for-wordpress-is-vulnerable-to-stored-cross-site-scripting-via-condition-post-meta-array-keys-in-all-versi2026-10-29 https://bugrater.com/releases/cve-2026-107627-the-greenshift-animation-and-page-builder-blocks-plugin-for-wordpress-is-vulnerable-to-stored-dom-based-cross-site-scripting-via-the-comment-parameter-in-al2026-10-29 https://bugrater.com/releases/cve-2026-107629-the-greenshift-animation-and-page-builder-blocks-plugin-for-wordpress-is-vulnerable-to-stored-dom-based-cross-site-scripting-via-the-comment-parameter-in-al2026-10-29 https://bugrater.com/releases/cve-2026-107743-the-mapster-wp-maps-plugin-for-wordpress-is-vulnerable-to-stored-cross-site-scripting-in-versions-up-to-and-including-2-0-5-this-is-due-to-the-wp-json-mapst2026-10-29 https://bugrater.com/releases/cve-2026-109215-the-litespeed-cache-plugin-for-wordpress-is-vulnerable-to-stored-cross-site-scripting-via-the-bbp-reply-content-parameter-in-all-versions-up-to-and-including2026-10-29 https://bugrater.com/releases/cve-2026-110707-the-rss-aggregator-by-feedzy-feed-to-post-autoblogging-news-youtube-video-feeds-aggregator-plugin-for-wordpress-is-vulnerable-to-stored-cross-site-scripti2026-10-29 https://bugrater.com/releases/cve-2026-111318-the-ht-mega-addons-for-elementor-elementor-widgets-template-builder-plugin-for-wordpress-is-vulnerable-to-stored-dom-based-cross-site-scripting-via-the-hre2026-10-29 https://bugrater.com/releases/cve-2026-111417-a-broken-access-control-vulnerability-exists-in-the-foxit-official-website-s-html-to-pdf-conversion-service-due-to-the-use-of-a-shared-token-for-submitted-conve2026-10-29 https://bugrater.com/releases/cve-2026-111418-a-server-side-request-forgery-ssrf-vulnerability-exists-in-the-foxit-official-website-s-html-to-pdf-conversion-service-support-for-zip-formatted-input-can-by2026-10-29 https://bugrater.com/releases/cve-2026-111419-a-sensitive-information-exposure-vulnerability-exists-on-the-foxit-official-website-because-javascript-code-contains-third-party-authorization-information-this2026-10-29 https://bugrater.com/releases/cve-2026-116763-the-litespeed-cache-plugin-for-wordpress-is-vulnerable-to-stored-cross-site-scripting-via-the-comment-parameter-in-all-versions-up-to-and-including-7-9-1-du2026-10-29 https://bugrater.com/releases/cve-2026-118192-the-joomsport-for-sports-team-league-football-hockey-more-plugin-for-wordpress-is-vulnerable-to-generic-sql-injection-via-the-team-id-parameter-in-al2026-10-29 https://bugrater.com/releases/cve-2026-91152-the-everest-forms-contact-form-payment-form-quiz-survey-custom-form-builder-with-ai-plugin-for-wordpress-is-vulnerable-to-reflected-cross-site-scripting2026-10-29 https://bugrater.com/releases/cve-2026-91153-the-everest-forms-contact-form-payment-form-quiz-survey-custom-form-builder-with-ai-plugin-for-wordpress-is-vulnerable-to-sensitive-information-exposure2026-10-29 https://bugrater.com/releases/cve-2026-105042-a-message-body-that-is-deeply-nested-and-decoded-by-pn-message-body-could-overflow-the-stack-and-cause-a-crash-this-issue-affects-apache-qpid-proton-c-th2026-10-29 https://bugrater.com/releases/cve-2026-112827-missing-authorization-vulnerability-in-villatheme-handmade-dropshipping-for-etsy-and-woocommerce-handmade-dropshipping-for-etsy-and-woo-allows-exploiting-inco2026-10-29 https://bugrater.com/releases/cve-2026-114193-missing-authorization-vulnerability-in-eyal-fitoussi-geo-my-wordpress-geo-my-wp-allows-exploiting-incorrectly-configured-access-control-security-levels-this-iss2026-10-29 https://bugrater.com/releases/cve-2026-115592-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-vulnerability-in-oceanwp-oceanwp-oceanwp-allows-reflected-xss-this-issue-af2026-10-29 https://bugrater.com/releases/cve-2026-115599-missing-authorization-vulnerability-in-thimpress-learnpress-learnpress-allows-exploiting-incorrectly-configured-access-control-security-levels-this-issue-affect2026-10-29 https://bugrater.com/releases/cve-2026-115611-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-vulnerability-in-pluginus-net-tableon-posts-table-filterable-allows-reflect2026-10-29 https://bugrater.com/releases/cve-2026-115942-a-misconfigured-wildcard-tls-certificate-causes-a-stack-read-overflow-this-issue-does-not-affect-any-wildcard-certificate-issued-to-the-rfc9525-standard-t2026-10-29 https://bugrater.com/releases/cve-2026-115962-authentication-bypass-by-spoofing-vulnerability-in-mycred-mycred-mycred-allows-identity-spoofing-this-issue-affects-mycred-from-n-a-through-4-0-12026-10-29 https://bugrater.com/releases/cve-2026-115963-missing-authorization-vulnerability-in-videowhisper-com-broadcast-live-video-videowhisper-live-streaming-integration-allows-exploiting-incorrectly-configured-ac2026-10-29 https://bugrater.com/releases/cve-2026-115964-improper-neutralization-of-special-elements-used-in-an-sql-command-sql-injection-vulnerability-in-stylemixthemes-motors-motors-car-dealership-classified-lis2026-10-29 https://bugrater.com/releases/cve-2026-115965-improper-neutralization-of-special-elements-used-in-an-sql-command-sql-injection-vulnerability-in-buddypress-buddypress-buddypress-allows-blind-sql-injectio2026-10-29 https://bugrater.com/releases/cve-2026-115967-weak-authentication-vulnerability-in-hamid-alinia-login-with-phone-number-login-with-phone-number-allows-authentication-abuse-this-issue-affects-login-with-phon2026-10-29 https://bugrater.com/releases/cve-2026-116409-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-vulnerability-in-wp-swings-upsell-order-bump-offer-for-woocommerce-upsell-o2026-10-29 https://bugrater.com/releases/cve-2026-118984-omniroute-3-8-0-before-3-8-52-contains-an-unverified-password-change-vulnerability-that-allows-holders-of-manage-or-admin-scoped-api-keys-or-oma-access-tokens2026-10-29 https://bugrater.com/releases/cve-2026-118989-webtoffee-product-import-export-for-woocommerce-2-5-1-before-2-6-8-contains-a-server-side-request-forgery-vulnerability-in-download-remote-file-that-allows-shop2026-10-29 https://bugrater.com/releases/cve-2026-33923-a-signature-verification-vulnerability-was-discovered-in-the-update-installation-functionality-due-to-inconsistent-validation-of-the-update-bundle-contents-an2026-10-29 https://bugrater.com/releases/cve-2026-33924-two-os-command-injection-vulnerabilities-were-discovered-in-the-update-installation-functionality-due-to-insufficient-validation-of-the-update-bundle-contents2026-10-29 https://bugrater.com/releases/cve-2026-71569-server-side-request-forgery-ssrf-vulnerability-in-apache-camel-a2a-component-this-issue-affects-apache-camel-from-4-21-0-before-4-22-2-webhookurlvali2026-10-29 https://bugrater.com/releases/cve-2026-109216-the-meta-box-a-framework-for-dynamic-websites-plugin-for-wordpress-is-vulnerable-to-stored-cross-site-scripting-via-the-profile-background-attacker-chosen-k2026-10-29 https://bugrater.com/releases/cve-2026-110184-the-newsmatic-theme-for-wordpress-is-vulnerable-to-blind-sql-injection-via-the-slug-parameter-in-all-versions-up-to-and-including-1-5-0-due-to-insufficient2026-10-29 https://bugrater.com/releases/cve-2026-115821-the-newsmanapp-plugin-for-wordpress-is-vulnerable-to-stored-cross-site-scripting-via-the-billing-first-name-billing-last-name-parameter-in-all-versions-up-to2026-10-29 https://bugrater.com/releases/cve-2026-119025-open-7-2-0-before-11-0-0-contains-an-os-command-injection-vulnerability-that-allows-attackers-to-execute-powershell-code-by-supplying-crafted-urls-on-windows-an2026-10-29 https://bugrater.com/releases/cve-2026-119027-oapi-codegen-2-5-0-before-2-8-1-contains-a-code-injection-vulnerability-that-allows-attackers-to-inject-go-code-by-supplying-a-crafted-servers-x-go-name-value2026-10-29 https://bugrater.com/releases/cve-2026-119028-oapi-codegen-2-0-0-before-2-8-1-contains-a-code-injection-vulnerability-that-allows-attackers-to-inject-go-code-by-supplying-non-literal-enum-entries-in-integer2026-10-29 https://bugrater.com/releases/cve-2026-27401-missing-authorization-vulnerability-in-yith-yith-paypal-express-checkout-for-woocommerce-yith-paypal-express-checkout-for-woocommerce-allows-exploiting-incorrec2026-10-29 https://bugrater.com/releases/cve-2026-5697-stored-cross-site-scripting-xss-vulnerability-in-sabbatic-application-that-allows-an-attacker-to-store-javascript-code-so-that-when-a-user-views-the-page-cod2026-10-29 https://bugrater.com/releases/cve-2026-5698-stored-cross-site-scripting-xss-vulnerability-in-sabbatic-application-that-allows-an-attacker-to-store-javascript-code-so-that-when-a-user-views-the-page-cod2026-10-29 https://bugrater.com/releases/cve-2026-5699-stored-cross-site-scripting-xss-vulnerability-in-sabbatic-application-that-allows-an-attacker-to-store-javascript-code-so-that-when-a-user-views-the-page-cod2026-10-29 https://bugrater.com/releases/cve-2026-5700-stored-cross-site-scripting-xss-vulnerability-in-sabbatic-application-that-allows-an-attacker-to-store-javascript-code-so-that-when-a-user-views-the-page-cod2026-10-29 https://bugrater.com/releases/cve-2026-5702-cross-site-request-forgery-csrf-vulnerability-in-sabbatic-application-that-allows-an-attacker-can-trick-an-authenticated-user-into-clicking-a-malicious-link-o2026-10-29 https://bugrater.com/releases/cve-2026-92086-the-mw-wp-form-plugin-for-wordpress-is-vulnerable-to-sensitive-information-exposure-in-all-versions-up-to-and-including-5-1-7-via-the-post-id-parameter-thi2026-10-29 https://bugrater.com/releases/cve-2026-96767-the-nex-forms-ultimate-forms-plugin-for-wordpress-plugin-for-wordpress-is-vulnerable-to-stored-cross-site-scripting-via-the-type-parameter-in-all-versions-u2026-10-29 https://bugrater.com/releases/cve-2026-113688-server-side-request-forgery-in-the-smartit-url-based-attachment-feature-of-bmc-it-service-management-suite-versions-25-3-01-25-4-01-and-26-1-01-allows-authent2026-10-29 https://bugrater.com/releases/cve-2026-113689-stored-cross-site-scripting-in-the-smartit-work-notes-feature-of-bmc-it-service-management-suite-versions-25-3-01-25-4-01-and-26-1-01-allows-authenticated-use2026-10-29 https://bugrater.com/releases/cve-2026-113690-stored-cross-site-scripting-in-the-smartit-attachment-feature-of-bmc-it-service-management-suite-versions-25-3-01-25-4-01-and-26-1-01-allows-authenticated-use2026-10-29 https://bugrater.com/releases/cve-2026-118087-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-vulnerability-in-gemini-labs-site-reviews-site-reviews-allows-stored-xss-th2026-10-29 https://bugrater.com/releases/cve-2026-118093-missing-authorization-vulnerability-in-wpfunnels-team-product-feed-manager-best-woocommerce-feed-allows-exploiting-incorrectly-configured-access-control-securit2026-10-29 https://bugrater.com/releases/cve-2026-118094-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-vulnerability-in-igor-funa-ad-inserter-ad-inserter-allows-stored-xss-this-i2026-10-29 https://bugrater.com/releases/cve-2026-22386-missing-authorization-vulnerability-in-ahmad-wp-job-portal-wp-job-portal-allows-exploiting-incorrectly-configured-access-control-security-levels-this-issue-affe2026-10-29 https://bugrater.com/releases/cve-2026-24533-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-vulnerability-in-cozythemes-cozy-blocks-cozy-addons-allows-stored-xss-this2026-10-29 https://bugrater.com/releases/cve-2026-39735-missing-authorization-vulnerability-in-crocoblock-jetengine-jet-engine-allows-exploiting-incorrectly-configured-access-control-security-levels-this-issue-affect2026-10-29 https://bugrater.com/releases/cve-2026-39741-missing-authorization-vulnerability-in-relywp-simple-cloudflare-turnstile-simple-cloudflare-turnstile-allows-exploiting-incorrectly-configured-access-control-se2026-10-29 https://bugrater.com/releases/cve-2026-42703-missing-authorization-vulnerability-in-kaliforms-kali-forms-kali-forms-allows-exploiting-incorrectly-configured-access-control-security-levels-this-issue-affect2026-10-29 https://bugrater.com/releases/cve-2026-48196-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-vulnerability-in-kaliforms-kali-forms-kali-forms-allows-stored-xss-this-iss2026-10-29 https://bugrater.com/releases/cve-2026-49142-openemr-before-8-5-0-contains-an-authenticated-sql-injection-vulnerability-in-the-syndromic-surveillance-module-that-allows-users-with-clinician-level-privilege2026-10-29 https://bugrater.com/releases/cve-2026-52709-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-vulnerability-in-bplugins-video-gallery-block-video-gallery-block-allows-st2026-10-29 https://bugrater.com/releases/cve-2026-56056-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-vulnerability-in-mamunur-rashid-the-post-grid-the-post-grid-allows-stored-x2026-10-29 https://bugrater.com/releases/cve-2026-93006-a-flaw-was-found-in-dnsmasq-the-tftp-server-can-serve-the-wrong-file-contents-because-a-recently-used-transfer-cache-is-not-invalidated-when-a-transfer-finishe2026-10-29 https://bugrater.com/releases/cve-2026-93007-a-flaw-was-found-in-dnsmasq-the-tcp-dns-service-uses-a-small-fixed-pool-of-child-processes-and-does-not-set-a-receive-timeout-on-client-connections-a-remote-a2026-10-29 https://bugrater.com/releases/cve-2026-93008-a-flaw-was-found-in-dnsmasq-when-following-a-cname-in-a-dns-response-the-resolver-can-cache-records-for-the-cname-target-without-checking-that-those-records-b2026-10-29 https://bugrater.com/releases/cve-2026-93011-a-flaw-was-found-in-dnsmasq-after-a-reduction-of-internal-domain-name-buffer-sizes-the-dnssec-validator-can-write-a-few-bytes-past-a-name-buffer-when-converti2026-10-29 https://bugrater.com/releases/cve-2019-25781-python-markdown-3-0-through-3-11-2-contains-an-algorithmic-complexity-vulnerability-in-inline-link-parsing-that-allows-remote-attackers-to-exhaust-cpu-through-u2026-10-29 https://bugrater.com/releases/cve-2026-113691-stored-cross-site-scripting-in-the-smartit-knowledge-article-feature-of-bmc-it-service-management-suite-versions-25-3-01-25-4-01-and-26-1-01-allows-authentica2026-10-29 https://bugrater.com/releases/cve-2026-113692-path-traversal-in-the-smartit-file-management-feature-of-bmc-it-service-management-suite-versions-25-3-01-25-4-01-and-26-1-01-allows-authenticated-administrat2026-10-29 https://bugrater.com/releases/cve-2026-113693-exposure-of-sensitive-information-in-the-smartit-system-account-settings-of-bmc-it-service-management-suite-versions-25-3-01-25-4-01-and-26-1-01-allows-authen2026-10-29 https://bugrater.com/releases/cve-2026-113694-improper-authorization-in-the-smartit-user-attachment-feature-of-bmc-it-service-management-suite-versions-25-3-01-25-4-01-and-26-1-01-allows-authenticated-use2026-10-29 https://bugrater.com/releases/cve-2026-113695-reflected-cross-site-scripting-in-the-smartit-inline-image-attachment-feature-of-bmc-it-service-management-suite-versions-25-3-01-25-4-01-and-26-1-01-allows-a2026-10-29 https://bugrater.com/releases/cve-2026-113696-improper-authorization-in-the-smartit-change-approval-feature-of-bmc-it-service-management-suite-versions-25-3-01-25-4-01-and-26-1-01-allows-authenticated-use2026-10-29 https://bugrater.com/releases/cve-2026-113697-reflected-cross-site-scripting-in-the-agent-query-feature-of-bmc-helix-operations-management-25-4-00-allows-authenticated-attackers-to-execute-script-in-another2026-10-29 https://bugrater.com/releases/cve-2026-116399-cross-site-request-forgery-csrf-vulnerability-in-instawp-instawp-connect-instawp-connect-allows-cross-site-request-forgery-this-issue-affects-instawp-connect2026-10-29 https://bugrater.com/releases/cve-2026-116402-improper-neutralization-of-script-related-html-tags-in-a-web-page-basic-xss-vulnerability-in-brainstorm-force-sureforms-sureforms-allows-code-injection-this-i2026-10-29 https://bugrater.com/releases/cve-2026-116857-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-vulnerability-in-crocoblock-jetsmartfilters-jet-smart-filters-allows-stored2026-10-29 https://bugrater.com/releases/cve-2026-119048-jeesite-5-11-0-through-5-19-1-contains-an-insecure-direct-object-reference-vulnerability-in-the-ai-cms-chat-module-that-allows-authenticated-users-to-access-oth2026-10-29 https://bugrater.com/releases/cve-2026-119049-freemail-before-5-3-2-contains-an-authorization-bypass-vulnerability-that-allows-authenticated-users-to-claim-another-user-s-existing-mailbox-via-the-post-api2026-10-29 https://bugrater.com/releases/cve-2026-119050-agno-through-3-1-11-contains-an-unsafe-reflection-vulnerability-in-pandastools-that-allows-attackers-to-invoke-arbitrary-pandas-functions-by-supplying-model-con2026-10-29 https://bugrater.com/releases/cve-2026-119051-flat-through-6-0-1-contains-an-uncontrolled-resource-allocation-vulnerability-in-unflatten-that-allows-attackers-to-create-huge-sparse-arrays-via-unbounded-nu2026-10-29 https://bugrater.com/releases/cve-2026-119052-llama-cpp-b2877-before-b11935-contains-an-uncaught-exception-vulnerability-in-the-ggml-rpc-server-that-allows-unauthenticated-remote-attackers-to-crash-the-rpc2026-10-29 https://bugrater.com/releases/cve-2026-119053-lwip-2-0-0-through-2-2-1-built-with-the-snmp-agent-contains-an-out-of-bounds-read-vulnerability-in-snmp-pbuf-stream-writeto-that-bounds-copies-by-pbuf-len-in2026-10-29 https://bugrater.com/releases/cve-2026-119054-multiple-pages-generator-by-themeisle-before-4-2-5-contains-a-stored-cross-site-scripting-vulnerability-that-allows-contributor-level-users-to-inject-script-via2026-10-29 https://bugrater.com/releases/cve-2026-25467-improper-neutralization-of-script-related-html-tags-in-a-web-page-basic-xss-vulnerability-in-themegrill-user-registration-user-registration-allows-code-inject2026-10-29 https://bugrater.com/releases/cve-2026-39736-improper-neutralization-of-special-elements-used-in-an-sql-command-sql-injection-vulnerability-in-crocoblock-jetengine-jet-engine-allows-sql-injection-this2026-10-29 https://bugrater.com/releases/cve-2026-39782-missing-authorization-vulnerability-in-kaliforms-kali-forms-kali-forms-allows-exploiting-incorrectly-configured-access-control-security-levels-this-issue-affect2026-10-29 https://bugrater.com/releases/cve-2026-42707-missing-authorization-vulnerability-in-hivepress-hivepress-claim-listings-hivepress-claim-listings-allows-exploiting-incorrectly-configured-access-control-secur2026-10-29 https://bugrater.com/releases/cve-2026-48195-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-vulnerability-in-bplugins-pdf-poster-pdf-poster-allows-stored-xss-this-issu2026-10-29 https://bugrater.com/releases/cve-2026-48202-improper-neutralization-of-script-related-html-tags-in-a-web-page-basic-xss-vulnerability-in-brave-brave-brave-popup-builder-allows-code-injection-this-issue2026-10-29 https://bugrater.com/releases/cve-2026-54862-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-vulnerability-in-codection-import-and-export-users-and-customers-import-use2026-10-29 https://bugrater.com/releases/cve-2026-93009-a-flaw-was-found-in-dnsmasq-the-dhcpv6-client-hostname-parser-can-read-one-byte-past-the-end-of-a-crafted-fqdn-option-because-it-checks-the-next-label-length-b2026-10-29 https://bugrater.com/releases/cve-2026-93010-a-flaw-was-found-in-dnsmasq-when-dhcp-leasequery-is-enabled-without-listing-allowed-source-addresses-the-server-does-not-check-who-sent-the-query-a-host-on-t2026-10-29 https://bugrater.com/releases/cve-2026-110881-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-vulnerability-in-brainstorm-force-suredash-suredash-allows-stored-xss-this2026-10-29 https://bugrater.com/releases/cve-2026-114181-missing-authorization-vulnerability-in-magepeople-inc-taxi-booking-manager-for-woocommerce-ecab-taxi-booking-manager-allows-exploiting-incorrectly-configured-a2026-10-29 https://bugrater.com/releases/cve-2026-114706-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-vulnerability-in-wp-chill-strong-testimonials-strong-testimonials-allows-st2026-10-29 https://bugrater.com/releases/cve-2026-115601-missing-authorization-vulnerability-in-wp-desk-custom-price-for-woocommerce-custom-price-for-woocommerce-allows-exploiting-incorrectly-configured-access-control2026-10-29 https://bugrater.com/releases/cve-2026-115605-missing-authorization-vulnerability-in-brainstorm-force-suredash-suredash-allows-exploiting-incorrectly-configured-access-control-security-levels-this-issue-aff2026-10-29 https://bugrater.com/releases/cve-2026-115610-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-vulnerability-in-publishpress-publishpress-authors-publishpress-authors-all2026-10-29 https://bugrater.com/releases/cve-2026-116387-missing-authorization-vulnerability-in-brainstorm-force-sureforms-sureforms-allows-exploiting-incorrectly-configured-access-control-security-levels-this-issue-a2026-10-29 https://bugrater.com/releases/cve-2026-116406-missing-authorization-vulnerability-in-webba-plugins-webba-booking-webba-booking-lite-allows-exploiting-incorrectly-configured-access-control-security-levels-th2026-10-29 https://bugrater.com/releases/cve-2026-116846-missing-authorization-vulnerability-in-wp-user-manager-wp-user-manager-wp-user-manager-allows-exploiting-incorrectly-configured-access-control-security-levels-t2026-10-29 https://bugrater.com/releases/cve-2026-116849-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-vulnerability-in-bplugins-streamcast-streamcast-allows-stored-xss-this-issu2026-10-29 https://bugrater.com/releases/cve-2026-116850-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-vulnerability-in-wedevs-happy-addons-for-elementor-happy-elementor-addons-a2026-10-29 https://bugrater.com/releases/cve-2026-116856-missing-authorization-vulnerability-in-wp-desk-flexible-quantity-measurement-price-calculator-for-woocommerce-flexible-quantity-measurement-price-calculator-f2026-10-29 https://bugrater.com/releases/cve-2026-118088-missing-authorization-vulnerability-in-wpfunnels-team-wpfunnels-wpfunnels-allows-exploiting-incorrectly-configured-access-control-security-levels-this-issue-aff2026-10-29 https://bugrater.com/releases/cve-2026-118091-missing-authorization-vulnerability-in-wpfunnels-team-wpfunnels-wpfunnels-allows-exploiting-incorrectly-configured-access-control-security-levels-this-issue-aff2026-10-29 https://bugrater.com/releases/cve-2026-118092-missing-authorization-vulnerability-in-stylemixthemes-masterstudy-lms-masterstudy-lms-learning-management-system-allows-exploiting-incorrectly-configured-access2026-10-29 https://bugrater.com/releases/cve-2026-118095-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-vulnerability-in-david-lingren-media-library-assistant-media-library-assist2026-10-29 https://bugrater.com/releases/cve-2026-118097-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-vulnerability-in-bplugins-flash-html5-video-html5-video-player-allows-sto2026-10-29 https://bugrater.com/releases/cve-2026-25448-missing-authorization-vulnerability-in-wedevs-wp-erp-erp-allows-exploiting-incorrectly-configured-access-control-security-levels-this-issue-affects-wp-erp-from2026-10-29 https://bugrater.com/releases/cve-2026-25450-missing-authorization-vulnerability-in-themegrill-user-registration-user-registration-allows-exploiting-incorrectly-configured-access-control-security-levels-th2026-10-29 https://bugrater.com/releases/cve-2026-27062-cross-site-request-forgery-csrf-vulnerability-in-wpfunnels-team-wpfunnels-wpfunnels-allows-cross-site-request-forgery-this-issue-affects-wpfunnels-from-n-a-t2026-10-29 https://bugrater.com/releases/cve-2026-27063-missing-authorization-vulnerability-in-kit-kit-formerly-convertkit-convertkit-allows-exploiting-incorrectly-configured-access-control-security-levels-this-iss2026-10-29 https://bugrater.com/releases/cve-2026-39737-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-vulnerability-in-crocoblock-jetelements-for-elementor-jet-elements-allows-s2026-10-29 https://bugrater.com/releases/cve-2026-39742-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-vulnerability-in-liquid-web-stellarwp-gutenberg-blocks-by-kadence-blocks2026-10-29 https://bugrater.com/releases/cve-2026-42691-authorization-bypass-through-user-controlled-key-vulnerability-in-eventprime-eventprime-eventprime-event-calendar-management-allows-privilege-abuse-this-issue-a2026-10-29 https://bugrater.com/releases/cve-2026-48884-missing-authorization-vulnerability-in-wedevs-wp-user-frontend-wp-user-frontend-allows-exploiting-incorrectly-configured-access-control-security-levels-this-iss2026-10-29 https://bugrater.com/releases/cve-2026-52708-missing-authorization-vulnerability-in-wedevs-wp-user-frontend-wp-user-frontend-allows-exploiting-incorrectly-configured-access-control-security-levels-this-iss2026-10-29 https://bugrater.com/releases/cve-2026-54852-missing-authorization-vulnerability-in-miniorange-page-restriction-wordpress-wp-page-and-post-restriction-allows-exploiting-incorrectly-configured-access-cont2026-10-29 https://bugrater.com/releases/cve-2026-54853-missing-authorization-vulnerability-in-cozmoslabs-profile-builder-profile-builder-allows-exploiting-incorrectly-configured-access-control-security-levels-this-i2026-10-29 https://bugrater.com/releases/cve-2026-54871-missing-authorization-vulnerability-in-mamunur-rashid-shopbuilder-elementor-woocommerce-builder-addons-shopbuilder-allows-exploiting-incorrectly-configured-ac2026-10-29 https://bugrater.com/releases/cve-2026-80067-masterstudy-lms-plugin-for-wordpress-before-3-7-50-contains-a-path-traversal-vulnerability-that-allows-authenticated-subscriber-level-users-to-import-arbitrary2026-10-29 https://bugrater.com/releases/cve-2026-80069-masterstudy-lms-plugin-for-wordpress-before-3-7-50-contains-a-missing-authorization-vulnerability-that-allows-any-authenticated-user-including-subscribers-to2026-10-29 https://bugrater.com/releases/cve-2026-97073-missing-authorization-vulnerability-in-mycred-mycred-mycred-allows-exploiting-incorrectly-configured-access-control-security-levels-this-issue-affects-mycred-f2026-10-29 https://bugrater.com/releases/cve-2025-13050-broken-function-level-authorization-allows-execution-of-poller-post-restart-commands-by-authenticated-user2026-10-29 https://bugrater.com/releases/cve-2026-106036-szafir-accepts-any-client-or-server-certificate-without-performing-certificate-and-hostname-validation-allowing-https-connections-without-authenticating-the-re2026-10-29 https://bugrater.com/releases/cve-2026-108494-unauthenticated-cross-site-scripting-xss-in-chained-quiz-1-4-1-versions2026-10-29 https://bugrater.com/releases/cve-2026-109891-missing-authorization-vulnerability-in-wedevs-happy-addons-for-elementor-happy-elementor-addons-allows-exploiting-incorrectly-configured-access-control-security2026-10-29 https://bugrater.com/releases/cve-2026-111730-p-net-before-1-0-3-does-not-validate-the-lengthpeerstationname-field-of-a-checkpeers-block-in-get-check-peer-the-received-length-up-to-255-was-used-to-copy2026-10-29 https://bugrater.com/releases/cve-2026-111731-p-net-before-1-0-3-enters-an-infinite-loop-when-handling-a-read-request-for-the-pdportdatacheck-record-with-subslot-0-whole-module-the-loop-over-the-ports-ne2026-10-29 https://bugrater.com/releases/cve-2026-111732-p-net-before-1-0-3-when-built-with-pnet-option-ar-vendor-blocks-enabled-parses-a-data-length-from-a-field-of-the-arvendorblock-request-that-is-not-part-of-the2026-10-29 https://bugrater.com/releases/cve-2026-111733-p-net-before-1-0-3-dereferences-a-null-ar-pointer-when-handling-an-implicit-read-request-without-a-valid-target-ar-uuid-for-a-record-index-that-requires-an-ar2026-10-29 https://bugrater.com/releases/cve-2026-111734-p-net-before-1-0-3-does-not-validate-the-length-of-a-received-ethernet-frame-in-pf-eth-recv-before-reading-the-ethertype-any-vlan-tags-and-the-profinet-frame2026-10-29 https://bugrater.com/releases/cve-2026-112200-p-net-before-1-0-3-does-not-release-the-application-relationship-ar-and-the-rpc-session-when-an-rpc-request-is-rejected-because-its-data-representation-has-in2026-10-29 https://bugrater.com/releases/cve-2026-112255-initialization-of-a-resource-with-an-insecure-default-vulnerability-in-opentext-advanced-authentication-server-allows-excessive-allocation-this-issue-affects2026-10-29 https://bugrater.com/releases/cve-2026-112256-acceptance-of-extraneous-untrusted-data-with-trusted-data-vulnerability-in-opentext-advanced-authentication-server-allows-accessing-functionality-not-properly-c2026-10-29 https://bugrater.com/releases/cve-2026-115793-p-net-before-1-0-3-does-not-release-the-rpc-session-allocated-for-an-rpc-request-that-names-an-unknown-interface-or-object-uuid-and-does-not-start-a-timeout-fo2026-10-29 https://bugrater.com/releases/cve-2026-115794-p-net-before-1-0-3-passes-the-application-alarm-callback-a-data-length-derived-from-the-variable-part-length-field-of-a-received-rta-alarm-frame-without-checkin2026-10-29 https://bugrater.com/releases/cve-2026-115795-p-net-before-1-0-3-does-not-check-that-a-complete-block-header-is-present-in-the-received-data-before-reading-the-next-block-in-dcp-set-and-identify-requests-i2026-10-29 https://bugrater.com/releases/cve-2026-116848-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-vulnerability-in-posimyth-innovations-the-plus-addons-for-elementor-page-bu2026-10-29 https://bugrater.com/releases/cve-2026-116864-author-php-object-injection-in-wpcargo-track-trace-8-0-5-versions2026-10-29 https://bugrater.com/releases/cve-2026-116865-editor-php-object-injection-in-zippy-1-7-0-versions2026-10-29 https://bugrater.com/releases/cve-2026-116866-contributor-php-object-injection-in-extra-fees-plugin-for-woocommerce-4-4-0-versions2026-10-29 https://bugrater.com/releases/cve-2026-116867-contributor-php-object-injection-in-dynamic-qr-code-8211-generator-1-0-1-versions2026-10-29 https://bugrater.com/releases/cve-2026-116868-subscriber-php-object-injection-in-buddypress-xprofile-custom-field-types-1-3-1-versions2026-10-29 https://bugrater.com/releases/cve-2026-116869-shop-manager-php-object-injection-in-mypos-checkout-1-4-5-versions2026-10-29 https://bugrater.com/releases/cve-2026-118073-subscriber-php-object-injection-in-news-kit-elementor-addons-1-5-0-versions2026-10-29 https://bugrater.com/releases/cve-2026-118074-shop-manager-php-object-injection-in-finale-lite-2-21-0-versions2026-10-29 https://bugrater.com/releases/cve-2026-118075-contributor-php-object-injection-in-wp-media-folders-1-1-10-versions2026-10-29 https://bugrater.com/releases/cve-2026-118076-contributor-php-object-injection-in-frisbii-pay-1-8-19-versions2026-10-29 https://bugrater.com/releases/cve-2026-118077-author-php-object-injection-in-sastra-essential-addons-for-elementor-1-2-3-versions2026-10-29 https://bugrater.com/releases/cve-2026-118078-shop-manager-php-object-injection-in-product-catalog-feed-by-pixelyoursite-3-1-4-versions2026-10-29 https://bugrater.com/releases/cve-2026-118079-shop-manager-php-object-injection-in-fv-flowplayer-video-player-8-3-4-versions2026-10-29 https://bugrater.com/releases/cve-2026-118080-contributor-php-object-injection-in-social-snap-1-5-4-versions2026-10-29 https://bugrater.com/releases/cve-2026-118081-contributor-php-object-injection-in-10web-social-photo-feed-1-5-6-versions2026-10-29 https://bugrater.com/releases/cve-2026-118082-subscriber-privilege-escalation-in-buddyboss-platform-3-5-0-versions2026-10-29 https://bugrater.com/releases/cve-2026-118083-unauthenticated-sensitive-data-exposure-in-wp-crowdfunding-2-2-2-versions2026-10-29 https://bugrater.com/releases/cve-2026-118084-subscriber-insecure-direct-object-references-idor-in-hotel-booking-3-8-versions2026-10-29 https://bugrater.com/releases/cve-2026-118085-unauthenticated-cross-site-scripting-xss-in-globalpayments-woocommerce-1-23-3-versions2026-10-29 https://bugrater.com/releases/cve-2026-119119-crawl4ai-before-0-9-5-contains-a-denial-of-service-vulnerability-in-the-docker-api-server-where-clamp-untrusted-fails-to-cap-the-delay-before-return-html-me2026-10-29 https://bugrater.com/releases/cve-2026-119120-crawl4ai-from-0-9-0-before-0-9-5-fails-to-filter-the-cosinestrategy-model-name-field-in-untrusted-docker-api-request-bodies-allowing-authenticated-clients-to-c2026-10-29 https://bugrater.com/releases/cve-2026-119121-crawl4ai-from-0-9-0-before-0-9-5-contains-a-javascript-injection-vulnerability-in-the-docker-api-server-that-allows-authenticated-api-clients-to-run-arbitrary-j2026-10-29 https://bugrater.com/releases/cve-2026-119122-crawl4ai-before-0-9-5-contains-a-blind-server-side-request-forgery-vulnerability-in-the-docker-server-that-allows-api-clients-to-bypass-the-egress-proxy-by-enab2026-10-29 https://bugrater.com/releases/cve-2026-119123-imagemagick-before-7-1-2-34-contains-a-stack-overflow-vulnerability-in-the-tiff-decoder-that-occurs-when-the-dng-decoder-is-disabled-attackers-can-supply-a-cra2026-10-29 https://bugrater.com/releases/cve-2026-119124-imagemagick-before-7-1-2-34-contains-a-heap-based-buffer-overflow-in-its-morph-processing-where-crafted-images-cause-writes-beyond-the-bounds-of-a-heap-buffer2026-10-29 https://bugrater.com/releases/cve-2026-119127-zitadel-4-0-0-before-4-19-5-contains-a-host-header-injection-vulnerability-in-the-login-v2-ui-that-allows-unauthenticated-attackers-to-poison-password-reset-in2026-10-29 https://bugrater.com/releases/cve-2026-119128-zitadel-4-0-0-before-4-19-5-contains-an-authentication-bypass-vulnerability-in-the-login-v2-ui-that-allows-unauthenticated-attackers-to-set-the-first-credential2026-10-29 https://bugrater.com/releases/cve-2026-119129-zitadel-3-0-0-through-3-4-15-and-4-0-0-before-4-19-5-contains-a-missing-authorization-vulnerability-in-login-v2-that-allows-attackers-to-approve-oauth-2-0-devic2026-10-29 https://bugrater.com/releases/cve-2026-119134-wasmtime-before-36-0-18-37-0-0-before-48-0-6-and-49-0-0-before-49-0-3-caps-component-model-resource-handle-tables-only-per-component-instance-and-does-not-cha2026-10-29 https://bugrater.com/releases/cve-2026-119135-wasmtime-46-0-0-before-48-0-6-and-49-0-0-before-49-0-3-panics-when-the-host-reads-a-component-model-stream-as-a-different-rust-item-type-than-it-was-created-wit2026-10-29 https://bugrater.com/releases/cve-2026-119138-wasmtime-46-0-0-before-48-0-6-and-49-0-0-before-49-0-3-contains-a-denial-of-service-vulnerability-that-allows-pending-calls-to-trigger-an-assertion-failure-afte2026-10-29 https://bugrater.com/releases/cve-2026-119139-wasmtime-46-0-0-before-48-0-6-and-49-0-0-before-49-0-3-contains-a-leftover-assertion-in-component-func-call-that-rejects-guest-exports-using-the-async-abi-opt2026-10-29 https://bugrater.com/releases/cve-2026-119140-wasmtime-46-0-0-before-48-0-6-and-49-0-0-before-49-0-3-contains-a-denial-of-service-vulnerability-that-allows-malicious-components-to-panic-the-host-via-thread2026-10-29 https://bugrater.com/releases/cve-2026-119141-wasmtime-46-0-0-before-48-0-6-and-49-0-0-before-49-0-3-contains-a-denial-of-service-vulnerability-that-allows-malicious-wasm-modules-to-panic-the-host-because-t2026-10-29 https://bugrater.com/releases/cve-2026-119144-frappe-framework-before-15-111-0-and-16-x-before-16-21-0-contains-a-server-side-template-injection-vulnerability-because-user-controlled-message-fields-are-rend2026-10-29 https://bugrater.com/releases/cve-2026-119145-frappe-before-15-121-0-and-16-x-before-16-34-0-contains-a-path-traversal-vulnerability-because-certain-file-upload-handling-does-not-validate-the-destination-pa2026-10-29 https://bugrater.com/releases/cve-2026-27394-unauthenticated-cross-site-scripting-xss-in-eventer-0-1-1-versions2026-10-29 https://bugrater.com/releases/cve-2026-42690-subscriber-broken-access-control-in-learnpress-4-4-10-versions2026-10-29 https://bugrater.com/releases/cve-2026-42692-unauthenticated-cross-site-scripting-xss-in-wp-crowdfunding-2-2-2-versions2026-10-29 https://bugrater.com/releases/cve-2026-42694-improper-neutralization-of-script-related-html-tags-in-a-web-page-basic-xss-vulnerability-in-themeum-kirki-kirki-allows-code-injection-this-issue-affects-kirk2026-10-29 https://bugrater.com/releases/cve-2026-42701-shop-manager-php-object-injection-in-yaymail-4-4-6-versions2026-10-29 https://bugrater.com/releases/cve-2026-48200-insertion-of-sensitive-information-into-sent-data-vulnerability-in-barn2-plugins-document-library-lite-document-library-lite-allows-retrieve-embedded-sensitive2026-10-29 https://bugrater.com/releases/cve-2026-54856-unauthenticated-php-object-injection-in-rexcoin-1-2-6-versions2026-10-29 https://bugrater.com/releases/cve-2026-54857-unauthenticated-php-object-injection-in-quirky-1-23-versions2026-10-29 https://bugrater.com/releases/cve-2026-54858-unauthenticated-php-object-injection-in-printy-1-13-0-versions2026-10-29 https://bugrater.com/releases/cve-2026-54859-unauthenticated-php-object-injection-in-preservation-1-15-versions2026-10-29 https://bugrater.com/releases/cve-2026-54860-unauthenticated-php-object-injection-in-ozisti-1-1-10-versions2026-10-29 https://bugrater.com/releases/cve-2026-54864-unauthenticated-cross-site-scripting-xss-in-post-video-players-1-165-versions2026-10-29 https://bugrater.com/releases/cve-2026-54865-subscriber-cross-site-scripting-xss-in-podamibe-custom-user-gravatar-1-0-8-versions2026-10-29 https://bugrater.com/releases/cve-2026-54866-unauthenticated-cross-site-scripting-xss-in-razorpay-payment-button-elementor-plugin-1-2-8-versions2026-10-29 https://bugrater.com/releases/cve-2026-61988-unauthenticated-cross-site-scripting-xss-in-auction-nudge-your-ebay-on-your-site-8-4-0-versions2026-10-29 https://bugrater.com/releases/cve-2026-61989-unauthenticated-cross-site-scripting-xss-in-easy-property-listings-3-5-25-versions2026-10-29 https://bugrater.com/releases/cve-2026-61991-unauthenticated-remote-code-execution-rce-in-ajaxloadmore-cache-3-1-1-versions2026-10-29 https://bugrater.com/releases/cve-2026-61992-unauthenticated-php-object-injection-in-geo-my-wordpress-4-5-5-3-versions2026-10-29 https://bugrater.com/releases/cve-2026-61993-unauthenticated-cross-site-scripting-xss-in-blockonomics-3-11-0-versions2026-10-29 https://bugrater.com/releases/cve-2026-61995-unauthenticated-cross-site-scripting-xss-in-youtube-showcase-4-1-0-versions2026-10-29 https://bugrater.com/releases/cve-2026-61996-subscriber-sql-injection-in-mls-on-the-fly-1-8-1-5-versions2026-10-29 https://bugrater.com/releases/cve-2026-61997-unauthenticated-php-object-injection-in-legal-stone-1-2-11-versions2026-10-29 https://bugrater.com/releases/cve-2026-61998-unauthenticated-php-object-injection-in-le-truffe-1-1-7-versions2026-10-29 https://bugrater.com/releases/cve-2026-62001-unauthenticated-php-object-injection-in-marcell-1-2-14-versions2026-10-29 https://bugrater.com/releases/cve-2026-62002-unauthenticated-php-object-injection-in-meals-wheels-1-1-13-versions2026-10-29 https://bugrater.com/releases/cve-2026-62003-unauthenticated-php-object-injection-in-mission-1-22-versions2026-10-29 https://bugrater.com/releases/cve-2026-62004-unauthenticated-php-object-injection-in-motorix-1-11-versions2026-10-29 https://bugrater.com/releases/cve-2026-62005-unauthenticated-php-object-injection-in-muzicon-1-15-versions2026-10-29 https://bugrater.com/releases/cve-2026-62006-unauthenticated-php-object-injection-in-nuts-1-12-versions2026-10-29 https://bugrater.com/releases/cve-2026-62008-unauthenticated-php-object-injection-in-orpheus-1-8-versions2026-10-29 https://bugrater.com/releases/cve-2026-62009-unauthenticated-php-object-injection-in-filmax-1-1-11-versions2026-10-29 https://bugrater.com/releases/cve-2026-62010-unauthenticated-php-object-injection-in-avventure-1-1-12-versions2026-10-29 https://bugrater.com/releases/cve-2026-62011-unauthenticated-php-object-injection-in-bonbon-1-11-versions2026-10-29 https://bugrater.com/releases/cve-2026-62012-unauthenticated-php-object-injection-in-coinpress-1-0-15-versions2026-10-29 https://bugrater.com/releases/cve-2026-62013-unauthenticated-php-object-injection-in-edge-decor-2-9-versions2026-10-29 https://bugrater.com/releases/cve-2026-62014-unauthenticated-php-object-injection-in-emojination-1-0-12-versions2026-10-29 https://bugrater.com/releases/cve-2026-62015-unauthenticated-php-object-injection-in-gamezone-1-1-11-versions2026-10-29 https://bugrater.com/releases/cve-2026-62016-unauthenticated-php-object-injection-in-gamic-1-19-versions2026-10-29 https://bugrater.com/releases/cve-2026-62017-unauthenticated-php-object-injection-in-good-homes-1-3-13-versions2026-10-29 https://bugrater.com/releases/cve-2026-62018-unauthenticated-php-object-injection-in-gunslinger-1-11-versions2026-10-29 https://bugrater.com/releases/cve-2026-62131-unauthenticated-php-object-injection-in-zoho-flow-2-14-5-versions2026-10-29 https://bugrater.com/releases/cve-2026-66911-zimbra-is-vulnerable-to-stored-cross-site-scripting-xss-via-the-content-location-mime-header-in-email-attachments-due-to-lack-of-sanitization-of-the-content2026-10-29 https://bugrater.com/releases/cve-2026-66912-zimbra-is-vulnerable-to-stored-cross-site-scripting-xss-via-the-from-email-header-during-html-reply-composition-in-classic-ui-due-to-insufficient-sanitizatio2026-10-29 https://bugrater.com/releases/cve-2026-84294-improper-limitation-of-pathname-in-the-ad-hoc-transfer-component-of-progress-software-ws-ftp-server-versions-prior-to-2024-0-6-and-2025-0-3-on-windows-could-all2026-10-29 https://bugrater.com/releases/cve-2026-84295-improper-authentication-in-progress-software-ws-ftp-server-versions-prior-to-2024-0-6-and-2025-0-3-on-windows-could-allow-an-unauthenticated-remote-attacker-to2026-10-29 https://bugrater.com/releases/cve-2026-84296-multi-factor-authentication-bypass-vulnerability-in-ssh-component-in-progress-software-ws-ftp-server-versions-prior-to-2024-0-6-and-2025-0-3-on-windows-allows2026-10-29 https://bugrater.com/releases/cve-2026-90861-progress-software-ws-ftp-server-versions-prior-to-2024-0-7-and-2025-0-4-on-windows-may-expose-a-user-s-password-in-clear-text-to-another-administrator-who-coul2026-10-29 https://bugrater.com/releases/cve-2026-90862-improper-authentication-in-the-web-transfer-module-of-progress-software-ws-ftp-server-versions-prior-to-2024-0-7-and-2025-0-4-on-windows-could-allow-an-attacker2026-10-29 https://bugrater.com/releases/cve-2026-90863-missing-authorization-in-the-administrative-interface-of-progress-software-ws-ftp-server-versions-prior-to-2024-0-7-and-2025-0-4-on-windows-could-allow-a-delega2026-10-29 https://bugrater.com/releases/cve-2026-90865-an-os-command-injection-vulnerability-in-progress-software-ws-ftp-server-versions-prior-to-2024-0-7-and-2025-0-4-on-windows-could-allow-arbitrary-command-execut2026-10-29 https://bugrater.com/releases/cve-2026-90866-a-path-traversal-vulnerability-in-progress-software-ws-ftp-server-versions-prior-to-2024-0-7-and-2025-0-4-on-windows-could-allow-a-delegated-host-administrator2026-10-29 https://bugrater.com/releases/cve-2026-90868-an-os-command-injection-vulnerability-in-progress-software-ws-ftp-server-versions-prior-to-2024-0-7-and-2025-0-4-on-windows-could-allow-arbitrary-command-execut2026-10-29 https://bugrater.com/releases/cve-2026-90869-a-remote-attacker-who-knows-a-valid-account-s-enrolled-ssh-public-key-can-terminate-the-shared-ssh-service-in-progress-software-ws-ftp-server-versions-prior-to2026-10-29 https://bugrater.com/releases/cve-2026-90870-a-missing-release-of-backend-receiver-sessions-in-the-ad-hoc-transfer-component-of-progress-software-ws-ftp-server-versions-prior-to-2024-0-7-and-2025-0-4-on-wi2026-10-29 https://bugrater.com/releases/cve-2026-90871-improper-limitation-of-a-pathname-to-a-restricted-directory-in-progress-software-ws-ftp-server-versions-prior-to-2024-0-7-and-2025-0-4-on-windows-could-allow-an2026-10-29 https://bugrater.com/releases/cve-2026-93570-szafir-and-szafir-weryfikuj-ca-are-vulnerable-to-xml-external-entity-xxe-injection-when-a-user-signs-or-verify-a-crafted-xml-file-containing-a-doctype-with2026-10-29 https://bugrater.com/releases/cve-2026-93571-szafir-is-vulnerable-to-path-traversal-in-the-uploaded-filename-a-man-in-the-middle-attacker-who-can-reroute-update-request-to-their-server-can-prepare-arbitra2026-10-29 https://bugrater.com/releases/cve-2025-12523-broken-object-level-authorization-in-users-configuration-endpoint-allows-information-disclosure-to-authenticated-user2026-10-29 https://bugrater.com/releases/cve-2026-115805-improper-handling-of-local-filesystem-paths-in-rapid7-insight-agent-on-linux-and-macos-may-allow-authenticated-local-users-to-gain-elevated-privileges-exploita2026-10-29 https://bugrater.com/releases/cve-2026-11587-sql-injection-allowing-an-authenticated-user-with-access-to-acl-management-to-read-and-modify-the-centreon-database2026-10-29 https://bugrater.com/releases/cve-2026-102260-hashicorp-nomad-and-nomad-enterprise-are-vulnerable-to-cross-namespace-authorization-bypasses-in-several-read-only-api-endpoints-that-may-allow-an-authenticated2026-10-29 https://bugrater.com/releases/cve-2026-107347-hashicorp-nomad-and-nomad-enterprise-are-vulnerable-to-symlink-following-during-dispatch-payload-and-executor-log-writes-that-may-allow-a-malicious-workload-to2026-10-29 https://bugrater.com/releases/cve-2026-116566-socket-getaddrinfo-previously-accepted-null-bytes-within-host-and-port-parameters-which-can-cause-the-values-to-be-silently-truncated2026-10-29 https://bugrater.com/releases/cve-2026-119168-hashicorp-nomad-and-nomad-enterprise-are-vulnerable-to-symlink-following-during-same-client-allocation-data-migration-that-may-allow-a-malicious-workload-to-cha2026-10-29 https://bugrater.com/releases/cve-2026-41216-an-invalid-pointer-dereference-vulnerability-exists-in-the-vtkpngreader-executeinformation-functionality-of-vtk-9-6-a-specially-crafted-png-file-can-lead-to2026-10-29 https://bugrater.com/releases/cve-2026-42057-an-invalid-pointer-dereference-vulnerability-exists-in-the-vtkpngreader-vtkpngreaderupdate2-functionality-of-vtk-9-6-a-specially-crafted-png-file-can-lead-to2026-10-29 https://bugrater.com/releases/cve-2026-6877-servicenow-has-addressed-a-domain-separation-bypass-security-issue-that-was-identified-in-the-servicenow-sr-csm-task-plan-templates-store-application-this2026-10-29 https://bugrater.com/releases/cve-2026-8822-a-memory-corruption-vulnerability-exists-in-the-vtkdemreader-readprofiles-functionality-of-vtk-version-s-9-6-1-a-specially-crafted-usgs-dem-can-lead-to-a-b2026-10-29 https://bugrater.com/releases/cve-2026-8824-a-memory-corruption-vulnerability-exists-in-the-vtkbmpreader-executedatawithinformation-functionality-of-vtk-version-s-9-6-1-a-specially-crafted-bmp-file2026-10-29 https://bugrater.com/releases/cve-2026-9535-a-out-of-bounds-read-vulnerability-exists-in-the-vtkchacoreader-inputgraph2-functionality-of-vtk-version-s-9-6-1-a-specially-crafted-chaco-can-lead-to-an-o2026-10-29 https://bugrater.com/releases/cve-2026-9536-a-heap-based-buffer-overflow-vulnerability-exists-in-the-vtkwindbladereader-findvariableoffsets-functionality-of-vtk-version-s-9-6-1-a-specially-crafted-w2026-10-29 https://bugrater.com/releases/stable-channel-update-for-desktop-156-0-8078-79-802026-10-30 https://bugrater.com/releases/xcode-27-22026-10-30 https://bugrater.com/releases/macos-golden-gate-27-22026-10-30 https://bugrater.com/releases/macos-tahoe-26-7-22026-10-30 https://bugrater.com/releases/oauth-login-oauth-oidc-sso-critical-authentication-bypass-sa-contrib-2026-2842026-10-30 https://bugrater.com/releases/bulk-update-user-roles-moderately-critical-incorrect-authorization-sa-contrib-2026-2802026-10-30 https://bugrater.com/releases/s3-file-system-moderately-critical-access-bypass-sa-contrib-2026-2792026-10-30 https://bugrater.com/releases/fasttoggle-moderately-critical-cross-site-request-forgery-sa-contrib-2026-2832026-10-30 https://bugrater.com/releases/fasttoggle-moderately-critical-access-bypass-sa-contrib-2026-2822026-10-30 https://bugrater.com/releases/captcha-moderately-critical-session-replay-captcha-bypass-sa-contrib-2026-2812026-10-30 https://bugrater.com/releases/groupex-pro-daxko-integration-critical-unsupported-sa-contrib-2026-2782026-10-30 https://bugrater.com/releases/payumoney-for-drupal-commerce-critical-unsupported-sa-contrib-2026-2772026-10-30 https://bugrater.com/releases/heycyan-app-security-releases-october-20262026-10-30 https://bugrater.com/releases/hms-networks-security-releases-october-20262026-10-30 https://bugrater.com/releases/cve-2026-13303-hashicorp-boundary-and-boundary-enterprise-are-vulnerable-to-a-server-side-request-forgery-in-the-vault-credential-store-integration-that-may-allow-an-authentic2026-10-30 https://bugrater.com/releases/cve-2026-110133-a-flaw-was-found-in-ghostscript-when-processing-a-specially-crafted-truetype-font-or-document-embedding-one-an-accounting-error-during-font-rendering-can-bypa2026-10-30 https://bugrater.com/releases/cve-2026-118959-a-flaw-was-found-in-the-required-action-provider-mechanism-of-keycloak-the-issue-occurs-when-an-authorization-request-includes-the-kc-action-query-parameter-se2026-10-30 https://bugrater.com/releases/cve-2026-112922-a-flaw-was-found-in-ghostscript-a-remote-attacker-could-exploit-this-vulnerability-by-enticing-a-user-to-process-a-specially-crafted-pdf-or-postscript-document2026-10-30 https://bugrater.com/releases/cve-2026-118475-a-flaw-was-found-in-eye-of-gnome-when-parsing-a-specially-crafted-png-image-containing-malformed-color-profile-metadata-the-application-fails-to-validate-chun2026-10-30 https://bugrater.com/releases/cve-2026-91920-a-flaw-was-found-in-the-chunkreader-component-of-the-undertow-web-server-which-is-used-to-handle-chunked-transfer-encoding-in-http-requests-the-issue-occurs-b2026-10-30 https://bugrater.com/releases/cve-2026-107249-improperly-controlled-modification-of-dynamically-determined-object-attributes-vulnerability-in-drupal-block-ajax-allows-object-injection-this-issue-affects-bl2026-10-30 https://bugrater.com/releases/cve-2026-107250-vulnerability-in-drupal-eca-helper-this-issue-affects-eca-helper-versions2026-10-30 https://bugrater.com/releases/cve-2026-107251-incorrect-authorization-vulnerability-in-drupal-entity-reference-manager-merge-entities-allows-forceful-browsing-this-issue-affects-entity-reference-manager2026-10-30 https://bugrater.com/releases/cve-2026-107252-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-vulnerability-in-drupal-mathjax-latex-for-drupal-allows-cross-site-scripti2026-10-30 https://bugrater.com/releases/cve-2026-107253-vulnerability-in-drupal-orphans-media-this-issue-affects-orphans-media-versions2026-10-30 https://bugrater.com/releases/cve-2026-107254-authentication-bypass-using-an-alternate-path-or-channel-vulnerability-in-drupal-authenticator-login-plus-2fa-allows-authentication-bypass-this-issue-affects2026-10-30 https://bugrater.com/releases/cve-2026-107255-incorrect-authorization-vulnerability-in-drupal-restrict-route-by-ip-allows-forceful-browsing-this-issue-affects-restrict-route-by-ip-versions-from-0-0-0-to-12026-10-30 https://bugrater.com/releases/cve-2026-107256-improper-restriction-of-excessive-authentication-attempts-vulnerability-in-drupal-shield-allows-brute-force-this-issue-affects-shield-versions-from-0-0-0-to-12026-10-30 https://bugrater.com/releases/cve-2026-107257-incorrect-authorization-vulnerability-in-drupal-actstream-allows-forceful-browsing-this-issue-affects-actstream-versions-from-0-0-0-to-2-0-1-from-2-1-0-to-22026-10-30 https://bugrater.com/releases/cve-2026-107258-incorrect-authorization-vulnerability-in-drupal-inline-entity-form-dialog-allows-forceful-browsing-this-issue-affects-inline-entity-form-dialog-versions-from2026-10-30 https://bugrater.com/releases/cve-2026-107259-improper-neutralization-of-special-elements-used-in-a-template-engine-vulnerability-in-drupal-linked-field-allows-code-injection-this-issue-affects-linked-fiel2026-10-30 https://bugrater.com/releases/cve-2026-107260-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-vulnerability-in-drupal-sector-distribution-allows-stored-xss-this-issue-a2026-10-30 https://bugrater.com/releases/cve-2026-107261-authentication-bypass-using-an-alternate-path-or-channel-vulnerability-in-drupal-authenticator-login-plus-2fa-allows-authentication-bypass-this-issue-affects2026-10-30 https://bugrater.com/releases/cve-2026-107262-cross-site-request-forgery-csrf-vulnerability-in-drupal-advanced-filesystem-allows-cross-site-request-forgery-this-issue-affects-advanced-filesystem-versions2026-10-30 https://bugrater.com/releases/cve-2026-107263-incorrect-authorization-vulnerability-in-drupal-gutenberg-allows-forceful-browsing-this-issue-affects-gutenberg-versions-from-0-0-0-to-2-15-0-from-3-0-0-to-32026-10-30 https://bugrater.com/releases/cve-2026-107264-improper-neutralization-of-special-elements-used-in-a-template-engine-vulnerability-in-drupal-inline-formatter-field-allows-code-injection-this-issue-affects-i2026-10-30 https://bugrater.com/releases/cve-2026-107265-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-vulnerability-in-drupal-leaflet-allows-stored-xss-this-issue-affects-leafl2026-10-30 https://bugrater.com/releases/cve-2026-107266-missing-authorization-vulnerability-in-drupal-views-share-allows-forceful-browsing-this-issue-affects-views-share-versions-from-0-0-0-to-2-0-12026-10-30 https://bugrater.com/releases/cve-2026-107267-missing-authorization-vulnerability-in-drupal-dkan-allows-forceful-browsing-this-issue-affects-dkan-versions-from-0-0-0-to-4-0-4-from-4-1-0-to-4-1-52026-10-30 https://bugrater.com/releases/cve-2026-107268-insertion-of-sensitive-information-into-sent-data-vulnerability-in-drupal-two-factor-authentication-tfa-passwordless-login-allows-forceful-browsing-this-is2026-10-30 https://bugrater.com/releases/cve-2026-107306-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-vulnerability-in-drupal-menu-link-attributes-allows-stored-xss-this-issue2026-10-30 https://bugrater.com/releases/cve-2026-107307-incorrect-authorization-vulnerability-in-drupal-smartlinker-ai-allows-forceful-browsing-this-issue-affects-smartlinker-ai-versions-from-0-0-0-to-1-0-32026-10-30 https://bugrater.com/releases/cve-2026-107308-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-vulnerability-in-drupal-country-allows-cross-site-scripting-xss-this-iss2026-10-30 https://bugrater.com/releases/cve-2026-107309-missing-authorization-vulnerability-in-drupal-easy-breadcrumb-allows-forceful-browsing-this-issue-affects-easy-breadcrumb-versions-from-0-0-0-to-2-0-112026-10-30 https://bugrater.com/releases/cve-2026-107310-server-side-request-forgery-ssrf-vulnerability-in-drupal-freelinking-allows-server-side-request-forgery-this-issue-affects-freelinking-versions-from-0-0-0-t2026-10-30 https://bugrater.com/releases/cve-2026-107311-improper-check-for-unusual-or-exceptional-conditions-vulnerability-in-drupal-permissions-by-term-allows-forceful-browsing-this-issue-affects-permissions-by-ter2026-10-30 https://bugrater.com/releases/cve-2026-107312-allocation-of-resources-without-limits-or-throttling-vulnerability-in-drupal-examples-for-developers-allows-excessive-allocation-this-issue-affects-examples-fo2026-10-30 https://bugrater.com/releases/cve-2026-108097-use-of-externally-controlled-input-to-select-classes-or-code-unsafe-reflection-vulnerability-in-drupal-drupal-core-allows-reflection-injection-this-issue-a2026-10-30 https://bugrater.com/releases/cve-2026-108099-use-of-externally-controlled-input-to-select-classes-or-code-unsafe-reflection-vulnerability-in-drupal-entity-list-allows-reflection-injection-this-issue2026-10-30 https://bugrater.com/releases/cve-2026-108514-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-vulnerability-in-drupal-drupal-core-allows-cross-site-scripting-xss-this2026-10-30 https://bugrater.com/releases/cve-2026-108515-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-vulnerability-in-drupal-drupal-core-allows-cross-site-scripting-xss-this2026-10-30 https://bugrater.com/releases/cve-2026-110738-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-vulnerability-in-drupal-gin-admin-theme-allows-cross-site-scripting-xss2026-10-30 https://bugrater.com/releases/cve-2026-114523-improper-neutralization-of-special-elements-used-in-an-os-command-os-command-injection-vulnerability-in-drupal-ffmpeg-image-toolkit-allows-os-command-inject2026-10-30 https://bugrater.com/releases/cve-2026-114524-privilege-defined-with-unsafe-actions-vulnerability-in-drupal-custom-formatters-allows-privilege-escalation-this-issue-affects-custom-formatters-versions-from2026-10-30 https://bugrater.com/releases/cve-2026-114525-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-vulnerability-in-drupal-abc-allows-stored-xss-this-issue-affects-abc-versi2026-10-30 https://bugrater.com/releases/cve-2026-114526-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-vulnerability-in-drupal-black-hole-allows-stored-xss-this-issue-affects-bl2026-10-30 https://bugrater.com/releases/cve-2026-114527-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-vulnerability-in-drupal-ui-icons-allows-cross-site-scripting-xss-this-is2026-10-30 https://bugrater.com/releases/cve-2026-114528-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-vulnerability-in-drupal-zero-point-allows-stored-xss-this-issue-affects-ze2026-10-30 https://bugrater.com/releases/cve-2026-114529-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-vulnerability-in-drupal-csv-field-allows-stored-xss-this-issue-affects-csv2026-10-30 https://bugrater.com/releases/cve-2026-114530-incorrect-authorization-vulnerability-in-drupal-dopup-allows-forceful-browsing-this-issue-affects-dopup-versions-from-0-0-0-to-1-0-72026-10-30 https://bugrater.com/releases/cve-2026-114531-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-vulnerability-in-drupal-swiper-formatter-allows-stored-xss-this-issue-affe2026-10-30 https://bugrater.com/releases/cve-2026-114532-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-vulnerability-in-drupal-ui-icons-allows-cross-site-scripting-xss-this-is2026-10-30 https://bugrater.com/releases/cve-2026-114533-missing-authorization-vulnerability-in-drupal-gora-transparency-theme-allows-forceful-browsing-this-issue-affects-gora-transparency-theme-versions-from-0-02026-10-30 https://bugrater.com/releases/cve-2026-114534-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-vulnerability-in-drupal-block-attributes-allows-stored-xss-this-issue-affe2026-10-30 https://bugrater.com/releases/cve-2026-114535-missing-authorization-vulnerability-in-drupal-swiper-formatter-allows-forceful-browsing-this-issue-affects-swiper-formatter-versions-from-0-0-0-to-2-1-2-from2026-10-30 https://bugrater.com/releases/cve-2026-114536-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-vulnerability-in-drupal-uswds-paragraph-components-allows-stored-xss-this2026-10-30 https://bugrater.com/releases/cve-2026-114537-incorrect-authorization-vulnerability-in-drupal-view-unpublished-allows-forceful-browsing-this-issue-affects-view-unpublished-versions-from-0-0-0-to-1-5-02026-10-30 https://bugrater.com/releases/cve-2026-114538-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-vulnerability-in-drupal-bootstrap-allows-cross-site-scripting-xss-this-i2026-10-30 https://bugrater.com/releases/cve-2026-114539-authentication-bypass-using-an-alternate-path-or-channel-vulnerability-in-drupal-doccheck-basic-allows-authentication-bypass-this-issue-affects-doccheck-basic2026-10-30 https://bugrater.com/releases/cve-2026-114540-incorrect-authorization-vulnerability-in-drupal-domain-allows-forceful-browsing-this-issue-affects-domain-versions-from-3-0-0-to-3-0-22026-10-30 https://bugrater.com/releases/cve-2026-114541-cross-site-request-forgery-csrf-vulnerability-in-drupal-frontend-editing-allows-cross-site-request-forgery-this-issue-affects-frontend-editing-versions-from2026-10-30 https://bugrater.com/releases/cve-2026-114542-use-of-web-browser-cache-containing-sensitive-information-vulnerability-in-drupal-simple-oauth-oauth2-openid-connect-allows-exploiting-incorrectly-configure2026-10-30 https://bugrater.com/releases/cve-2026-114543-incorrect-authorization-vulnerability-in-drupal-simple-user-management-allows-forceful-browsing-this-issue-affects-simple-user-management-versions-from-0-0-02026-10-30 https://bugrater.com/releases/cve-2026-114544-incorrect-authorization-vulnerability-in-drupal-media-bulk-upload-allows-forceful-browsing-this-issue-affects-media-bulk-upload-versions-from-0-0-0-to-3-0-62026-10-30 https://bugrater.com/releases/cve-2026-114545-incorrect-authorization-vulnerability-in-drupal-fullcalendar-view-allows-forceful-browsing-this-issue-affects-fullcalendar-view-versions-from-0-0-0-to-5-2-62026-10-30 https://bugrater.com/releases/cve-2026-114546-use-of-web-browser-cache-containing-sensitive-information-vulnerability-in-drupal-media-alias-display-allows-exploiting-incorrectly-configured-access-control-se2026-10-30 https://bugrater.com/releases/cve-2026-114547-missing-authorization-vulnerability-in-drupal-tinypng-allows-forceful-browsing-this-issue-affects-tinypng-versions-from-0-0-0-to-2-0-22026-10-30 https://bugrater.com/releases/cve-2026-114548-use-of-web-browser-cache-containing-sensitive-information-vulnerability-in-drupal-imageapi-optimize-webp-allows-exploiting-incorrectly-configured-access-control2026-10-30 https://bugrater.com/releases/cve-2026-114553-incorrect-authorization-vulnerability-in-drupal-frontend-editing-allows-forceful-browsing-this-issue-affects-frontend-editing-versions-from-0-0-0-to-1-9-32026-10-30 https://bugrater.com/releases/cve-2026-114554-incorrect-authorization-vulnerability-in-drupal-ai-file-to-text-allows-forceful-browsing-this-issue-affects-ai-file-to-text-versions-from-0-0-0-to-1-0-12026-10-30 https://bugrater.com/releases/cve-2026-114555-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-vulnerability-in-drupal-data-field-allows-stored-xss-this-issue-affects-da2026-10-30 https://bugrater.com/releases/cve-2026-114571-incorrect-authorization-vulnerability-in-drupal-rabbit-hole-allows-forceful-browsing-this-issue-affects-rabbit-hole-versions-from-0-0-0-to-1-3-02026-10-30 https://bugrater.com/releases/cve-2026-114572-authentication-bypass-using-an-alternate-path-or-channel-vulnerability-in-drupal-domain-login-restrict-allows-authentication-bypass-this-issue-affects-domain-l2026-10-30 https://bugrater.com/releases/cve-2026-114573-improperly-controlled-modification-of-dynamically-determined-object-attributes-vulnerability-in-drupal-monster-menus-allows-object-injection-this-issue-affects2026-10-30 https://bugrater.com/releases/cve-2026-118539-missing-authorization-vulnerability-in-drupal-commerce-core-allows-forceful-browsing-this-issue-affects-commerce-core-versions-from-0-0-0-to-2-41-from-3-0-02026-10-30 https://bugrater.com/releases/cve-2026-118540-incorrect-authorization-vulnerability-in-drupal-commerce-core-allows-forceful-browsing-this-issue-affects-commerce-core-versions-from-0-0-0-to-2-41-from-3-02026-10-30 https://bugrater.com/releases/cve-2026-118541-incorrect-authorization-vulnerability-in-drupal-commerce-core-allows-forceful-browsing-this-issue-affects-commerce-core-versions-from-0-0-0-to-2-41-0-from-32026-10-30 https://bugrater.com/releases/cve-2026-118542-incorrect-authorization-vulnerability-in-drupal-commerce-core-allows-forceful-browsing-this-issue-affects-commerce-core-versions-from-0-0-0-to-2-41-0-from-32026-10-30 https://bugrater.com/releases/cve-2026-118543-cross-site-request-forgery-csrf-vulnerability-in-drupal-commerce-core-allows-cross-site-request-forgery-this-issue-affects-commerce-core-versions-from-0-0-02026-10-30 https://bugrater.com/releases/cve-2026-118544-exposure-of-sensitive-information-through-data-queries-vulnerability-in-drupal-commerce-core-allows-forceful-browsing-this-issue-affects-commerce-core-versions2026-10-30 https://bugrater.com/releases/cve-2026-118545-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-vulnerability-in-drupal-ai-artificial-intelligence-allows-cross-site-scri2026-10-30 https://bugrater.com/releases/cve-2026-118546-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-vulnerability-in-drupal-ai-artificial-intelligence-allows-cross-site-scri2026-10-30 https://bugrater.com/releases/cve-2026-118548-incorrect-authorization-vulnerability-in-drupal-ai-artificial-intelligence-allows-resource-injection-this-issue-affects-ai-artificial-intelligence-versions2026-10-30 https://bugrater.com/releases/cve-2026-118549-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-vulnerability-in-drupal-ai-artificial-intelligence-allows-cross-site-scri2026-10-30 https://bugrater.com/releases/cve-2026-118550-use-of-web-browser-cache-containing-sensitive-information-vulnerability-in-drupal-ai-artificial-intelligence-allows-exploiting-incorrectly-configured-access-c2026-10-30 https://bugrater.com/releases/cve-2026-118551-insecure-storage-of-sensitive-information-vulnerability-in-drupal-ai-artificial-intelligence-allows-retrieve-embedded-sensitive-data-this-issue-affects-ai-a2026-10-30 https://bugrater.com/releases/cve-2026-118552-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-vulnerability-in-drupal-ai-artificial-intelligence-allows-cross-site-scri2026-10-30 https://bugrater.com/releases/cve-2026-118553-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-vulnerability-in-drupal-ai-artificial-intelligence-allows-stored-xss-thi2026-10-30 https://bugrater.com/releases/cve-2026-118554-authentication-bypass-using-an-alternate-path-or-channel-vulnerability-in-drupal-openid-connect-client-allows-authentication-bypass-this-issue-affects-openid-c2026-10-30 https://bugrater.com/releases/cve-2026-118555-incorrect-authorization-vulnerability-in-drupal-commerce-license-allows-forceful-browsing-this-issue-affects-commerce-license-versions-from-0-0-0-to-3-1-12026-10-30 https://bugrater.com/releases/cve-2026-118556-incorrect-authorization-vulnerability-in-drupal-commerce-shipping-allows-forceful-browsing-this-issue-affects-commerce-shipping-versions-from-0-0-0-to-2-16-02026-10-30 https://bugrater.com/releases/cve-2026-118557-incorrect-authorization-vulnerability-in-drupal-commerce-shipping-allows-forceful-browsing-this-issue-affects-commerce-shipping-versions-from-0-0-0-to-2-16-02026-10-30 https://bugrater.com/releases/cve-2026-118558-cross-site-request-forgery-csrf-vulnerability-in-drupal-commerce-stripe-allows-cross-site-request-forgery-this-issue-affects-commerce-stripe-versions-from-22026-10-30 https://bugrater.com/releases/cve-2026-118559-improper-verification-of-cryptographic-signature-vulnerability-in-drupal-commerce-stripe-allows-signature-spoof-this-issue-affects-commerce-stripe-versions-fr2026-10-30 https://bugrater.com/releases/cve-2026-118560-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-vulnerability-in-drupal-commerce-stripe-allows-cross-site-scripting-xss2026-10-30 https://bugrater.com/releases/cve-2026-118561-external-control-of-file-name-or-path-vulnerability-in-drupal-single-content-sync-allows-path-traversal-this-issue-affects-single-content-sync-versions-from-02026-10-30 https://bugrater.com/releases/cve-2026-118562-deserialization-of-untrusted-data-vulnerability-in-drupal-single-content-sync-allows-object-injection-this-issue-affects-single-content-sync-versions-from-0-02026-10-30 https://bugrater.com/releases/cve-2026-118563-vulnerability-in-drupal-cacheflush-this-issue-affects-cacheflush-versions2026-10-30 https://bugrater.com/releases/cve-2026-118564-vulnerability-in-drupal-payumoney-for-drupal-commerce-this-issue-affects-payumoney-for-drupal-commerce-versions2026-10-30 https://bugrater.com/releases/cve-2026-118565-vulnerability-in-drupal-groupex-pro-daxko-integration-this-issue-affects-groupex-pro-daxko-integration-versions2026-10-30 https://bugrater.com/releases/cve-2026-118567-incorrect-authorization-vulnerability-in-drupal-bulk-update-user-roles-allows-forceful-browsing-this-issue-affects-bulk-update-user-roles-versions-from-0-0-02026-10-30 https://bugrater.com/releases/cve-2026-118568-insecure-storage-of-sensitive-information-vulnerability-in-drupal-content-sync-content-sync-io-allows-retrieve-embedded-sensitive-data-this-issue-affects-con2026-10-30 https://bugrater.com/releases/cve-2026-118569-incorrect-authorization-vulnerability-in-drupal-fasttoggle-allows-forceful-browsing-this-issue-affects-fasttoggle-versions-from-0-0-0-to-4-1-12026-10-30 https://bugrater.com/releases/cve-2026-118570-cross-site-request-forgery-csrf-vulnerability-in-drupal-fasttoggle-allows-cross-site-request-forgery-this-issue-affects-fasttoggle-versions-from-0-0-0-to-42026-10-30 https://bugrater.com/releases/cve-2026-118571-use-of-web-browser-cache-containing-sensitive-information-vulnerability-in-drupal-media-alias-display-allows-exploiting-incorrectly-configured-access-control-se2026-10-30 https://bugrater.com/releases/cve-2026-118572-authentication-bypass-using-an-alternate-path-or-channel-vulnerability-in-drupal-oauth-login-oauth-oidc-sso-allows-authentication-bypass-this-issue-affects-o2026-10-30 https://bugrater.com/releases/cve-2026-118573-missing-authorization-vulnerability-in-drupal-oauth2-token-manager-allows-forceful-browsing-this-issue-affects-oauth2-token-manager-versions-from-0-0-0-to-1-22026-10-30 https://bugrater.com/releases/cve-2026-118574-incorrect-permission-assignment-for-critical-resource-vulnerability-in-drupal-s3-file-system-allows-exploiting-incorrectly-configured-access-control-security-le2026-10-30 https://bugrater.com/releases/cve-2026-118575-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-vulnerability-in-drupal-signature-pad-widget-allows-stored-xss-this-issue2026-10-30 https://bugrater.com/releases/cve-2026-118576-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-vulnerability-in-drupal-stage-file-proxy-allows-cross-site-scripting-xss2026-10-30 https://bugrater.com/releases/cve-2026-118582-authentication-bypass-using-an-alternate-path-or-channel-vulnerability-in-drupal-captcha-allows-functionality-bypass-this-issue-affects-captcha-versions-from2026-10-30 https://bugrater.com/releases/cve-2026-118583-incorrect-authorization-vulnerability-in-drupal-field-permissions-allows-forceful-browsing-this-issue-affects-field-permissions-versions-from-0-0-0-to-1-6-02026-10-30 https://bugrater.com/releases/cve-2026-118584-incorrect-authorization-vulnerability-in-drupal-field-permissions-allows-forceful-browsing-this-issue-affects-field-permissions-versions-from-0-0-0-to-1-6-02026-10-30 https://bugrater.com/releases/cve-2026-96389-missing-authorization-vulnerability-in-drupal-xray-audit-allows-forceful-browsing-this-issue-affects-xray-audit-versions-from-0-0-0-to-1-6-3-from-2-0-0-to-22026-10-30 https://bugrater.com/releases/cve-2026-103963-a-flaw-was-found-in-glib-networking-when-establishing-connections-using-transport-layer-security-tls-version-1-3-the-client-side-session-cache-does-not-limi2026-10-30 https://bugrater.com/releases/cve-2026-104368-the-export-and-import-users-and-customers-plugin-for-wordpress-is-vulnerable-to-privilege-escalation-in-all-versions-up-to-and-including-2-7-5-via-the-plugin2026-10-30 https://bugrater.com/releases/cve-2026-5461-the-forminator-forms-plugin-for-wordpress-is-vulnerable-to-limited-file-deletion-in-all-versions-up-to-and-including-1-55-0-2-this-is-due-to-the-plugin-accep2026-10-30 https://bugrater.com/releases/cve-2026-114422-the-enable-media-replace-wordpress-plugin-before-4-2-3-does-not-restrict-the-classes-allowed-when-deserializing-stored-metadata-during-its-media-replace-and-upd2026-10-30 https://bugrater.com/releases/cve-2026-114443-the-security-plugin-firewall-malware-scanner-with-auto-removal-wordpress-plugin-before-2-191-does-not-verify-the-account-password-before-accepting-an-authent2026-10-30 https://bugrater.com/releases/cve-2026-114444-the-security-plugin-firewall-malware-scanner-with-auto-removal-wordpress-plugin-before-2-191-does-not-restrict-its-file-system-watcher-file-viewer-to-super-a2026-10-30 https://bugrater.com/releases/cve-2026-115277-the-user-frontend-wordpress-plugin-before-4-3-14-does-not-sanitise-and-escape-some-user-supplied-values-before-reflecting-them-into-html-attributes-in-a-public2026-10-30 https://bugrater.com/releases/cve-2026-117571-the-wp-visitor-statistics-real-time-traffic-wordpress-plugin-before-8-8-does-not-sanitize-and-escape-tracking-data-derived-from-public-visitor-requests-before2026-10-30 https://bugrater.com/releases/cve-2026-117572-the-wp-visitor-statistics-real-time-traffic-wordpress-plugin-before-8-8-does-not-sanitize-and-escape-a-parameter-before-using-it-in-a-sql-statement-allowing2026-10-30 https://bugrater.com/releases/cve-2026-118071-the-joinchat-wordpress-plugin-before-6-4-2-does-not-escape-the-message-of-its-button-block-before-outputting-it-in-an-html-attribute-on-the-front-end-which-co2026-10-30 https://bugrater.com/releases/cve-2026-118072-the-fraud-prevention-for-woocommerce-and-edd-wordpress-plugin-before-2-3-6-does-not-check-that-a-user-is-allowed-to-manage-orders-before-letting-them-add-an-ord2026-10-30 https://bugrater.com/releases/cve-2026-118100-the-buddyforms-wordpress-plugin-before-2-10-3-does-not-check-that-the-requester-is-allowed-to-manage-a-form-before-exporting-its-configuration-allowing-unauthe2026-10-30 https://bugrater.com/releases/cve-2026-118101-the-buddyforms-wordpress-plugin-before-2-10-1-does-not-verify-that-a-user-editing-an-existing-entry-is-the-author-of-the-target-post-allowing-users-who-have-be2026-10-30 https://bugrater.com/releases/cve-2026-118165-the-firelight-lightbox-wordpress-plugin-before-2-3-23-does-not-escape-the-url-of-links-it-opens-in-its-classic-lightbox-before-inserting-it-into-the-page-as-htm2026-10-30 https://bugrater.com/releases/cve-2026-118194-the-page-and-post-restriction-plugin-for-wordpress-is-vulnerable-to-authentication-bypass-in-all-versions-up-to-and-including-1-6-1-this-is-due-to-the-papr-r2026-10-30 https://bugrater.com/releases/cve-2026-118500-the-cool-formkit-lite-advanced-form-builder-for-elementor-plugin-for-wordpress-is-vulnerable-to-stored-dom-based-cross-site-scripting-via-the-elementor-data2026-10-30 https://bugrater.com/releases/cve-2026-118634-the-events-made-easy-plugin-for-wordpress-is-vulnerable-to-stored-cross-site-scripting-via-the-width-parameter-in-all-versions-up-to-and-including-3-3-1-due2026-10-30 https://bugrater.com/releases/cve-2026-118698-the-joomsport-for-sports-team-league-football-hockey-more-plugin-for-wordpress-is-vulnerable-to-generic-sql-injection-via-the-pgroup-parameter-in-all2026-10-30 https://bugrater.com/releases/cve-2026-119059-the-content-egg-plugin-for-wordpress-is-vulnerable-to-unauthorized-modification-of-data-due-to-a-missing-per-post-capability-check-on-the-ajaxupdateproducts-f2026-10-30 https://bugrater.com/releases/cve-2026-119087-the-content-egg-affiliate-product-importer-price-comparison-plugin-for-wordpress-is-vulnerable-to-authorization-bypass-in-all-versions-up-to-and-including2026-10-30 https://bugrater.com/releases/cve-2026-103039-the-gravity-forms-plugin-for-wordpress-is-vulnerable-to-php-object-injection-in-all-versions-up-to-and-including-3-1-2-via-a-post-custom-field-whose-input-typ2026-10-30 https://bugrater.com/releases/cve-2026-110732-the-ai-engine-the-chatbot-ai-framework-mcp-for-wordpress-plugin-for-wordpress-is-vulnerable-to-missing-authorization-in-all-versions-up-to-and-including2026-10-30 https://bugrater.com/releases/cve-2026-116622-the-food-store-online-food-delivery-pickup-plugin-for-wordpress-is-vulnerable-to-stored-cross-site-scripting-via-the-service-time-parameter-in-all-version2026-10-30 https://bugrater.com/releases/cve-2026-89435-the-formidable-forms-wordpress-form-builder-for-contact-forms-calculators-quizzes-more-plugin-for-wordpress-is-vulnerable-to-arbitrary-plugin-installation2026-10-30 https://bugrater.com/releases/cve-2026-90437-the-gravity-forms-plugin-for-wordpress-is-vulnerable-to-stored-cross-site-scripting-via-post-excerpt-post-custom-field-rich-text-paragraph-field-values-in-a2026-10-30 https://bugrater.com/releases/cve-2026-97645-the-gravity-forms-plugin-for-wordpress-is-vulnerable-to-stored-cross-site-scripting-via-list-field-in-all-versions-up-to-and-including-3-1-2-due-to-insufficie2026-10-30 https://bugrater.com/releases/cve-2026-114690-a-flaw-was-found-in-gcc-an-out-of-bounds-memory-access-vulnerability-exists-in-the-libstdc-parallel-search-implementation-due-to-an-undersized-internal-buffe2026-10-30 https://bugrater.com/releases/cve-2026-114691-a-flaw-was-found-in-the-libstdc-component-of-gcc-an-attacker-who-can-provide-an-excessively-large-element-count-to-a-boolean-vector-std-vector-bool-const2026-10-30 https://bugrater.com/releases/cve-2026-109821-improper-validation-of-specified-quantity-in-input-vulnerability-in-the-elixir-standard-library-s-uri-module-allows-an-attacker-who-supplies-a-url-to-cause-a-de2026-10-30 https://bugrater.com/releases/cve-2026-115274-improper-validation-of-specified-quantity-in-input-vulnerability-in-the-elixir-standard-library-s-json-module-allows-an-unauthenticated-attacker-who-supplies-a2026-10-30 https://bugrater.com/releases/cve-2026-59385-a-user-with-spacedeveloper-privileges-could-modify-the-url-of-a-space-scoped-broker-without-altering-its-credentials-enabling-extraction-of-existing-broker-cre2026-10-30 https://bugrater.com/releases/cve-2026-59386-a-spacesupporter-could-improperly-modify-an-application-s-start-command-and-buildpack-actions-requiring-spacedeveloper-privileges-this-privilege-escalation-ena2026-10-30 https://bugrater.com/releases/cve-2026-59387-the-nginx-routing-configuration-for-cloud-controller-blocks-unauthenticated-access-to-internal-v4-and-internal-v5-endpoints-but-omits-an-equivalent-deny-rul2026-10-30 https://bugrater.com/releases/cve-2026-59388-cloud-controller-capi-leaks-sensitive-data-into-audit-logs-in-multiple-instances-custom-buildpack-credentials-are-exposed-in-audit-events-for-app-manifest-ap2026-10-30 https://bugrater.com/releases/cve-2026-64618-improper-neutralization-of-special-elements-used-in-an-sql-command-sql-injection-vulnerability-exists-in-apache-fineract-through-version-1-15-0-the-vulne2026-10-30 https://bugrater.com/releases/cve-2026-65874-this-issue-affects-apache-fineract-versions-up-to-and-including-1-15-0-the-center-read-endpoint-get-api-v1-centers-and-the-datatable-entry-read-endpoints-g2026-10-30 https://bugrater.com/releases/cve-2026-97209-insecure-temporary-file-vulnerability-in-mix-deps-partition-in-elixir-allows-a-local-user-to-execute-code-as-another-user-via-a-swapped-partition-config-file-p2026-10-30 https://bugrater.com/releases/cve-2026-14467-an-information-disclosure-vulnerability-in-the-forocoches-comments-editor-that-allows-an-attacker-to-obtain-unauthorised-user-information-by-inserting-an-image2026-10-30 https://bugrater.com/releases/cve-2026-116366-an-issue-has-been-discovered-in-clickhouse-server-that-under-certain-conditions-could-allow-an-unauthenticated-user-with-network-access-to-execute-arbitrary-c2026-10-30 https://bugrater.com/releases/cve-2026-22105-delta-ufc500-charging-stations-derive-the-default-credentials-of-the-service-account-from-character-positions-of-the-device-serial-number-an-unauthenticated-at2026-10-30 https://bugrater.com/releases/cve-2026-22109-the-shipped-webui-template-database-retains-the-factory-default-passwords-for-all-five-account-types-in-cleartext-defaults-are-identical-across-devices-and-wer2026-10-30 https://bugrater.com/releases/cve-2026-22110-the-web-server-does-not-check-authentication-on-post-or-put-an-unauthenticated-attacker-can-reboot-the-charger-by-brute-forcing-the-configid-they-can-also-se2026-10-30 https://bugrater.com/releases/cve-2026-22114-http-basic-auth-enforces-no-retry-limit-or-backoff-combined-with-the-default-service-password-the-keyspace-is-exhaustible2026-10-30 https://bugrater.com/releases/cve-2026-85268-a-cross-site-scripting-xss-cwe-79-vulnerability-in-the-auth-handler-in-google-cloud-identity-platform-and-firebase-authentication-versions-prior-to-2026-082026-10-30 https://bugrater.com/releases/ays-pro-security-releases-october-2026-22026-10-30 https://bugrater.com/releases/wpdeveloper-security-releases-october-20262026-10-30 https://bugrater.com/releases/zammad-gmbh-security-releases-september-20262026-10-30 https://bugrater.com/releases/evbee-security-releases-september-20262026-10-30 https://bugrater.com/releases/cve-2025-68391-arketeam-protectel-modules-protectelmaj-and-bdf-are-vulnerable-to-arbitrary-file-upload-any-user-is-able-to-upload-arbitrary-file-and-override-existing-files-i2026-10-30 https://bugrater.com/releases/cve-2025-68392-arketeam-protectel-modules-protectelmaj-and-bdf-allow-low-privileged-users-to-use-some-of-the-functionalities-reserved-for-admin-users-by-forging-direct-request2026-10-30 https://bugrater.com/releases/cve-2025-68393-arketeam-protectel-modules-protectelmaj-and-bdf-are-vulnerable-to-sql-injection-vulnerability-improper-neutralization-of-input-provided-by-a-low-privileged-use2026-10-30 https://bugrater.com/releases/cve-2025-68394-arketeam-protectel-modules-protectelmaj-and-bdf-are-vulnerable-to-sql-injection-vulnerability-improper-neutralization-of-input-provided-by-a-low-privileged-use2026-10-30 https://bugrater.com/releases/cve-2025-68395-arketeam-protectel-modules-protectelmaj-and-bdf-contain-a-note-editor-module-vulnerable-to-stored-xss-a-low-privileged-attacker-can-inject-arbitrary-html-and2026-10-30 https://bugrater.com/releases/cve-2026-101210-dell-openmanage-enterprise-versions-prior-to-4-8-0-contains-an-improper-neutralization-of-special-elements-used-in-an-os-command-os-command-injection-vuln2026-10-30 https://bugrater.com/releases/cve-2026-101213-dell-openmanage-enterprise-versions-prior-to-4-8-0-contains-an-improper-privilege-management-vulnerability-a-low-privileged-attacker-with-local-access-could2026-10-30 https://bugrater.com/releases/cve-2026-101214-dell-openmanage-enterprise-versions-prior-to-4-8-0-contains-an-improper-neutralization-of-special-elements-used-in-an-os-command-os-command-injection-vuln2026-10-30 https://bugrater.com/releases/cve-2026-110971-use-of-a-weak-password-encoding-algorithm-in-p-atnik-software-allows-a-user-who-obtains-encoded-password-to-easily-decode-it-this-issue-was-fixed-in-metric2026-10-30 https://bugrater.com/releases/cve-2026-110972-p-atnik-performs-client-side-authentication-an-attacker-with-access-to-any-application-instance-connected-to-the-backend-server-can-bypass-the-login-verificati2026-10-30 https://bugrater.com/releases/cve-2026-111504-dell-openmanage-enterprise-versions-prior-to-4-8-0-contains-an-improper-neutralization-of-argument-delimiters-in-a-command-argument-injection-vulnerabilit2026-10-30 https://bugrater.com/releases/cve-2026-111505-dell-openmanage-enterprise-versions-prior-to-4-8-0-contains-an-improper-neutralization-of-special-elements-used-in-an-os-command-os-command-injection-vuln2026-10-30 https://bugrater.com/releases/cve-2026-119146-proftpd-before-1-3-9e-and-1-3-10rc5-contains-a-buffer-overflow-vulnerability-in-the-mod-rewrite-int-utf8trans-rewritemap-that-allows-remote-attackers-to-overwri2026-10-30 https://bugrater.com/releases/cve-2026-119147-proftpd-before-1-3-9e-and-1-3-10rc5-contains-an-authorization-bypass-in-the-mod-sftp-copy-file-extension-handler-that-skips-limit-write-checks-for-new-destinati2026-10-30 https://bugrater.com/releases/cve-2026-119364-proftpd-through-1-3-9e-and-1-3-10rc1-through-1-3-10rc4-contains-a-link-following-vulnerability-in-mod-copy-that-allows-authenticated-ftp-users-to-bypass-limit-w2026-10-30 https://bugrater.com/releases/cve-2026-119371-sqlite-before-3-54-0-contains-a-stack-exhaustion-vulnerability-that-allows-attackers-to-bypass-the-sqlite-limit-expr-depth-nesting-limit-because-common-table-ex2026-10-30 https://bugrater.com/releases/cve-2026-119372-sqlite-before-3-54-0-built-with-fts3-fts4-and-sqlite-enable-fts3-parenthesis-contains-a-use-after-free-vulnerability-in-fts3bestsnippet-caused-by-dangling-cac2026-10-30 https://bugrater.com/releases/cve-2026-119373-sqlite-before-3-54-0-built-with-fts5-contains-a-heap-buffer-overflow-in-fts5mergerowidlists-that-undersizes-the-output-buffer-when-merging-detail-none-prefix2026-10-30 https://bugrater.com/releases/cve-2026-119374-sqlite-before-3-54-0-built-with-fts5-contains-a-heap-buffer-overflow-in-fts5dosecuredelete-that-allows-attackers-to-write-past-the-leaf-page-buffer-via-crafte2026-10-30 https://bugrater.com/releases/cve-2026-119375-sqlite-before-3-54-0-contains-an-information-disclosure-vulnerability-that-allows-attackers-to-read-uninitialized-page-cache-memory-by-supplying-a-wal-file-with2026-10-30 https://bugrater.com/releases/cve-2026-119376-sqlite-before-3-54-0-contains-a-stack-exhaustion-vulnerability-that-allows-attackers-to-bypass-the-sqlite-limit-expr-depth-limit-by-chaining-collate-postfix-ope2026-10-30 https://bugrater.com/releases/cve-2026-119377-sqlite-before-3-54-0-contains-an-authorization-bypass-vulnerability-in-lookupname-that-invokes-the-authorizer-only-for-the-first-joined-table-s-using-column2026-10-30 https://bugrater.com/releases/cve-2026-119378-sqlite-before-3-54-0-contains-a-use-after-free-vulnerability-in-the-r-tree-extension-that-allows-attackers-to-make-applications-use-freed-heap-memory-by-manipul2026-10-30 https://bugrater.com/releases/cve-2026-119379-sqlite-before-3-54-0-built-with-the-session-extension-contains-a-heap-buffer-overflow-vulnerability-in-sqlite3changeset-apply-that-allows-attackers-to-corrupt2026-10-30 https://bugrater.com/releases/cve-2026-119407-element-web-and-element-desktop-before-1-12-32-accept-guest-credentials-from-url-fragment-parameters-in-loadsession-allowing-remote-unauthenticated-attackers-t2026-10-30 https://bugrater.com/releases/cve-2026-119408-n8n-before-2-42-6-2-43-x-before-2-43-3-and-3-x-before-3-0-1-contains-a-remote-code-execution-vulnerability-via-deprecated-function-function-item-and-langcha2026-10-30 https://bugrater.com/releases/cve-2026-119409-opnsense-before-26-7-8-contains-a-command-injection-vulnerability-that-allows-authenticated-users-with-the-system-firmware-privilege-to-execute-commands-as-roo2026-10-30 https://bugrater.com/releases/cve-2026-119414-bitwarden-server-before-2026-10-1-on-entity-framework-backends-contains-an-authorization-bypass-vulnerability-that-allows-organization-members-to-add-ciphers-to2026-10-30 https://bugrater.com/releases/cve-2026-119415-cakephp-through-5-4-3-contains-a-header-injection-vulnerability-in-formdatapart-that-allows-attackers-to-inject-mime-part-headers-via-unsanitized-content-type-a2026-10-30 https://bugrater.com/releases/cve-2026-119416-cakephp-through-5-4-3-contains-an-improper-cookie-domain-validation-vulnerability-in-the-http-client-cookiecollection-that-allows-malicious-servers-to-receive-a2026-10-30 https://bugrater.com/releases/cve-2026-119417-cakephp-4-5-12-4-6-5-5-1-8-through-5-1-10-5-2-14-through-5-2-15-5-3-7-and-5-4-0-through-5-4-3-contain-an-email-header-injection-vulnerability-because-smtpt2026-10-30 https://bugrater.com/releases/cve-2026-119418-cakephp-through-5-4-3-contains-an-sql-injection-vulnerability-that-allows-attackers-to-inject-sql-by-supplying-unvalidated-frame-offsets-and-directions-to-windo2026-10-30 https://bugrater.com/releases/cve-2026-119419-cakephp-through-5-4-3-contains-an-sql-injection-vulnerability-that-allows-attackers-to-inject-sql-by-supplying-unvalidated-collation-values-to-stringexpression2026-10-30 https://bugrater.com/releases/cve-2026-119420-lago-through-1-55-0-contains-an-authentication-bypass-vulnerability-that-allows-organization-administrators-to-obtain-session-tokens-for-existing-accounts-via-t2026-10-30 https://bugrater.com/releases/cve-2026-119421-juspay-hyperswitch-through-1-128-0-and-builds-before-2026-10-19-0-contains-a-missing-authorization-vulnerability-that-allows-unauthenticated-attackers-to-conf2026-10-30 https://bugrater.com/releases/cve-2026-119422-juspay-hyperswitch-before-1-128-0-contains-an-authentication-bypass-vulnerability-that-allows-unauthenticated-attackers-to-forge-payment-status-updates-because2026-10-30 https://bugrater.com/releases/cve-2026-119423-opnsense-core-before-26-7-8-contains-a-log-injection-vulnerability-that-allows-unauthenticated-attackers-to-plant-victim-ip-addresses-in-the-lockout-handler-by2026-10-30 https://bugrater.com/releases/cve-2026-119424-opnsense-core-before-26-7-8-contains-a-configuration-line-injection-vulnerability-that-allows-authenticated-users-with-wireless-edit-privilege-to-inject-directi2026-10-30 https://bugrater.com/releases/cve-2026-119425-opnsense-core-26-1-6-through-26-7-7-contains-an-authentication-bypass-vulnerability-in-the-captive-portal-roaming-feature-that-lets-unauthenticated-attackers-hi2026-10-30 https://bugrater.com/releases/cve-2026-119426-phpmyadmin-through-5-2-3-contains-a-cross-site-request-forgery-vulnerability-that-allows-remote-attackers-to-execute-arbitrary-sql-by-bypassing-csrf-token-check2026-10-30 https://bugrater.com/releases/cve-2026-119427-phpmyadmin-through-5-2-3-contains-an-sql-injection-vulnerability-in-designer-savesetting-that-allows-authenticated-users-to-inject-sql-via-unescaped-json-enco2026-10-30 https://bugrater.com/releases/cve-2026-119428-phpmyadmin-through-5-2-3-contains-a-server-side-request-forgery-vulnerability-that-allows-unauthenticated-attackers-to-trigger-outbound-connections-via-setup-va2026-10-30 https://bugrater.com/releases/cve-2026-119429-phpmyadmin-through-5-2-3-contains-a-missing-re-authentication-vulnerability-that-allows-authenticated-attackers-to-remove-two-factor-authentication-by-posting-t2026-10-30 https://bugrater.com/releases/cve-2026-119545-forgejo-through-15-0-11-16-0-0-through-16-0-7-and-17-0-0-through-17-0-1-contains-a-server-side-request-forgery-vulnerability-that-allows-unauthenticated-attac2026-10-30 https://bugrater.com/releases/cve-2026-119546-forgejo-through-15-0-11-16-0-0-through-16-0-7-and-17-0-0-through-17-0-1-contains-a-path-traversal-vulnerability-in-restore-repo-that-allows-attackers-to-read2026-10-30 https://bugrater.com/releases/cve-2026-119547-forgejo-through-15-0-11-16-0-0-through-16-0-7-and-17-0-0-through-17-0-1-contains-an-information-disclosure-vulnerability-in-the-getpublickey-api-handler-that2026-10-30 https://bugrater.com/releases/cve-2026-119548-lago-through-1-55-0-contains-an-authorization-bypass-vulnerability-in-invoices-payments-stripeservice-that-allows-users-of-one-organization-to-mark-another-or2026-10-30 https://bugrater.com/releases/cve-2026-119549-jellyfin-through-12-4-contains-a-server-side-request-forgery-vulnerability-that-lets-authenticated-users-bypass-svgsecurityvalidator-by-embedding-gzip-compresse2026-10-30 https://bugrater.com/releases/cve-2026-119550-jellyfin-through-12-4-contains-an-information-disclosure-vulnerability-in-playlistscontroller-getplaylist-that-allows-authenticated-users-to-read-hidden-item-id2026-10-30 https://bugrater.com/releases/cve-2026-119551-jellyfin-through-12-4-contains-an-authorization-bypass-vulnerability-in-suggestionscontroller-getsuggestions-that-allows-authenticated-non-administrator-users-t2026-10-30 https://bugrater.com/releases/cve-2026-119552-uptime-kuma-through-2-5-8-contains-a-race-condition-in-the-socket-io-first-run-setup-handler-that-allows-unauthenticated-attackers-to-create-an-additional-admin2026-10-30 https://bugrater.com/releases/cve-2026-119553-moodle-5-3-0-5-2-0-through-5-2-4-5-1-0-through-5-1-8-5-0-0-through-5-0-11-and-through-4-5-15-contains-a-path-traversal-vulnerability-in-the-blackboard-quest2026-10-30 https://bugrater.com/releases/cve-2026-119554-moodle-5-3-0-5-2-0-through-5-2-4-5-1-0-through-5-1-8-5-0-0-through-5-0-11-and-through-4-5-15-contain-an-sql-injection-vulnerability-in-the-external-database2026-10-30 https://bugrater.com/releases/cve-2026-119555-moodle-4-2-0-through-4-5-15-5-0-0-through-5-0-11-5-1-0-through-5-1-8-5-2-0-through-5-2-4-and-5-3-0-contain-an-information-disclosure-vulnerability-in-the-co2026-10-30 https://bugrater.com/releases/cve-2026-119556-moodle-4-2-0-through-4-5-15-5-0-0-through-5-0-11-5-1-0-through-5-1-8-5-2-0-through-5-2-4-and-5-3-0-contain-a-missing-capability-check-in-the-core-grades-get2026-10-30 https://bugrater.com/releases/cve-2026-119557-n8n-from-2-14-0-through-2-46-3-contains-a-path-traversal-vulnerability-in-the-databricks-node-that-allows-unauthenticated-attackers-to-reach-arbitrary-databrick2026-10-30 https://bugrater.com/releases/cve-2026-119558-opencart-through-4-1-0-4-contains-a-business-logic-vulnerability-that-allows-logged-in-customers-to-place-unpaid-full-price-orders-by-clearing-reward-points-aft2026-10-30 https://bugrater.com/releases/cve-2026-119559-openlitespeed-through-1-9-4-contains-an-authentication-bypass-vulnerability-that-allows-unauthenticated-remote-attackers-to-evade-virtual-host-client-certificat2026-10-30 https://bugrater.com/releases/cve-2026-119560-opnsense-core-through-26-7-8-contains-a-configuration-injection-vulnerability-that-allows-authenticated-users-to-append-ntpd-conf-directives-by-embedding-newlin2026-10-30 https://bugrater.com/releases/cve-2026-119561-phpmyadmin-through-5-2-3-contains-an-authentication-bypass-vulnerability-in-customserver-parseandvalidateassertionresponse-that-never-verifies-webauthn-asser2026-10-30 https://bugrater.com/releases/cve-2026-119562-phpmyadmin-through-5-2-3-contains-an-sql-injection-vulnerability-that-allows-authenticated-users-to-inject-sql-by-supplying-unescaped-col-extra-and-col-attribut2026-10-30 https://bugrater.com/releases/cve-2026-119563-phpmyadmin-through-5-2-3-contains-a-stored-cross-site-scripting-vulnerability-that-allows-database-users-with-create-privilege-to-inject-script-via-unescaped-ta2026-10-30 https://bugrater.com/releases/cve-2026-119564-plausible-analytics-community-edition-through-3-2-1-contains-an-information-exposure-vulnerability-that-allows-site-editors-to-obtain-pending-invitation-and-own2026-10-30 https://bugrater.com/releases/cve-2026-119565-plausible-analytics-through-3-2-1-contains-a-mass-assignment-vulnerability-in-update-traffic-change-notification-that-allows-authenticated-site-editors-to-reass2026-10-30 https://bugrater.com/releases/cve-2026-119566-prometheus-through-3-15-1-contains-a-credential-leak-vulnerability-that-allows-attackers-to-capture-azure-ad-or-google-iam-bearer-tokens-by-redirecting-remote-w2026-10-30 https://bugrater.com/releases/cve-2026-119567-vsftpd-through-3-0-5-contains-an-access-control-bypass-vulnerability-that-allows-authenticated-ftp-users-to-execute-denied-commands-by-issuing-rfc-775-x-prefixe2026-10-30 https://bugrater.com/releases/cve-2026-119568-vsftpd-through-3-0-5-contains-an-authentication-bypass-vulnerability-in-ssl-data-accept-that-allows-unauthenticated-attackers-to-hijack-ftps-data-connections2026-10-30 https://bugrater.com/releases/cve-2026-119586-sqlite-command-line-shell-through-3-54-1-contains-a-command-injection-vulnerability-in-the-recover-command-that-emits-attacker-planted-dot-commands-stored-in-s2026-10-30 https://bugrater.com/releases/cve-2026-119591-sqlite-before-3-54-0-contains-a-stack-exhaustion-vulnerability-in-countofviewoptimization-that-allows-attackers-to-crash-the-host-process-via-count-over-a2026-10-30 https://bugrater.com/releases/cve-2026-111502-dell-openmanage-enterprise-versions-prior-to-4-8-0-contains-an-insufficiently-protected-credentials-vulnerability-a-low-privileged-attacker-with-remote-acces2026-10-30 https://bugrater.com/releases/cve-2026-111503-dell-openmanage-enterprise-versions-prior-to-4-8-0-contains-an-improper-neutralization-of-special-elements-used-in-an-sql-command-sql-injection-vulnerabil2026-10-30 https://bugrater.com/releases/cve-2026-112374-fossbilling-before-0-8-9-contains-a-cross-site-request-forgery-vulnerability-in-the-staff-guest-login-endpoint-post-api-guest-staff-login-that-allows-remote2026-10-30 https://bugrater.com/releases/cve-2026-75882-an-improper-access-control-vulnerability-in-eset-endpoint-encryption-and-eset-full-disk-encryption-allow-attacker-with-standard-user-permissions-access-a-device2026-10-30 https://bugrater.com/releases/cve-2026-112347-kirki-plugin-for-wordpress-before-6-4-1-contains-a-broken-object-level-access-control-vulnerability-in-its-page-rest-api-where-the-put-wp-json-kirki-v1-pages2026-10-30 https://bugrater.com/releases/cve-2026-112348-kirki-plugin-for-wordpress-before-6-2-5-contains-a-recaptcha-bypass-vulnerability-that-allows-unauthenticated-attackers-to-submit-frontend-forms-without-valid-v2026-10-30 https://bugrater.com/releases/cve-2026-115683-a-race-condition-in-epiphany-allows-a-malicious-website-to-bypass-the-tls-ssl-certificate-warning-page-epiphany-registers-the-main-world-script-message-handle2026-10-30 https://bugrater.com/releases/cve-2026-119528-a-flaw-was-found-in-gimp-the-psd-plug-in-s-image-resource-header-loader-uses-an-incorrect-destination-size-when-copying-a-converted-resource-name-into-a-fixed2026-10-30 https://bugrater.com/releases/cve-2026-119542-a-flaw-was-found-in-the-ickle-query-parser-in-infinispan-a-query-containing-deeply-nested-predicates-can-cause-recursive-parsing-to-exhaust-the-java-thread-sta2026-10-30 https://bugrater.com/releases/cve-2026-119572-traefik-from-3-7-0-ea-1-before-3-7-15-contains-an-authentication-bypass-vulnerability-in-the-kubernetes-ingress-nginx-provider-that-silently-disables-mtls-confi2026-10-30 https://bugrater.com/releases/cve-2026-119573-traefik-3-7-11-before-3-7-15-contains-an-authorization-bypass-in-the-kubernetes-ingress-nginx-provider-that-skips-the-cross-namespace-check-on-the-auth-tls-secr2026-10-30 https://bugrater.com/releases/cve-2026-119575-arcadedb-from-26-8-1-before-26-10-2-contains-a-server-side-request-forgery-vulnerability-that-allows-authenticated-users-with-updatedatabasesettings-to-disable2026-10-30 https://bugrater.com/releases/cve-2026-119578-monai-from-1-6-0-before-1-6-1-contains-a-remote-code-execution-vulnerability-in-auto3dseg-algo-from-json-that-allows-attackers-to-run-python-code-via-a-crafte2026-10-30 https://bugrater.com/releases/cve-2026-119596-unit3d-through-9-2-0-contains-a-missing-authorization-vulnerability-in-playlistzipcontroller-show-that-allows-authenticated-users-to-download-other-members-pr2026-10-30 https://bugrater.com/releases/cve-2026-119597-opendeepwiki-through-2-0-6-contains-a-hard-coded-jwt-signing-key-vulnerability-that-allows-unauthenticated-attackers-to-forge-administrator-tokens-using-the-pub2026-10-30 https://bugrater.com/releases/cve-2026-119598-miaomiaowu-before-0-9-3-contains-an-insecure-direct-object-reference-vulnerability-in-api-user-proxy-provider-configs-that-allows-authenticated-users-to-read-o2026-10-30 https://bugrater.com/releases/cve-2026-119599-axonhub-through-1-0-0-beta11-contains-a-privilege-escalation-vulnerability-that-allows-project-users-to-assign-system-level-scopes-by-creating-service-account-a2026-10-30 https://bugrater.com/releases/cve-2026-119600-tcpflow-through-1-6-1-contains-an-out-of-bounds-read-vulnerability-that-allows-unauthenticated-attackers-to-read-process-memory-by-sending-packets-with-forged-i2026-10-30 https://bugrater.com/releases/cve-2026-119601-afflib-through-3-7-22-contains-a-heap-out-of-bounds-write-vulnerability-in-af-get-page-that-allows-attackers-to-corrupt-heap-memory-by-supplying-crafted-aff-i2026-10-30 https://bugrater.com/releases/cve-2026-119602-libmspack-through-0-11alpha-contains-an-uninitialized-memory-disclosure-vulnerability-in-the-ms-zip-decompressor-that-allows-attackers-to-leak-heap-data-via-unc2026-10-30 https://bugrater.com/releases/cve-2026-86715-plaintext-storage-of-a-password-vulnerability-in-crypttech-crypto-and-informatics-technologies-industry-and-trade-inc-vatos-dlp-allows-use-of-known-domain-cred2026-10-30 https://bugrater.com/releases/cve-2010-20125-dedecms-before-5-7-contains-a-file-inclusion-vulnerability-in-plus-carbuyaction-php-that-allows-remote-unauthenticated-attackers-to-control-the-include-path-by2026-10-30 https://bugrater.com/releases/cve-2015-20130-netsweeper-before-4-0-11-and-4-1-0-before-4-1-5-contains-a-reflected-cross-site-scripting-vulnerability-in-webadmin-reporter-view-server-log-php-that-allows-rem2026-10-30 https://bugrater.com/releases/cve-2026-111487-an-out-of-bounds-write-vulnerability-in-the-qt-framework-assimp-scene-import-plugin-of-the-qt3d-module2026-10-30 https://bugrater.com/releases/cve-2026-116860-missing-authorization-vulnerability-in-arraytics-timetics-timetics-allows-exploiting-incorrectly-configured-access-control-security-levels-this-issue-affects-ti2026-10-30 https://bugrater.com/releases/cve-2026-119368-missing-authorization-vulnerability-in-liquid-web-stellarwp-the-events-calendar-the-events-calendar-allows-exploiting-incorrectly-configured-access-control-se2026-10-30 https://bugrater.com/releases/cve-2026-119370-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-vulnerability-in-liquid-web-stellarwp-the-events-calendar-the-events-cale2026-10-30 https://bugrater.com/releases/cve-2026-119482-missing-authorization-vulnerability-in-crocoblock-jetformbuilder-jetformbuilder-allows-exploiting-incorrectly-configured-access-control-security-levels-this-iss2026-10-30 https://bugrater.com/releases/cve-2026-119644-blossom-through-1-17-1-contains-an-authorization-bypass-vulnerability-that-allows-authenticated-non-readonly-users-to-modify-other-users-pictures-by-supplying2026-10-30 https://bugrater.com/releases/cve-2026-119645-zentao-pms-through-22-6-contains-a-missing-authorization-vulnerability-in-doc-ajaxgetdoc-that-allows-authenticated-users-to-read-documents-without-checkprivd2026-10-30 https://bugrater.com/releases/cve-2026-119646-open-web-analytics-before-1-14-1-contains-an-authorization-vulnerability-that-allows-authenticated-users-to-read-other-sites-report-data-because-clickstream-an2026-10-30 https://bugrater.com/releases/cve-2026-119647-ruoyi-vue-plus-through-6-0-0-contains-an-authorization-bypass-vulnerability-in-sysuserserviceimpl-selectuserlistbydept-that-allows-authenticated-users-to-read-u2026-10-30 https://bugrater.com/releases/cve-2026-119648-tencent-blueking-cmdb-bk-cmdb-through-3-14-6-contains-a-missing-authorization-vulnerability-that-allows-authenticated-users-to-view-hosts-of-other-businesses2026-10-30 https://bugrater.com/releases/cve-2026-119649-orchard-cms-1-10-3-through-1-11-contains-an-improper-authorization-vulnerability-in-medialibraryservice-checkmediafolderpermission-that-allows-authenticated-a2026-10-30 https://bugrater.com/releases/cve-2026-119650-hula-server-through-3-0-7-contains-an-insecure-direct-object-reference-vulnerability-in-privacycontroller-that-allows-authenticated-users-to-access-other-users2026-10-30 https://bugrater.com/releases/cve-2026-119651-hula-server-through-3-0-7-contains-an-insecure-direct-object-reference-vulnerability-in-feedcontroller-delfeed-that-allows-authenticated-users-to-delete-other-u2026-10-30 https://bugrater.com/releases/cve-2026-119652-hula-server-through-3-0-7-contains-an-insecure-direct-object-reference-vulnerability-in-friendcontroller-friendlist-that-allows-authenticated-users-to-view-othe2026-10-30 https://bugrater.com/releases/cve-2026-119653-nging-through-5-3-5-contains-an-information-disclosure-vulnerability-that-allows-any-authenticated-backend-user-to-list-host-directories-by-abusing-the-public-t2026-10-30 https://bugrater.com/releases/cve-2026-119654-datacap-through-2025-1-1-contains-a-missing-authorization-vulnerability-that-allows-any-authenticated-user-to-escalate-privileges-by-calling-administrative-role2026-10-30 https://bugrater.com/releases/cve-2026-119655-coreshop-through-1-5-5-contains-an-unauthenticated-sql-injection-vulnerability-in-the-api-good-getgoodspagelist-endpoint-via-the-unvalidated-order-parameter-app2026-10-30 https://bugrater.com/releases/cve-2026-119656-coreshop-by-coreunion-through-1-5-5-contains-an-unauthenticated-sql-injection-vulnerability-in-the-api-agent-getgoodspagelist-endpoint-via-the-order-parameter-a2026-10-30 https://bugrater.com/releases/cve-2026-119657-filepress-through-3-0-1-contains-a-missing-authorization-vulnerability-in-dzz-pichome-library-that-allows-authenticated-users-to-manage-other-libraries-folders2026-10-30 https://bugrater.com/releases/cve-2026-119658-powerdns-admin-through-2026-08-1-contains-an-authorization-bypass-vulnerability-that-allows-authenticated-user-role-accounts-to-refresh-secondary-zones-they-can2026-10-30 https://bugrater.com/releases/cve-2026-119659-blossom-through-1-17-1-contains-an-authorization-bypass-vulnerability-that-allows-authenticated-users-to-access-other-users-folders-because-folderservice-queri2026-10-30 https://bugrater.com/releases/cve-2026-119660-musebot-before-2-0-0-contains-an-authentication-bypass-vulnerability-that-allows-unauthenticated-attackers-to-forge-admin-sessions-by-using-the-hard-coded-defau2026-10-30 https://bugrater.com/releases/cve-2026-119661-showdoc-through-3-9-5-contains-an-authorization-bypass-vulnerability-in-the-api-paramdesclib-deleteentries-endpoint-that-checks-edit-permission-only-for-the-fir2026-10-30 https://bugrater.com/releases/cve-2026-119662-songloft-2-9-0-before-2-13-6-contains-a-hardcoded-credentials-vulnerability-that-allows-adjacent-network-attackers-to-authenticate-as-administrator-using-the-fi2026-10-30 https://bugrater.com/releases/cve-2026-119663-tamery-formerly-conar-0-32-0-before-0-99-0-contains-a-broken-authorization-vulnerability-in-the-cloud-sync-api-connectionsresources-create-handler-that-allows2026-10-30 https://bugrater.com/releases/cve-2026-119664-tamery-formerly-conar-0-26-1-before-0-99-0-contains-an-authorization-bypass-vulnerability-in-the-cloud-sync-api-chatsmessages-update-handler-which-leaves-the2026-10-30 https://bugrater.com/releases/cve-2026-119665-wharttest-2-2-0-through-2-8-1-contains-a-missing-authorization-vulnerability-in-scheduledtaskviewset-and-taskexecutionviewset-that-allows-authenticated-users-to2026-10-30 https://bugrater.com/releases/cve-2026-119680-a-stored-cross-site-scripting-xss-vulnerability-exists-in-the-chart-feature-of-sharepoint-manager-plus-spmp-due-to-improper-sanitization-and-html-encoding-o2026-10-30 https://bugrater.com/releases/cve-2026-119682-an-improper-access-control-vulnerability-exists-in-the-multi-factor-authentication-mfa-functionality-of-manageengine-sharepoint-manager-plus-spmp-a-low-pri2026-10-30 https://bugrater.com/releases/cve-2026-65444-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-vulnerability-in-creative-themes-blocksy-companion-blocksy-companion-allows2026-10-30 https://bugrater.com/releases/cve-2026-93327-a-deserialization-of-untrusted-data-vulnerability-in-the-subworkflow-task-in-google-cloud-application-integration-versions-prior-to-2026-09-11-on-google-cloud-p2026-10-30 https://bugrater.com/releases/cve-2026-104061-scribus-before-1-6-7-contains-a-heap-out-of-bounds-write-vulnerability-in-the-scimgdataloader-psd-loader-that-uses-unchecked-psd-file-values-as-lookup-array-ind2026-10-30 https://bugrater.com/releases/cve-2026-104062-scribus-before-1-6-7-contains-a-heap-buffer-overflow-vulnerability-in-the-pict-image-loader-and-import-plugin-that-allows-attackers-to-corrupt-heap-memory-by-su2026-10-30 https://bugrater.com/releases/cve-2026-104063-scribus-before-1-6-7-contains-an-out-of-bounds-read-vulnerability-in-the-mac-pict-image-loader-and-import-plugin-when-decoding-planar-pixel-data-attackers-can2026-10-30 https://bugrater.com/releases/cve-2026-104064-scribus-before-1-6-7-contains-an-integer-overflow-vulnerability-in-the-scimgdataloader-tiff-tiff-loader-that-allows-attackers-to-trigger-a-heap-overflow-via-cra2026-10-30 https://bugrater.com/releases/cve-2026-104065-scribus-before-1-6-7-contains-an-out-of-bounds-write-vulnerability-in-the-importdrw-micrografx-draw-plugin-that-uses-an-unvalidated-y-offset-to-select-image-sca2026-10-30 https://bugrater.com/releases/cve-2026-104066-scribus-before-1-6-7-contains-a-heap-buffer-overflow-vulnerability-in-the-mac-pict-image-loader-and-import-plugin-when-unpacking-4-bit-indexed-pixel-data-attac2026-10-30 https://bugrater.com/releases/cve-2026-104067-scribus-before-1-6-7-contains-an-out-of-bounds-memory-access-vulnerability-in-the-importsvm-plugin-that-fails-to-verify-bitmap-and-transparency-mask-dimensions2026-10-30 https://bugrater.com/releases/cve-2026-104615-a-security-vulnerability-was-discovered-in-suse-rancher-fleet-s-cluster-registration-flow-in-fleet-versions-before-0-12-0-13-0-up-to-0-13-17-0-14-0-up-to-0-12026-10-30 https://bugrater.com/releases/cve-2026-105454-rt-s-automatic-link-creation-for-urls-in-html-ticket-content-does-not-html-escape-the-url-it-places-in-the-link-a-url-crafted-to-break-out-of-the-l2026-10-30 https://bugrater.com/releases/cve-2026-105455-rtir-s-ticket-creation-forms-show-the-subject-of-the-related-ticket-when-splitting-a-ticket-or-creating-an-incident-from-a-report-and-they-render-t2026-10-30 https://bugrater.com/releases/cve-2026-105456-rtir-extends-rt-s-html-scrubber-to-allow-an-internal-link-placeholder-and-the-extension-lets-through-any-link-that-merely-contains-the-placeholder2026-10-30 https://bugrater.com/releases/cve-2026-116407-missing-authorization-vulnerability-in-webba-plugins-webba-booking-webba-booking-lite-allows-exploiting-incorrectly-configured-access-control-security-levels-th2026-10-30 https://bugrater.com/releases/cve-2026-118238-the-tenda-w18e-web-management-server-is-vulnerable-to-os-command-injection-via-the-diagnose-packet-capture-feature-due-to-improper-validation-of-json-fields2026-10-30 https://bugrater.com/releases/cve-2026-119369-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-vulnerability-in-liquid-web-stellarwp-the-events-calendar-the-events-cale2026-10-30 https://bugrater.com/releases/cve-2026-119479-improper-neutralization-of-script-related-html-tags-in-a-web-page-basic-xss-vulnerability-in-crocoblock-jetformbuilder-jetformbuilder-allows-code-injection-th2026-10-30 https://bugrater.com/releases/cve-2026-119699-wpgraphql-smart-cache-before-2-3-3-contains-an-uncontrolled-resource-consumption-vulnerability-that-allows-unauthenticated-attackers-to-persist-unlimited-query2026-10-30 https://bugrater.com/releases/cve-2026-119700-wpgraphql-before-2-24-2-contains-an-information-disclosure-vulnerability-that-allows-unauthenticated-attackers-to-determine-object-existence-through-distinct-er2026-10-30 https://bugrater.com/releases/cve-2026-119701-wpgraphql-before-2-24-1-contains-a-missing-rate-limiting-vulnerability-that-allows-unauthenticated-attackers-to-flood-password-reset-emails-by-aliasing-the-send2026-10-30 https://bugrater.com/releases/cve-2026-119702-wpgraphql-before-2-24-1-contains-a-missing-authorization-vulnerability-in-the-createcomment-mutation-that-allows-unauthenticated-attackers-to-comment-on-non-pub2026-10-30 https://bugrater.com/releases/cve-2026-119703-xiaozhi-esp32-server-through-0-9-8-contains-an-authentication-bypass-vulnerability-in-websocketserver-handle-auth-that-allows-remote-unauthenticated-attackers2026-10-30 https://bugrater.com/releases/cve-2026-119704-bastille-through-1-4-4-contains-a-symlink-following-vulnerability-in-the-cp-sh-rcp-sh-and-jcp-sh-subcommands-that-allows-jailed-users-to-escape-jail-isolation2026-10-30 https://bugrater.com/releases/cve-2026-119705-serpbear-before-3-1-1-contains-a-missing-authentication-vulnerability-in-pages-api-notify-ts-that-allows-remote-unauthenticated-attackers-to-trigger-notificatio2026-10-30 https://bugrater.com/releases/cve-2026-119706-internlm-lmdeploy-0-9-0-through-0-18-0-contains-an-unauthenticated-remote-code-execution-vulnerability-that-allows-remote-attackers-to-run-os-commands-by-sendin2026-10-30 https://bugrater.com/releases/cve-2026-119707-sonicjs-through-3-0-0-contains-a-missing-authorization-vulnerability-in-the-api-collection-and-api-content-write-routes-that-only-check-coarse-role-labels-a2026-10-30 https://bugrater.com/releases/cve-2026-119708-abp-next-admin-10-4-0-through-10-7-0-contains-a-cross-tenant-authorization-bypass-in-the-blobmanagement-download-by-name-endpoint-letting-authenticated-users-r2026-10-30 https://bugrater.com/releases/cve-2026-119709-grimoire-before-1-0-0-contains-an-unauthenticated-server-side-request-forgery-vulnerability-in-the-api-fetch-metadata-post-handler-that-passes-user-supplied-ur2026-10-30 https://bugrater.com/releases/cve-2026-119710-pipeshub-0-3-0-before-0-10-0-contains-an-event-type-injection-vulnerability-that-allows-authenticated-users-with-only-the-crawl-write-scope-to-delete-connectors2026-10-30 https://bugrater.com/releases/cve-2026-119711-pipeshub-before-0-10-0-contains-a-rate-limit-bypass-vulnerability-in-getclientip-that-allows-unauthenticated-attackers-to-evade-per-ip-throttling-by-spoofing2026-10-30 https://bugrater.com/releases/cve-2026-119712-pipeshub-before-0-10-0-contains-a-server-side-request-forgery-vulnerability-in-imageparser-fetch-single-url-that-allows-attackers-to-make-the-indexing-service2026-10-30 https://bugrater.com/releases/cve-2026-119713-paperclip-2026-403-0-before-2026-416-0-contains-a-remote-code-execution-vulnerability-that-allows-agent-api-key-holders-to-set-cleanupcommand-and-teardowncomman2026-10-30 https://bugrater.com/releases/cve-2026-119714-my-calendar-wordpress-plugin-3-8-8-before-3-8-11-contains-a-shortcode-injection-vulnerability-that-allows-unauthenticated-attackers-to-execute-registered-shortc2026-10-30 https://bugrater.com/releases/cve-2026-119715-nocodb-before-2026-08-0-contains-a-clickjacking-vulnerability-that-allows-any-origin-to-frame-the-authenticated-interface-because-no-x-frame-options-or-csp-fram2026-10-30 https://bugrater.com/releases/cve-2026-119716-pybars3-through-0-9-7-contains-a-code-injection-vulnerability-in-pybars-compiler-py-that-allows-template-authors-to-execute-python-code-via-unescaped-bracketed2026-10-30 https://bugrater.com/releases/cve-2026-119717-pybars4-through-0-9-13-contains-a-code-injection-vulnerability-in-pybars-compiler-py-that-allows-attackers-to-execute-python-code-via-unescaped-bracketed-path2026-10-30 https://bugrater.com/releases/cve-2026-119718-blender-before-4-5-15-and-5-x-before-5-2-3-contains-a-heap-buffer-overflow-vulnerability-caused-by-integer-overflow-in-ptcache-data-alloc-when-reading-point-c2026-10-30 https://bugrater.com/releases/cve-2026-119719-blender-before-4-5-15-and-5-x-before-5-2-3-contains-a-heap-buffer-overflow-vulnerability-in-the-blend-file-thumbnail-extractor-caused-by-32-bit-integer-overflow2026-10-30 https://bugrater.com/releases/cve-2026-119720-blender-before-4-5-15-and-5-x-before-5-2-3-contains-a-heap-out-of-bounds-read-vulnerability-in-read-file-dna-that-reads-a-glob-block-field-without-validating2026-10-30 https://bugrater.com/releases/cve-2026-119721-blender-before-4-5-15-and-5-x-before-5-2-3-contains-an-out-of-bounds-read-vulnerability-in-blo-bhead-id-accessors-in-readfile-cc-that-read-id-fields-without-b2026-10-30 https://bugrater.com/releases/cve-2026-119722-blender-before-4-5-15-and-5-x-before-5-2-3-contains-a-heap-out-of-bounds-access-vulnerability-in-read-struct-that-skips-size-validation-when-a-blend-file-s-s2026-10-30 https://bugrater.com/releases/cve-2026-62141-missing-authorization-vulnerability-in-wp-manageninja-llc-fluent-crm-fluent-crm-allows-exploiting-incorrectly-configured-access-control-security-levels-this-iss2026-10-30 https://bugrater.com/releases/cve-2026-104623-a-security-vulnerability-exists-in-the-authorization-handling-for-the-local-management-cluster-shell-feature-of-suse-rancher-manager-2-15-0-up-to-2-15-3-2-142026-10-30 https://bugrater.com/releases/cve-2026-112816-improper-certificate-validation-in-the-https-listener-in-canonical-lxd-4-0-14-5-0-10-5-21-8-6-9-before-4-0-15-5-0-11-5-21-9-6-10-1-allows-an-unauthenticat2026-10-30 https://bugrater.com/releases/cve-2026-115642-in-openstack-keystonemiddleware-before-13-0-2-by-supplying-a-custom-x-service-token-header-in-a-request-anyone-in-possession-of-an-access-restricted-applicati2026-10-30 https://bugrater.com/releases/cve-2026-119365-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-vulnerability-in-bplugins-media-player-addons-for-elementor-media-player2026-10-30 https://bugrater.com/releases/cve-2026-119367-missing-authorization-vulnerability-in-liquid-web-stellarwp-the-events-calendar-the-events-calendar-allows-exploiting-incorrectly-configured-access-control-se2026-10-30 https://bugrater.com/releases/cve-2026-119466-cross-site-request-forgery-csrf-vulnerability-in-wpexperts-apiexperts-square-for-woocommerce-woosquare-allows-cross-site-request-forgery-this-issue-affects-ap2026-10-30 https://bugrater.com/releases/cve-2026-62055-missing-authorization-vulnerability-in-liquid-web-stellarwp-event-tickets-event-tickets-allows-exploiting-incorrectly-configured-access-control-security-level2026-10-30 https://bugrater.com/releases/cve-2026-65566-cross-site-request-forgery-csrf-vulnerability-in-meow-apps-ai-engine-ai-engine-allows-cross-site-request-forgery-this-issue-affects-ai-engine-from-n-a-throug2026-10-30 https://bugrater.com/releases/cve-2025-8574-the-database-cleaner-plugin-for-wordpress-is-vulnerable-to-arbitrary-table-deletion-in-all-versions-up-to-and-including-1-4-7-this-is-due-to-a-lack-of-restri2026-10-30 https://bugrater.com/releases/cve-2026-102905-the-the-ad-inserter-ad-manager-adsense-ads-plugin-for-wordpress-is-vulnerable-to-arbitrary-shortcode-execution-in-all-versions-up-to-and-including-2-8-192026-10-30 https://bugrater.com/releases/cve-2026-102918-the-redux-framework-plugin-for-wordpress-is-vulnerable-to-stored-cross-site-scripting-in-all-versions-up-to-and-including-4-5-15-via-the-multi-media-field-th2026-10-30 https://bugrater.com/releases/cve-2026-104739-the-js-help-desk-ai-powered-support-ticketing-system-plugin-for-wordpress-is-vulnerable-to-arbitrary-file-deletion-due-to-insufficient-file-path-validation2026-10-30 https://bugrater.com/releases/cve-2026-104744-the-independent-analytics-pro-plugin-for-wordpress-is-vulnerable-to-stored-cross-site-scripting-via-the-utm-campaign-parameter-in-all-versions-up-to-and-incl2026-10-30 https://bugrater.com/releases/cve-2026-105894-the-ak-framework-plugin-for-wordpress-included-in-the-newsy-viral-news-magazine-wordpress-theme-is-vulnerable-to-privilege-escalation-in-all-versions-up-t2026-10-30 https://bugrater.com/releases/cve-2026-107630-the-email-templates-customizer-and-designer-for-wordpress-and-woocommerce-plugin-for-wordpress-is-vulnerable-to-authorization-bypass-in-all-versions-up-to-and2026-10-30 https://bugrater.com/releases/cve-2026-109592-the-openstation-desktop-windows-dock-virtual-desktops-for-wp-admin-plugin-for-wordpress-is-vulnerable-to-authorization-bypass-in-all-versions-up-to-and-inc2026-10-30 https://bugrater.com/releases/cve-2026-109984-the-fv-flowplayer-video-player-plugin-for-wordpress-is-vulnerable-to-stored-cross-site-scripting-via-the-comment-parameter-in-all-versions-up-to-and-includin2026-10-30 https://bugrater.com/releases/cve-2026-110001-the-fv-flowplayer-video-player-plugin-for-wordpress-is-vulnerable-to-stored-cross-site-scripting-via-the-comment-shortcode-attribute-align-parameter-in-al2026-10-30 https://bugrater.com/releases/cve-2026-110305-the-advanced-custom-fields-extended-plugin-for-wordpress-is-vulnerable-to-sensitive-information-exposure-in-all-versions-up-to-and-including-0-9-2-7-via-the2026-10-30 https://bugrater.com/releases/cve-2026-110533-the-fv-flowplayer-video-player-plugin-for-wordpress-is-vulnerable-to-stored-cross-site-scripting-via-the-fv-player-videos-fv-player-user-video-parameter-i2026-10-30 https://bugrater.com/releases/cve-2026-112365-the-easy-jobs-ai-powered-job-listing-job-board-career-page-recruitment-hiring-solution-plugin-for-wordpress-is-vulnerable-to-stored-cross-site-scripting2026-10-30 https://bugrater.com/releases/cve-2026-115346-the-avada-website-builder-for-wordpress-woocommerce-theme-for-wordpress-is-vulnerable-to-arbitrary-file-upload-in-versions-up-to-and-including-7-16-2-via2026-10-30 https://bugrater.com/releases/cve-2026-115820-the-majestic-support-the-leading-edge-help-desk-customer-support-plugin-plugin-for-wordpress-is-vulnerable-to-generic-sql-injection-via-the-columns-array2026-10-30 https://bugrater.com/releases/cve-2026-115869-the-themify-builder-plugin-for-wordpress-is-vulnerable-to-stored-cross-site-scripting-via-the-variations-repeater-field-of-custom-font-tb-cf-posts-in-versio2026-10-30 https://bugrater.com/releases/cve-2026-116552-the-like-button-rating-likebtn-plugin-for-wordpress-is-vulnerable-to-stored-cross-site-scripting-via-the-http-client-ip-client-ip-header-parameter-in-all2026-10-30 https://bugrater.com/releases/cve-2026-118205-the-essential-addons-for-elementor-popular-elementor-templates-widgets-plugin-for-wordpress-is-vulnerable-to-privilege-escalation-in-all-versions-up-to-and2026-10-30 https://bugrater.com/releases/cve-2026-118635-the-the-geodirectory-wp-business-directory-plugin-and-classified-listings-directory-plugin-for-wordpress-is-vulnerable-to-arbitrary-shortcode-execution-in-all2026-10-30 https://bugrater.com/releases/cve-2026-118696-in-jetbrains-intellij-idea-pycharm-phpstorm-rubymine-and-webstorm-before-2026-3-2026-2-4-2026-1-5-1-and-2025-3-6-2-goland-before-2026-3-2026-2-4-2026-12026-10-30 https://bugrater.com/releases/cve-2026-118697-in-jetbrains-toolbox-app-before-3-9-1-and-3-8-2-intellij-idea-before-2026-3-and-2026-2-4-the-jetbrainsd-daemon-trusted-compromised-intermediate-certificates2026-10-30 https://bugrater.com/releases/cve-2026-119113-the-geodirectory-wp-business-directory-plugin-and-classified-listings-directory-plugin-for-wordpress-is-vulnerable-to-stored-cross-site-scripting-via-the-list2026-10-30 https://bugrater.com/releases/cve-2026-119176-the-cp-multi-view-events-calendar-plugin-for-wordpress-is-vulnerable-to-stored-cross-site-scripting-via-the-subject-parameter-in-all-versions-up-to-and-inclu2026-10-30 https://bugrater.com/releases/cve-2026-119619-a-vulnerability-was-found-in-37954679-cak-filemanagement-system-up-to-5e6433246475e66462e1fea980688de96a049297-this-affects-the-function-mysqli-query-of-the-fi2026-10-30 https://bugrater.com/releases/cve-2026-119620-a-vulnerability-was-determined-in-37954679-cak-filemanagement-system-up-to-5e6433246475e66462e1fea980688de96a049297-this-vulnerability-affects-the-function-mov2026-10-30 https://bugrater.com/releases/cve-2026-119760-sniproxy-through-0-7-0-contains-a-null-pointer-dereference-vulnerability-in-resolv-cancel-that-allows-remote-unauthenticated-attackers-to-crash-the-daemon-by2026-10-30 https://bugrater.com/releases/cve-2026-119761-axigen-mail-server-webmail-before-10-6-39-and-10-7-1-contains-a-stored-cross-site-scripting-vulnerability-that-allows-unauthenticated-remote-attackers-to-inject2026-10-30 https://bugrater.com/releases/cve-2026-119762-axigen-mail-server-before-10-5-69-10-6-x-before-10-6-40-and-10-7-x-before-10-7-2-contains-an-unauthenticated-denial-of-service-vulnerability-caused-by-unbound2026-10-30 https://bugrater.com/releases/cve-2026-119763-changelog-com-before-commit-7b35e829-contains-a-missing-authorization-vulnerability-that-allows-unauthenticated-attackers-to-read-unpublished-content-via-previe2026-10-30 https://bugrater.com/releases/cve-2026-119764-mythic-3-2-16-through-3-4-0-61-contains-a-stored-cross-site-scripting-vulnerability-that-allows-attackers-controlling-target-endpoint-files-to-run-javascript-in2026-10-30 https://bugrater.com/releases/cve-2026-119978-flowise-through-3-1-4-contains-a-sandbox-escape-vulnerability-that-allows-authenticated-users-to-execute-os-commands-by-abusing-allowlisted-langchain-and-mammot2026-10-30 https://bugrater.com/releases/cve-2026-119979-lm-studio-before-0-4-22-1-contains-a-path-traversal-vulnerability-in-the-model-downloader-s-resolvedownloadrequest-that-allows-attackers-to-write-files-outside2026-10-30 https://bugrater.com/releases/cve-2026-13747-the-meow-gallery-plugin-for-wordpress-is-vulnerable-to-authorization-bypass-in-all-versions-up-to-and-including-5-5-4-this-is-due-to-the-plugin-not-properly-v2026-10-30 https://bugrater.com/releases/cve-2026-76012-the-photo-gallery-sliders-proofing-and-themes-nextgen-gallery-plugin-for-wordpress-is-vulnerable-to-remote-code-execution-in-all-versions-up-to-and-includi2026-10-30 https://bugrater.com/releases/cve-2026-84243-the-gettext-family-of-functions-in-the-gnu-c-library-version-2-0-and-later-accept-language-environment-variable-entries-that-contain-or-that-are-equal-to2026-10-30 https://bugrater.com/releases/cve-2026-96894-the-erp-complete-hr-accounting-crm-suite-built-for-woocommerce-plugin-for-wordpress-is-vulnerable-to-stored-cross-site-scripting-via-inbound-email-body-in-a2026-10-30 https://bugrater.com/releases/cve-2026-97638-the-forminator-forms-contact-form-payment-form-custom-form-builder-plugin-for-wordpress-is-vulnerable-to-insecure-direct-object-reference-in-all-versions-u2026-10-30 https://bugrater.com/releases/cve-2026-9239-the-meow-gallery-plugin-for-wordpress-is-vulnerable-to-stored-cross-site-scripting-via-attachment-alt-text-aria-label-attribute-in-all-versions-up-to-and-inc2026-10-30 https://bugrater.com/releases/cve-2026-104674-missing-authorization-vulnerability-in-arraytics-booktics-booktics-allows-exploiting-incorrectly-configured-access-control-security-levels-this-issue-affects-bo2026-10-30 https://bugrater.com/releases/cve-2026-105077-unauthenticated-cross-site-scripting-xss-in-ad-inserter-2-8-19-versions2026-10-30 https://bugrater.com/releases/cve-2026-107868-unauthenticated-bypass-vulnerability-in-yith-woocommerce-product-add-ons-4-34-0-versions2026-10-30 https://bugrater.com/releases/cve-2026-114711-subscriber-cross-site-scripting-xss-in-multivendorx-5-0-20-versions2026-10-30 https://bugrater.com/releases/cve-2026-115604-subscriber-arbitrary-file-deletion-in-suredash-1-12-3-versions2026-10-30 https://bugrater.com/releases/cve-2026-115947-unauthenticated-sensitive-data-exposure-in-husky-1-4-6-versions2026-10-30 https://bugrater.com/releases/cve-2026-116386-unauthenticated-privilege-escalation-in-sms-alert-order-notifications-4-0-2-versions2026-10-30 https://bugrater.com/releases/cve-2026-116401-unauthenticated-broken-access-control-in-husky-1-4-6-versions2026-10-30 https://bugrater.com/releases/cve-2026-116405-unauthenticated-cross-site-scripting-xss-in-vikrentcar-1-4-9-versions2026-10-30 https://bugrater.com/releases/cve-2026-116410-unauthenticated-arbitrary-content-deletion-in-masteriyo-lms-3-4-3-versions2026-10-30 https://bugrater.com/releases/cve-2026-116847-unauthenticated-cross-site-scripting-xss-in-mang-board-wp-2-4-6-versions2026-10-30 https://bugrater.com/releases/cve-2026-116851-unauthenticated-cross-site-scripting-xss-in-ecommerce-product-catalog-3-6-5-versions2026-10-30 https://bugrater.com/releases/cve-2026-116852-author-remote-code-execution-rce-in-widget-options-4-2-5-versions2026-10-30 https://bugrater.com/releases/cve-2026-116853-unauthenticated-broken-access-control-in-givewp-4-19-0-1-versions2026-10-30 https://bugrater.com/releases/cve-2026-116854-subscriber-cross-site-scripting-xss-in-wp-customer-area-8-4-0-versions2026-10-30 https://bugrater.com/releases/cve-2026-116861-unauthenticated-sensitive-data-exposure-in-flexible-chat-1-1-0-versions2026-10-30 https://bugrater.com/releases/cve-2026-116862-unauthenticated-broken-access-control-in-wp-rest-cache-2026-3-1-versions2026-10-30 https://bugrater.com/releases/cve-2026-118086-subscriber-privilege-escalation-in-wp-base-booking-6-5-2-versions2026-10-30 https://bugrater.com/releases/cve-2026-118089-shop-manager-php-object-injection-in-product-feed-manager-7-14-1-versions2026-10-30 https://bugrater.com/releases/cve-2026-118090-subscriber-php-object-injection-in-masterstudy-lms-3-7-55-versions2026-10-30 https://bugrater.com/releases/cve-2026-119117-insertion-of-sensitive-information-into-a-log-file-in-amazon-kinesis-producer-library-for-java-before-1-0-8-when-the-library-s-logger-is-configured-at-debug-lo2026-10-30 https://bugrater.com/releases/cve-2026-119526-deserialization-of-untrusted-data-vulnerability-in-themerex-royal-event-allows-object-injection-this-issue-affects-royal-event-from-n-a-through-2-02026-10-30 https://bugrater.com/releases/cve-2026-120007-nodebb-1-18-0-through-4-16-5-contains-an-authorization-bypass-vulnerability-that-allows-unauthenticated-visitors-to-act-on-other-accounts-by-supplying-a-uid-dur2026-10-30 https://bugrater.com/releases/cve-2026-120046-nezha-2-0-0-before-2-4-0-contains-a-null-pointer-dereference-vulnerability-in-servicesentinel-loadtodaystats-that-allows-authenticated-users-to-crash-the-dashbo2026-10-30 https://bugrater.com/releases/cve-2026-27061-subscriber-cross-site-scripting-xss-in-user-registration-5-3-0-versions2026-10-30 https://bugrater.com/releases/cve-2026-28160-unauthenticated-cross-site-scripting-xss-in-vikrentcar-1-4-10-versions2026-10-30 https://bugrater.com/releases/cve-2026-39732-unauthenticated-sql-injection-in-transliterator-2-5-13-versions2026-10-30 https://bugrater.com/releases/cve-2026-39734-unauthenticated-path-traversal-in-wp-easypay-4-5-4-versions2026-10-30 https://bugrater.com/releases/cve-2026-39738-unauthenticated-php-object-injection-in-funnelkit-automations-3-8-6-1-versions2026-10-30 https://bugrater.com/releases/cve-2026-39739-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-vulnerability-in-brainstorm-force-ultimate-addons-for-elementor-lite-head2026-10-30 https://bugrater.com/releases/cve-2026-39786-unauthenticated-cross-site-scripting-xss-in-ba-book-everything-1-8-33-versions2026-10-30 https://bugrater.com/releases/cve-2026-48201-unauthenticated-cross-site-scripting-xss-in-fast-velocity-minify-3-5-7-versions2026-10-30 https://bugrater.com/releases/cve-2026-52710-improper-neutralization-of-script-related-html-tags-in-a-web-page-basic-xss-vulnerability-in-ithemelandco-giftit-8211-free-gifts-for-woocommerce-ithemeland2026-10-30 https://bugrater.com/releases/cve-2026-54850-subscriber-broken-access-control-in-booking-and-rental-manager-2-8-2-versions2026-10-30 https://bugrater.com/releases/cve-2026-54854-contributor-privilege-escalation-in-profile-builder-4-0-5-versions2026-10-30 https://bugrater.com/releases/cve-2026-54855-unauthenticated-cross-site-scripting-xss-in-profile-builder-4-0-5-versions2026-10-30 https://bugrater.com/releases/cve-2026-62019-missing-authorization-vulnerability-in-liquid-web-stellarwp-bookit-bookit-allows-exploiting-incorrectly-configured-access-control-security-levels-this-issue-a2026-10-30 https://bugrater.com/releases/cve-2026-62023-missing-authorization-vulnerability-in-unlimited-elements-unlimited-elements-for-elementor-free-widgets-addons-templates-unlimited-elements-for-elementor-al2026-10-30 https://bugrater.com/releases/cve-2026-62047-missing-authorization-vulnerability-in-liquid-web-stellarwp-event-tickets-event-tickets-allows-exploiting-incorrectly-configured-access-control-security-level2026-10-30 https://bugrater.com/releases/cve-2026-62056-missing-authorization-vulnerability-in-wp-manageninja-llc-fluent-crm-fluent-crm-allows-exploiting-incorrectly-configured-access-control-security-levels-this-iss2026-10-30 https://bugrater.com/releases/cve-2026-62057-improper-neutralization-of-script-related-html-tags-in-a-web-page-basic-xss-vulnerability-in-fahim-reza-divi-contact-form-7-cf7-styler-for-divi-allows-code-in2026-10-30 https://bugrater.com/releases/cve-2026-62121-improper-control-of-filename-for-include-require-statement-in-php-program-php-remote-file-inclusion-vulnerability-in-unlimited-elements-unlimited-elements-f2026-10-30 https://bugrater.com/releases/cve-2026-62122-missing-authorization-vulnerability-in-arraytics-booktics-booktics-allows-exploiting-incorrectly-configured-access-control-security-levels-this-issue-affects-bo2026-10-30 https://bugrater.com/releases/cve-2026-73186-subscriber-php-object-injection-in-enable-media-replace-4-2-2-versions2026-10-30 https://bugrater.com/releases/cve-2026-73322-incorrect-authorization-vulnerability-in-the-single-stage-query-engine-of-apache-pinot-when-broker-access-control-is-enabled-the-single-stage-query-engine-au2026-10-30 https://bugrater.com/releases/cve-2026-78527-contributor-php-object-injection-in-gs-testimonial-slider-3-3-10-versions2026-10-30 https://bugrater.com/releases/cve-2026-7003-wit-synapps-runtime-through-1-4-11-contains-a-hardcoded-credentials-vulnerability-that-allows-unauthenticated-attackers-to-recover-static-oauth-clientid-and-cli2026-10-30 https://bugrater.com/releases/cve-2026-7004-wit-synapps-runtime-through-1-4-11-contains-a-pre-authentication-reflected-cross-site-scripting-vulnerability-that-allows-unauthenticated-attackers-to-inject-an2026-10-30 https://bugrater.com/releases/cve-2026-7005-wit-synapps-runtime-through-1-4-11-contains-a-browser-mediated-cross-origin-request-forgery-vulnerability-that-allows-attackers-to-supply-an-arbitrary-target-ad2026-10-30 https://bugrater.com/releases/cve-2026-90888-unauthenticated-php-object-injection-in-leadsnap-1-25-versions2026-10-30 https://bugrater.com/releases/cve-2026-94175-unauthenticated-cross-site-scripting-xss-in-all-in-one-login-2-4-1-versions2026-10-30 https://bugrater.com/releases/cve-2026-115828-in-secret-server-versions-earlier-than-12-3-1-secret-server-did-not-always-validate-the-pin-or-biometric-check-when-using-a-fido2-compliant-device2026-10-30 https://bugrater.com/releases/cve-2026-115829-in-secret-server-versions-earlier-than-12-3-1-a-user-could-bypass-the-initial-login-step-and-authenticate-by-successfully-negotiating-the-second-factor-login-s2026-10-30 https://bugrater.com/releases/cve-2026-116239-in-server-mode-pgadmin-4-keeps-an-account-per-authentication-source-so-the-same-username-can-exist-as-for-example-an-internal-account-and-an-ldap-account-af2026-10-30 https://bugrater.com/releases/cve-2026-116241-pgadmin-4-s-import-export-data-tool-wraps-a-user-s-query-export-in-a-psql-copy-to-command-and-checks-that-the-query-s-parentheses-are-balanced-so-that-no2026-10-30 https://bugrater.com/releases/cve-2026-116243-pgadmin-4-runs-pg-dump-pg-restore-pg-dumpall-and-psql-from-the-binary-path-a-user-sets-in-their-preferences-in-server-mode-the-binary-path-was-refused-only-w2026-10-30 https://bugrater.com/releases/cve-2026-116250-in-server-mode-pgadmin-4-validates-a-path-a-user-gives-for-a-file-in-their-storage-directory-with-check-access-permission-and-then-opened-it-by-name-several2026-10-30 https://bugrater.com/releases/cve-2026-116251-pgadmin-4-did-not-invalidate-a-user-s-existing-sessions-when-their-password-changed-either-through-the-user-s-own-change-password-dialog-or-through-an-administ2026-10-30 https://bugrater.com/releases/cve-2026-116252-pgadmin-4-s-materialized-view-refresh-passed-the-target-database-s-name-to-psql-s-dbname-argument-unchanged-libpq-treats-a-dbname-value-containing-or2026-10-30 https://bugrater.com/releases/cacheflush-critical-unsupported-sa-contrib-2026-2762026-10-31 https://bugrater.com/releases/single-content-sync-critical-remote-code-execution-sa-contrib-2026-2752026-10-31 https://bugrater.com/releases/single-content-sync-critical-external-control-of-file-name-or-path-sa-contrib-2026-2742026-10-31 https://bugrater.com/releases/ai-artificial-intelligence-moderately-critical-cross-site-scripting-sa-contrib-2026-2732026-10-31 https://bugrater.com/releases/ai-artificial-intelligence-moderately-critical-cross-site-scripting-sa-contrib-2026-2722026-10-31 https://bugrater.com/releases/ai-artificial-intelligence-less-critical-information-disclosure-sa-contrib-2026-2712026-10-31 https://bugrater.com/releases/ai-artificial-intelligence-moderately-critical-access-bypass-sa-contrib-2026-2702026-10-31 https://bugrater.com/releases/ai-artificial-intelligence-critical-cross-site-scripting-sa-contrib-2026-2692026-10-31 https://bugrater.com/releases/hulaspark-security-releases-october-20262026-10-31 https://bugrater.com/releases/hupe13-security-releases-october-20262026-10-31 https://bugrater.com/releases/hwk-fr-security-releases-october-20262026-10-31 https://bugrater.com/releases/icagenda-com-security-releases-october-20262026-10-31 https://bugrater.com/releases/axa-group-security-releases-october-20262026-10-31 https://bugrater.com/releases/f3-factory-security-releases-october-20262026-10-31 https://bugrater.com/releases/eremef-security-releases-october-20262026-10-31 https://bugrater.com/releases/glitterware-security-releases-october-20262026-10-31 https://bugrater.com/releases/tufayellus-security-releases-october-20262026-10-31 https://bugrater.com/releases/cve-2026-119730-maxthon-browser-for-android-before-7-5-8-103-contains-an-address-bar-spoofing-vulnerability-that-allows-remote-attackers-to-misrepresent-a-page-s-origin-by-expl2026-10-31 https://bugrater.com/releases/cve-2026-78402-stack-based-buffer-overflow-and-out-of-bounds-write-vulnerability-in-thales-sentinel-keys-server-on-windows-allows-overflow-buffers-sentinel-keys-server-do2026-10-31 https://bugrater.com/releases/cve-2026-78403-stack-based-buffer-overflow-and-missing-authorization-vulnerability-in-thales-sentinel-keys-server-on-windows-allows-overflow-buffers-sentinel-keys-server-does2026-10-31 https://bugrater.com/releases/ztxz16-security-releases-october-20262026-10-31 https://bugrater.com/releases/llsourcell-security-releases-october-20262026-10-31 https://bugrater.com/releases/e2pdf-com-security-releases-october-20262026-10-31 https://bugrater.com/releases/satya-vinay-security-releases-october-20262026-10-31 https://bugrater.com/releases/fastify-oauth2-security-releases-october-20262026-10-31 https://bugrater.com/releases/mamunur-rashid-security-releases-october-20262026-10-31 https://bugrater.com/releases/wp-mailster-security-releases-october-20262026-10-31 https://bugrater.com/releases/surfer-security-releases-october-20262026-10-31 https://bugrater.com/releases/locustio-security-releases-october-20262026-10-31 https://bugrater.com/releases/tombursch-security-releases-october-20262026-10-31 https://bugrater.com/releases/purocean-security-releases-october-20262026-10-31 https://bugrater.com/releases/mopidy-security-releases-october-20262026-10-31 https://bugrater.com/releases/codexu-security-releases-october-20262026-10-31 https://bugrater.com/releases/aleksey-hoffman-security-releases-october-20262026-10-31 https://bugrater.com/releases/speaches-ai-security-releases-october-20262026-10-31 https://bugrater.com/releases/risingwavelabs-security-releases-october-20262026-10-31 https://bugrater.com/releases/bentoml-security-releases-october-20262026-10-31 https://bugrater.com/releases/langbot-app-security-releases-october-20262026-10-31 https://bugrater.com/releases/libtins-security-releases-october-20262026-10-31 https://bugrater.com/releases/netpbm-security-releases-october-20262026-10-31 https://bugrater.com/releases/rdesktop-security-releases-october-20262026-10-31 https://bugrater.com/releases/nkoriyama-security-releases-october-20262026-10-31 https://bugrater.com/releases/xqq-security-releases-october-20262026-10-31 https://bugrater.com/releases/krayin-security-releases-october-20262026-10-31 https://bugrater.com/releases/koalixswitzerland-security-releases-october-20262026-10-31 https://bugrater.com/releases/mi6-security-releases-october-20262026-10-31 https://bugrater.com/releases/flarum-security-releases-october-20262026-10-31 https://bugrater.com/releases/operacle-security-releases-october-20262026-10-31 https://bugrater.com/releases/boxyhq-security-releases-october-20262026-10-31 https://bugrater.com/releases/sunkaifei-security-releases-october-20262026-10-31 https://bugrater.com/releases/ai-genius-automations-security-releases-october-20262026-10-31 https://bugrater.com/releases/vraj404-security-releases-october-20262026-10-31 https://bugrater.com/releases/automattic-security-releases-october-20262026-10-31 https://bugrater.com/releases/camunda-security-releases-october-20262026-10-31 https://bugrater.com/releases/gdevelop-security-releases-october-20262026-10-31 https://bugrater.com/releases/mindee-security-releases-october-20262026-10-31 https://bugrater.com/releases/semaphoreui-security-releases-october-20262026-10-31 https://bugrater.com/releases/nocobase-security-releases-october-20262026-10-31 https://bugrater.com/releases/andialbrecht-security-releases-october-20262026-10-31 https://bugrater.com/releases/crewaiinc-security-releases-october-20262026-10-31 https://bugrater.com/releases/airjp73-security-releases-october-20262026-10-31 https://bugrater.com/releases/docling-project-security-releases-october-20262026-10-31 https://bugrater.com/releases/micromatch-security-releases-october-20262026-10-31 https://bugrater.com/releases/progressive-robot-ltd-security-releases-october-20262026-10-31 https://bugrater.com/releases/netskope-inc-security-releases-october-20262026-10-31 https://bugrater.com/releases/memtensor-security-releases-october-20262026-10-31 https://bugrater.com/releases/streamsoft-security-releases-october-20262026-10-31 https://bugrater.com/releases/cve-2026-117645-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-vulnerability-in-phoenixframework-phoenix-html-allows-an-attacker-who-contr2026-10-31 https://bugrater.com/releases/cve-2026-117666-improper-validation-of-certificate-with-host-mismatch-vulnerability-in-deadtrickster-ssl-verify-fun-allows-an-adversary-in-the-middle-to-impersonate-a-tls-peer2026-10-31 https://bugrater.com/releases/cve-2026-111578-the-pdf-invoices-packing-slips-for-woocommerce-wordpress-plugin-from-5-16-2-before-5-16-5-does-not-properly-escape-several-customer-supplied-order-fields-in2026-10-31 https://bugrater.com/releases/cve-2026-118938-in-trail-of-bits-fickling-through-0-1-12-a-pickle-stack-global-operand-carrying-a-dotted-qualname-for-example-values-read-file-is-resolved-by-pickle-s2026-10-31 https://bugrater.com/releases/cve-2026-16760-in-trail-of-bits-fickling-through-0-1-12-the-process-import-method-in-fickle-py-adds-an-imported-name-to-the-likely-safe-imports-set-whenever-the-source-mod2026-10-31 https://bugrater.com/releases/cve-2026-117656-acceptance-of-extraneous-untrusted-data-with-trusted-data-vulnerability-in-the-sign-in-with-apple-strategy-in-pow-auth-assent-allows-an-unauthenticated-remote-a2026-10-31 https://bugrater.com/releases/cve-2026-77152-improper-authorization-vulnerability-in-drupal-field-collection-for-drupal-7-allows-a-user-with-the-edit-field-collections-permission-to-bypass-access-control2026-10-31 https://bugrater.com/releases/cve-2026-110176-the-file-force-download-module-for-drupal-7-implements-hook-file-download-to-add-a-content-disposition-header-when-a-file-url-carries-the-download-query-param2026-10-31 https://bugrater.com/releases/cve-2026-100155-the-the-ninja-forms-contact-form-builder-with-calculators-quizzes-signatures-ai-form-builder-plugin-for-wordpress-is-vulnerable-to-arbitrary-shortcode-exe2026-10-31 https://bugrater.com/releases/cve-2026-101326-the-the-ninja-forms-contact-form-builder-with-calculators-quizzes-signatures-ai-form-builder-plugin-for-wordpress-is-vulnerable-to-arbitrary-shortcode-exe2026-10-31 https://bugrater.com/releases/cve-2026-109234-the-meow-lightbox-plugin-for-wordpress-is-vulnerable-to-stored-cross-site-scripting-via-the-post-content-bbpress-reply-body-parameter-in-all-versions-up-to2026-10-31 https://bugrater.com/releases/cve-2026-109997-the-ninja-forms-contact-form-builder-with-calculators-quizzes-signatures-ai-form-builder-plugin-for-wordpress-is-vulnerable-to-stored-cross-site-scripting2026-10-31 https://bugrater.com/releases/cve-2026-110042-the-payment-forms-for-paystack-wordpress-plugin-before-4-0-6-does-not-properly-restrict-access-to-a-page-that-displays-its-stored-configuration-allowing-users2026-10-31 https://bugrater.com/releases/cve-2026-110808-the-essential-addons-for-elementor-wordpress-plugin-before-6-8-8-does-not-correctly-restrict-who-may-set-the-role-assigned-to-accounts-created-through-its-regi2026-10-31 https://bugrater.com/releases/cve-2026-116520-the-ppwp-password-protect-pages-plugin-for-wordpress-is-vulnerable-to-stored-cross-site-scripting-via-the-comment-shortcode-attribute-desc-below-form-and2026-10-31 https://bugrater.com/releases/cve-2026-116563-the-photo-gallery-sliders-proofing-and-themes-nextgen-gallery-plugin-for-wordpress-is-vulnerable-to-stored-dom-based-cross-site-scripting-via-the-comment2026-10-31 https://bugrater.com/releases/cve-2026-118043-the-bulk-media-register-wordpress-plugin-before-2-01-does-not-properly-validate-a-user-supplied-path-before-moving-a-file-on-the-server-allowing-users-with-the2026-10-31 https://bugrater.com/releases/cve-2026-118184-the-premium-packages-wordpress-plugin-before-7-2-2-does-not-prevent-unauthenticated-visitors-from-overwriting-the-stored-price-of-items-in-their-shopping-cart2026-10-31 https://bugrater.com/releases/cve-2026-118185-the-security-optimizer-wordpress-plugin-before-1-6-9-does-not-limit-the-number-of-two-factor-authentication-codes-that-can-be-submitted-for-a-pending-login-al2026-10-31 https://bugrater.com/releases/cve-2026-118437-the-buddyforms-wordpress-plugin-before-2-10-1-does-not-properly-verify-ownership-before-deleting-guest-uploaded-attachments-allowing-unauthenticated-attackers2026-10-31 https://bugrater.com/releases/cve-2026-118438-the-firelight-lightbox-wordpress-plugin-before-2-3-24-does-not-properly-escape-image-attribute-values-before-processing-them-in-the-browser-which-could-allow-u2026-10-31 https://bugrater.com/releases/cve-2026-118629-the-all-in-one-video-gallery-wordpress-plugin-before-5-0-0-does-not-check-a-video-s-publication-status-before-rendering-it-on-its-player-page-allowing-unauthe2026-10-31 https://bugrater.com/releases/cve-2026-118638-the-mapster-wp-maps-wordpress-plugin-before-2-0-6-does-not-perform-any-authorization-check-on-a-rest-api-route-that-writes-post-data-allowing-unauthenticated-a2026-10-31 https://bugrater.com/releases/cve-2026-119977-wordpress-core-is-vulnerable-to-remote-code-execution-in-versions-4-7-through-7-1-3-this-is-due-to-predictable-web-accessible-staging-paths-used-during-full-p2026-10-31 https://bugrater.com/releases/cve-2026-82214-the-quick-event-manager-wordpress-plugin-before-9-19-does-not-verify-the-status-or-type-of-the-requested-post-before-returning-its-details-through-a-calendar-ex2026-10-31 https://bugrater.com/releases/cve-2026-92294-the-spectra-gutenberg-blocks-website-builder-for-the-block-editor-plugin-for-wordpress-is-vulnerable-to-limited-file-deletion-due-to-insufficient-file-path-va2026-10-31 https://bugrater.com/releases/cve-2026-94361-the-payable-payment-gateway-for-woocommerce-wordpress-plugin-before-1-3-1-does-not-verify-the-authenticity-of-an-incoming-payment-notification-before-marking-a2026-10-31 https://bugrater.com/releases/cve-2026-107653-the-surecart-ecommerce-made-easy-for-selling-physical-products-digital-downloads-subscriptions-donations-payments-plugin-for-wordpress-is-vulnerable-to2026-10-31 https://bugrater.com/releases/cve-2026-107750-the-pdf-invoices-packing-slips-for-woocommerce-plugin-for-wordpress-is-vulnerable-to-stored-cross-site-scripting-via-the-billing-address-first-name-last-na2026-10-31 https://bugrater.com/releases/cve-2026-107765-the-discussion-board-wordpress-forum-plugin-plugin-for-wordpress-is-vulnerable-to-stored-cross-site-scripting-in-versions-up-to-and-including-2-6-0-via-the2026-10-31 https://bugrater.com/releases/cve-2026-109217-the-pdf-invoices-packing-slips-for-woocommerce-plugin-for-wordpress-is-vulnerable-to-sensitive-information-exposure-in-all-versions-up-to-and-including-5-162026-10-31 https://bugrater.com/releases/cve-2026-109220-the-pdf-invoice-for-woocommerce-drag-and-drop-template-builder-plugin-for-wordpress-is-vulnerable-to-php-object-injection-in-all-versions-up-to-and-including2026-10-31 https://bugrater.com/releases/cve-2026-109386-the-hustle-email-marketing-lead-generation-optins-popups-plugin-for-wordpress-is-vulnerable-to-authorization-bypass-in-all-versions-up-to-and-including-72026-10-31 https://bugrater.com/releases/cve-2026-110251-the-photo-reviews-for-woocommerce-plugin-for-wordpress-is-vulnerable-to-unauthorized-media-library-file-deletion-in-all-versions-up-to-and-including-1-2-31-t2026-10-31 https://bugrater.com/releases/cve-2026-111109-the-webmention-plugin-for-wordpress-is-vulnerable-to-stored-cross-site-scripting-via-the-open-graph-og-title-meta-tag-of-a-webmention-source-url-in-versions-up2026-10-31 https://bugrater.com/releases/cve-2026-111254-the-w3-total-cache-plugin-for-wordpress-is-vulnerable-to-stored-cross-site-scripting-via-the-comment-parameter-in-all-versions-up-to-and-including-2-10-7-du2026-10-31 https://bugrater.com/releases/cve-2026-115840-the-vikrentcar-car-rental-management-system-plugin-for-wordpress-is-vulnerable-to-stored-cross-site-scripting-via-the-poplink-parameter-in-all-versions-up-to2026-10-31 https://bugrater.com/releases/cve-2026-116522-the-relevanssi-a-better-search-plugin-for-wordpress-is-vulnerable-to-stored-cross-site-scripting-via-the-comment-parameter-in-all-versions-up-to-and-includ2026-10-31 https://bugrater.com/releases/cve-2026-116546-the-wp-job-portal-ai-powered-recruitment-system-for-company-or-job-board-website-plugin-for-wordpress-is-vulnerable-to-stored-cross-site-scripting-via-the-de2026-10-31 https://bugrater.com/releases/cve-2026-116548-the-vikrentcar-car-rental-management-system-plugin-for-wordpress-is-vulnerable-to-stored-cross-site-scripting-via-the-optionals-parameter-in-all-versions-up-t2026-10-31 https://bugrater.com/releases/cve-2026-116557-the-wp-booking-system-booking-calendar-plugin-for-wordpress-is-vulnerable-to-unauthorized-modification-of-data-due-to-a-missing-capability-check-on-the-wpbs-a2026-10-31 https://bugrater.com/releases/cve-2026-118070-the-welcart-e-commerce-plugin-for-wordpress-is-vulnerable-to-stored-cross-site-scripting-via-the-gid-parameter-in-all-versions-up-to-and-including-2-12-5-du2026-10-31 https://bugrater.com/releases/cve-2026-119065-the-shipping-zones-by-drawing-for-woocommerce-plugin-for-wordpress-is-vulnerable-to-stored-cross-site-scripting-via-the-szbd-picked-checkout-parameter-in-vers2026-10-31 https://bugrater.com/releases/cve-2026-119089-the-thirstyaffiliates-affiliate-links-link-branding-link-tracking-marketing-plugin-plugin-for-wordpress-is-vulnerable-to-stored-cross-site-scripting-via-t2026-10-31 https://bugrater.com/releases/cve-2026-119162-the-user-submitted-posts-enable-users-to-submit-posts-from-the-front-end-plugin-for-wordpress-is-vulnerable-to-stored-dom-based-cross-site-scripting-via-the2026-10-31 https://bugrater.com/releases/cve-2026-119163-the-funnelkit-automations-email-marketing-automation-and-crm-for-wordpress-woocommerce-plugin-for-wordpress-is-vulnerable-to-time-based-sql-injection-via-th2026-10-31 https://bugrater.com/releases/cve-2026-119166-the-welcart-e-commerce-plugin-for-wordpress-is-vulnerable-to-insecure-direct-object-reference-in-all-versions-up-to-and-including-2-12-5-via-the-member-id2026-10-31 https://bugrater.com/releases/cve-2026-119980-the-userswp-front-end-login-form-user-registration-user-profile-members-directory-plugin-for-wordpress-is-vulnerable-to-unauthorized-account-access-via-us2026-10-31 https://bugrater.com/releases/cve-2026-11396-the-product-filter-for-woocommerce-by-wbw-plugin-for-wordpress-is-vulnerable-to-missing-authorization-information-disclosure-in-all-versions-up-to-and-includ2026-10-31 https://bugrater.com/releases/cve-2026-120019-the-w3-total-cache-plugin-for-wordpress-is-vulnerable-to-stored-cross-site-scripting-via-the-comment-parameter-in-all-versions-up-to-and-including-2-10-7-du2026-10-31 https://bugrater.com/releases/cve-2026-120040-the-mail-logging-catcher-plugin-for-wordpress-is-vulnerable-to-sensitive-information-exposure-in-all-versions-up-to-and-including-2-2-0-via-the-message-pa2026-10-31 https://bugrater.com/releases/cve-2026-88942-the-product-filter-for-woocommerce-by-wbw-plugin-for-wordpress-is-vulnerable-to-reflected-cross-site-scripting-via-wpf-fid-json-parameter-in-all-versions-up-t2026-10-31 https://bugrater.com/releases/cve-2026-89270-the-popup-builder-create-highly-converting-mobile-friendly-marketing-popups-plugin-for-wordpress-is-vulnerable-to-authorization-bypass-in-all-versions-up-to2026-10-31 https://bugrater.com/releases/cve-2026-90960-the-seraphinite-accelerator-plugin-for-wordpress-is-vulnerable-to-sensitive-information-exposure-in-all-versions-up-to-and-including-2-29-24-via-the-wp-object2026-10-31 https://bugrater.com/releases/cve-2025-11455-the-perfect-images-plugin-for-wordpress-is-vulnerable-to-unauthorized-modification-of-data-due-to-a-missing-capability-check-on-the-wp-json-wp-retina-2x-v1-rep2026-10-31 https://bugrater.com/releases/cve-2025-9462-the-wp2leads-plugin-for-wordpress-is-vulnerable-to-time-based-sql-injection-via-the-order-parameter-in-all-versions-up-to-and-including-3-5-6-due-to-insuffi2026-10-31 https://bugrater.com/releases/cve-2026-103898-the-wp-social-login-and-register-social-counter-plugin-for-wordpress-is-vulnerable-to-authentication-bypass-in-all-versions-up-to-and-including-3-2-2-this-is2026-10-31 https://bugrater.com/releases/cve-2026-103962-the-user-frontend-membership-user-registration-user-profile-user-directory-content-restriction-with-frontend-post-submission-plugin-for-wordpress-is-vuln2026-10-31 https://bugrater.com/releases/cve-2026-103997-the-redux-framework-plugin-for-wordpress-is-vulnerable-to-authorization-bypass-in-all-versions-up-to-and-including-4-5-15-this-is-due-to-the-plugin-not-prope2026-10-31 https://bugrater.com/releases/cve-2026-104012-the-rox-appointment-booking-appointment-booking-scheduling-solution-plugin-for-wordpress-is-vulnerable-to-privilege-escalation-via-mass-assignment-in-all-vers2026-10-31 https://bugrater.com/releases/cve-2026-107759-the-wpo365-microsoft-365-graph-mailer-plugin-for-wordpress-is-vulnerable-to-stored-cross-site-scripting-via-the-subject-via-wp-mail-phpmailer-e-g-cf7-your2026-10-31 https://bugrater.com/releases/cve-2026-110023-the-wp-data-access-app-builder-for-tables-forms-dashboards-charts-maps-plugin-for-wordpress-is-vulnerable-to-sensitive-information-exposure-in-all-versio2026-10-31 https://bugrater.com/releases/cve-2026-111070-the-content-pilot-autoblogging-affiliate-marketing-suite-plugin-for-wordpress-is-vulnerable-to-stored-cross-site-scripting-in-versions-up-to-and-including2026-10-31 https://bugrater.com/releases/cve-2026-111592-the-co-authors-multiple-authors-and-guest-authors-in-an-author-box-with-publishpress-authors-plugin-for-wordpress-is-vulnerable-to-stored-cross-site-scripting2026-10-31 https://bugrater.com/releases/cve-2026-116512-the-project-manager-ai-powered-project-management-task-management-kanban-board-time-tracker-plugin-for-wordpress-is-vulnerable-to-remote-code-execution-in2026-10-31 https://bugrater.com/releases/cve-2026-116535-the-seopress-ai-seo-plugin-on-site-seo-plugin-for-wordpress-is-vulnerable-to-stored-cross-site-scripting-via-the-display-name-parameter-in-all-versions-up2026-10-31 https://bugrater.com/releases/cve-2026-118057-the-shield-security-smart-bot-blocking-brute-force-login-protection-file-scanning-plugin-for-wordpress-is-vulnerable-to-stored-cross-site-scripting-via-the2026-10-31 https://bugrater.com/releases/cve-2026-119096-the-uncanny-toolkit-for-learndash-plugin-for-wordpress-is-vulnerable-to-authentication-bypass-in-versions-up-to-and-including-3-8-2-via-the-email-parameter2026-10-31 https://bugrater.com/releases/cve-2026-120070-the-user-frontend-membership-user-registration-user-profile-user-directory-content-restriction-with-frontend-post-submission-plugin-for-wordpress-is-vuln2026-10-31 https://bugrater.com/releases/cve-2026-101325-the-newsletters-plugin-for-wordpress-is-vulnerable-to-time-based-sql-injection-via-the-id-parameter-in-all-versions-up-to-and-including-4-18-1-due-to-insuff2026-10-31 https://bugrater.com/releases/cve-2026-103882-the-acadlix-lms-ai-quiz-maker-online-exam-course-plugin-for-wordpress-plugin-for-wordpress-is-vulnerable-to-arbitrary-file-deletion-due-to-insufficient-fil2026-10-31 https://bugrater.com/releases/cve-2026-103915-the-booking-for-appointments-and-events-calendar-amelia-plugin-for-wordpress-is-vulnerable-to-sensitive-information-exposure-in-all-versions-up-to-and-includ2026-10-31 https://bugrater.com/releases/cve-2026-109367-the-all-in-one-seo-ai-seo-plugin-to-boost-seo-rankings-traffic-schema-local-seo-sitemap-seo-insights-plugin-for-wordpress-is-vulnerable-to-sensitive-i2026-10-31 https://bugrater.com/releases/cve-2026-110530-the-feedwordpress-plugin-for-wordpress-is-vulnerable-to-stored-cross-site-scripting-in-versions-up-to-and-including-2026-0517-via-syndicated-rss-atom-feed-con2026-10-31 https://bugrater.com/releases/cve-2026-118235-the-simpleform-form-maker-to-chat-apps-with-quiz-poll-and-multi-lead-notifications-plugin-for-wordpress-is-vulnerable-to-arbitrary-file-upload-in-all-version2026-10-31 https://bugrater.com/releases/cve-2026-119160-the-smart-post-post-grid-post-carousel-post-slider-gutenberg-blocks-for-blog-news-plugin-for-wordpress-is-vulnerable-to-stored-cross-site-scripting-via-th2026-10-31 https://bugrater.com/releases/cve-2026-100151-the-ninja-forms-contact-form-builder-with-calculators-quizzes-signatures-ai-form-builder-plugin-for-wordpress-is-vulnerable-to-reflected-dom-based-cross-s2026-10-31 https://bugrater.com/releases/cve-2026-104926-the-woocommerce-extra-product-options-pro-plugin-for-wordpress-is-vulnerable-to-reflected-cross-site-scripting-via-the-fieldname-start-fieldname-end-par2026-10-31 https://bugrater.com/releases/cve-2026-107711-the-flexstock-product-stock-sync-with-google-sheets-for-woocommerce-plugin-for-wordpress-is-vulnerable-to-stored-cross-site-scripting-via-the-products-post2026-10-31 https://bugrater.com/releases/cve-2026-109197-the-wp-directory-kit-plugin-for-wordpress-is-vulnerable-to-generic-sql-injection-via-the-idfield-parameter-in-all-versions-up-to-and-including-1-6-0-due-to2026-10-31 https://bugrater.com/releases/cve-2026-109231-the-germanized-for-woocommerce-plugin-for-wordpress-is-vulnerable-to-unauthorized-access-of-private-data-via-activation-token-reuse-in-versions-up-to-and-inclu2026-10-31 https://bugrater.com/releases/cve-2026-116752-the-geodirectory-wp-business-directory-plugin-and-classified-listings-directory-plugin-for-wordpress-is-vulnerable-to-stored-cross-site-scripting-via-the-pos2026-10-31 https://bugrater.com/releases/cve-2026-118598-a-logic-error-in-epiphany-s-site-permission-handling-can-cause-camera-and-microphone-access-to-be-granted-when-the-user-only-approves-a-different-permission-i2026-10-31 https://bugrater.com/releases/cve-2026-118599-a-file-overwrite-vulnerability-exists-in-epiphany-when-installing-webextension-packages-from-xpi-files-in-src-webextension-ephy-web-extension-manager-c-deco2026-10-31 https://bugrater.com/releases/cve-2026-120114-the-debug-log-manager-conveniently-monitor-and-inspect-errors-plugin-for-wordpress-is-vulnerable-to-stored-cross-site-scripting-via-the-message-and-pageurl2026-10-31 https://bugrater.com/releases/cve-2026-120194-a-flaw-was-found-in-json-glib-the-jsonpath-slice-evaluator-used-by-json-path-query-can-enter-an-infinite-loop-when-given-a-slice-expression-with-a-negative-s2026-10-31 https://bugrater.com/releases/cve-2026-76010-the-photo-gallery-sliders-proofing-and-themes-nextgen-gallery-plugin-for-wordpress-is-vulnerable-to-remote-code-execution-in-all-versions-up-to-and-includi2026-10-31 https://bugrater.com/releases/cve-2026-96554-the-buddyboss-platform-plugin-for-wordpress-is-vulnerable-to-stored-cross-site-scripting-via-group-name-in-all-versions-up-to-and-including-3-6-0-due-to-insuf2026-10-31 https://bugrater.com/releases/cve-2026-15272-the-web-2-0-directory-plugin-for-wordpress-is-vulnerable-to-time-based-sql-injection-via-the-w2dc-level-filter-parameter-in-all-versions-up-to-and-including2026-10-31 https://bugrater.com/releases/cve-2026-102212-heap-based-buffer-overflow-in-opengear-im72xx-cm71xx-and-acm70xx-firmware-versions-4-8-0-through-5-5-2-on-console-server-appliances-allows-an-unauthenticated2026-10-31 https://bugrater.com/releases/cve-2026-120199-learnhouse-before-1-1-1-contains-a-missing-authorization-vulnerability-in-the-assignment-api-that-allows-authenticated-users-to-read-other-users-grades-and-sub2026-10-31 https://bugrater.com/releases/cve-2026-120200-nexterm-through-1-2-2-beta-contains-a-missing-authorization-vulnerability-that-allows-authenticated-users-to-hibernate-resume-or-terminate-other-users-remote2026-10-31 https://bugrater.com/releases/cve-2026-120201-jpom-2-10-0-through-2-11-12-contains-an-authentication-bypass-vulnerability-that-allows-unauthenticated-attackers-to-gain-super-administrator-access-by-injectin2026-10-31 https://bugrater.com/releases/cve-2026-120202-highflame-ramparts-0-8-1-through-0-8-10-contains-a-security-scan-bypass-vulnerability-that-allows-attackers-to-hide-malicious-payloads-because-collect-bundle-si2026-10-31 https://bugrater.com/releases/cve-2026-120203-showdoc-2-8-14-before-3-9-6-contains-a-code-injection-vulnerability-in-its-mock-feature-that-allows-authenticated-users-to-execute-shell-commands-through-mockjs2026-10-31 https://bugrater.com/releases/cve-2026-120204-deepinfer-through-0-1-0-contains-a-path-traversal-vulnerability-in-the-unauthenticated-profile-endpoint-that-allows-remote-attackers-to-create-arbitrary-direct2026-10-31 https://bugrater.com/releases/cve-2026-120205-thelia-before-3-1-0-contains-a-stored-cross-site-scripting-vulnerability-in-forsomecustomers-getsummary-that-allows-unauthenticated-attackers-to-inject-scrip2026-10-31 https://bugrater.com/releases/cve-2026-120206-thelia-before-3-2-0-contains-a-cross-site-request-forgery-vulnerability-in-the-back-office-that-allows-attackers-to-forge-administrative-actions-because-per-ses2026-10-31 https://bugrater.com/releases/cve-2026-120207-thelia-page-module-before-2-0-4-contains-a-cross-site-request-forgery-vulnerability-that-allows-remote-attackers-to-delete-page-tags-documents-and-images-by-ab2026-10-31 https://bugrater.com/releases/cve-2026-120208-libheif-1-18-0-before-1-23-3-contains-a-heap-based-buffer-overflow-vulnerability-in-unc-decoder-mixed-interleave-processtile-that-allows-attackers-to-write-o2026-10-31 https://bugrater.com/releases/cve-2026-120209-aj-report-through-1-7-1-signs-share-tokens-with-a-hard-coded-jwt-secret-allowing-attackers-to-forge-valid-share-tokens-offline-attackers-can-mint-a-token-with2026-10-31 https://bugrater.com/releases/cve-2026-120210-ffmpeg-5-0-through-9-0-2-contains-a-path-traversal-vulnerability-in-the-imf-demuxer-that-allows-attackers-to-open-files-outside-the-package-via-unvalidated-asse2026-10-31 https://bugrater.com/releases/cve-2026-118636-unsupported-when-assigned-javanativemessagedecoder-in-the-mina-3-0-codec-module-calls-objectinputstream-readobject-on-frame-bytes-with-no-class-filter2026-10-31 https://bugrater.com/releases/cve-2026-120135-uncontrolled-recursion-vulnerability-in-apache-thrift-java-bindings-this-issue-affects-apache-thrift-before-0-24-0-users-are-recommended-to-upgrade-to2026-10-31 https://bugrater.com/releases/wuxi-wubang-security-software-security-releases-october-20262026-11-01 https://bugrater.com/releases/ccc-attestation-security-releases-october-20262026-11-01 https://bugrater.com/releases/ticktick-limited-security-releases-october-20262026-11-01 https://bugrater.com/releases/fenrir-security-releases-october-20262026-11-01 https://bugrater.com/releases/cognicellai-security-releases-october-20262026-11-01 https://bugrater.com/releases/antoinersx-security-releases-october-20262026-11-01 https://bugrater.com/releases/ai-artificial-intelligence-moderately-critical-information-disclosure-sa-contrib-2026-2682026-11-01 https://bugrater.com/releases/ai-artificial-intelligence-moderately-critical-cross-site-scripting-sa-contrib-2026-2672026-11-01 https://bugrater.com/releases/ai-artificial-intelligence-moderately-critical-cross-site-scripting-sa-contrib-2026-2662026-11-01 https://bugrater.com/releases/commerce-stripe-moderately-critical-cross-site-scripting-sa-contrib-2026-2652026-11-01 https://bugrater.com/releases/commerce-stripe-moderately-critical-improper-verification-of-cryptographic-signature-sa-contrib-2026-2642026-11-01 https://bugrater.com/releases/commerce-stripe-critical-cross-site-request-forgery-sa-contrib-2026-2632026-11-01 https://bugrater.com/releases/commerce-shipping-less-critical-access-bypass-sa-contrib-2026-2622026-11-01 https://bugrater.com/releases/commerce-shipping-moderately-critical-access-bypass-sa-contrib-2026-2612026-11-01 https://bugrater.com/releases/icret-security-releases-october-20262026-11-01 https://bugrater.com/releases/ifso-security-releases-october-20262026-11-01 https://bugrater.com/releases/cve-2026-120185-a-security-flaw-has-been-discovered-in-ken678-yzncms-up-to-2-2-0-the-affected-element-is-the-function-backend-of-the-file-app-admin-controller-auth-group-php-o2026-11-01 https://bugrater.com/releases/cve-2026-120189-a-vulnerability-was-identified-in-d-link-dir-505-1-10b02-affected-is-the-function-save-upload-file-mp-upload-file-of-the-file-usr-bin-tftpd-of-the-component-t2026-11-01 https://bugrater.com/releases/cve-2026-120190-a-security-flaw-has-been-discovered-in-postybirb-plus-up-to-3-1-75-affected-by-this-vulnerability-is-an-unknown-functionality-of-the-file-ui-src-views-submissi2026-11-01 https://bugrater.com/releases/cve-2026-120191-a-weakness-has-been-identified-in-presenton-up-to-0-9-11-beta-affected-by-this-issue-is-some-unknown-functionality-of-the-component-api-this-manipulation-caus2026-11-01 https://bugrater.com/releases/cve-2026-120243-ffmpeg-2-0-through-9-0-2-contains-a-use-of-uninitialized-variable-vulnerability-in-the-go2meeting-decoder-that-allows-attackers-to-leak-stack-memory-through-out2026-11-01 https://bugrater.com/releases/cve-2026-120244-ffmpeg-2-1-through-9-0-2-contains-a-use-of-uninitialized-resource-vulnerability-in-the-pcx-decoder-that-allows-attackers-to-leak-heap-memory-through-truncated-r2026-11-01 https://bugrater.com/releases/cve-2026-120245-ffmpeg-0-10-through-9-0-2-contains-a-use-of-uninitialized-resource-vulnerability-in-sunrast-decode-frame-that-leaks-heap-memory-when-decoding-truncated-1-bit2026-11-01 https://bugrater.com/releases/cve-2026-120246-ffmpeg-4-4-through-9-0-2-contains-a-use-of-uninitialized-variable-vulnerability-in-the-cdxl-decoder-that-leaks-stack-memory-into-decoded-pixels-via-unfilled-ham2026-11-01 https://bugrater.com/releases/cve-2026-120247-ffmpeg-2-3-through-9-0-2-contains-a-use-of-uninitialized-resource-vulnerability-in-the-huffyuv-decoder-that-allows-attackers-to-leak-heap-memory-into-decoded-pi2026-11-01 https://bugrater.com/releases/cve-2026-120248-thelia-before-3-1-1-contains-a-stored-cross-site-scripting-vulnerability-that-allows-authenticated-back-office-administrators-with-store-update-permission-to-in2026-11-01 https://bugrater.com/releases/cve-2026-120249-thelia-back-office-default-twig-template-before-1-1-1-contains-a-cross-site-request-forgery-vulnerability-in-the-admin-product-combinations-update-and-admin-p2026-11-01 https://bugrater.com/releases/cve-2026-120250-openalgo-1-0-0-29-before-2-0-3-1-contains-an-improper-certificate-validation-vulnerability-in-utils-email-utils-py-and-utils-email-debug-py-that-disables-tls-ho2026-11-01 https://bugrater.com/releases/cve-2026-120251-imagecodecs-2026-3-6-through-2026-10-10-contains-an-infinite-loop-vulnerability-in-ccitt-fax4-decode-size-that-allows-attackers-to-hang-the-calling-process-by2026-11-01 https://bugrater.com/releases/cve-2026-120252-imagecodecs-2023-1-23-through-2026-10-10-contains-a-stack-based-buffer-overflow-vulnerability-in-the-lossless-jpeg-define-huffman-table-parser-in-decode-jpegsof2026-11-01 https://bugrater.com/releases/cve-2026-120192-a-security-vulnerability-has-been-detected-in-presenton-up-to-0-9-11-beta-this-affects-an-unknown-part-of-the-file-app-data-of-the-component-desktop-authentic2026-11-01 https://bugrater.com/releases/msrc-cve-2026-969452026-11-01 https://bugrater.com/releases/msrc-cve-2026-969462026-11-01 https://bugrater.com/releases/msrc-cve-2026-969472026-11-01 https://bugrater.com/releases/msrc-cve-2026-969482026-11-01 https://bugrater.com/releases/msrc-cve-2026-969492026-11-01 https://bugrater.com/releases/msrc-cve-2026-969502026-11-01 https://bugrater.com/releases/msrc-cve-2026-969512026-11-01 https://bugrater.com/releases/msrc-cve-2026-969572026-11-01 https://bugrater.com/releases/msrc-cve-2026-969522026-11-01 https://bugrater.com/releases/msrc-cve-2026-969582026-11-01 https://bugrater.com/releases/msrc-cve-2026-969532026-11-01 https://bugrater.com/releases/msrc-cve-2026-969592026-11-01 https://bugrater.com/releases/msrc-cve-2026-969602026-11-01 https://bugrater.com/releases/msrc-cve-2026-977482026-11-01 https://bugrater.com/releases/msrc-cve-2026-970072026-11-01 https://bugrater.com/releases/msrc-cve-2026-977792026-11-01 https://bugrater.com/releases/msrc-cve-2026-970082026-11-01 https://bugrater.com/releases/msrc-cve-2026-977562026-11-01 https://bugrater.com/releases/msrc-cve-2026-977692026-11-01 https://bugrater.com/releases/msrc-cve-2026-977732026-11-01 https://bugrater.com/releases/msrc-cve-2026-970102026-11-01 https://bugrater.com/releases/msrc-cve-2026-977432026-11-01 https://bugrater.com/releases/msrc-cve-2026-977772026-11-01 https://bugrater.com/releases/msrc-cve-2026-977622026-11-01 https://bugrater.com/releases/msrc-cve-2026-970112026-11-01 https://bugrater.com/releases/msrc-cve-2026-977572026-11-01 https://bugrater.com/releases/msrc-cve-2026-977382026-11-01 https://bugrater.com/releases/msrc-cve-2026-977602026-11-01 https://bugrater.com/releases/msrc-cve-2026-977422026-11-01 https://bugrater.com/releases/msrc-cve-2026-977462026-11-01 https://bugrater.com/releases/msrc-cve-2026-970042026-11-01 https://bugrater.com/releases/msrc-cve-2026-977752026-11-01 https://bugrater.com/releases/msrc-cve-2026-977722026-11-01 https://bugrater.com/releases/msrc-cve-2026-977412026-11-01 https://bugrater.com/releases/msrc-cve-2026-977632026-11-01 https://bugrater.com/releases/msrc-cve-2026-977682026-11-01 https://bugrater.com/releases/msrc-cve-2026-977452026-11-01 https://bugrater.com/releases/msrc-cve-2026-960712026-11-01 https://bugrater.com/releases/msrc-cve-2026-961182026-11-01 https://bugrater.com/releases/msrc-cve-2026-977882026-11-01 https://bugrater.com/releases/msrc-cve-2026-977902026-11-01 https://bugrater.com/releases/msrc-cve-2026-977872026-11-01 https://bugrater.com/releases/msrc-cve-2026-977922026-11-01 https://bugrater.com/releases/msrc-cve-2026-977932026-11-01 https://bugrater.com/releases/msrc-cve-2026-1002002026-11-01 https://bugrater.com/releases/msrc-cve-2026-1002012026-11-01 https://bugrater.com/releases/msrc-cve-2026-1002022026-11-01 https://bugrater.com/releases/msrc-cve-2026-1002032026-11-01 https://bugrater.com/releases/msrc-cve-2026-1002112026-11-01 https://bugrater.com/releases/msrc-cve-2026-1002052026-11-01 https://bugrater.com/releases/msrc-cve-2026-1002072026-11-01 https://bugrater.com/releases/msrc-cve-2026-1002092026-11-01 https://bugrater.com/releases/msrc-cve-2026-1002102026-11-01 https://bugrater.com/releases/msrc-cve-2026-1002122026-11-01 https://bugrater.com/releases/msrc-cve-2026-582802026-11-01 https://bugrater.com/releases/msrc-cve-2026-1028512026-11-01 https://bugrater.com/releases/msrc-cve-2026-1083962026-11-01 https://bugrater.com/releases/msrc-cve-2026-1002142026-11-01 https://bugrater.com/releases/msrc-cve-2026-1002172026-11-01 https://bugrater.com/releases/msrc-cve-2026-1050152026-11-01 https://bugrater.com/releases/msrc-cve-2026-1057292026-11-01 https://bugrater.com/releases/msrc-cve-2026-1002162026-11-01 https://bugrater.com/releases/msrc-cve-2026-1028702026-11-01 https://bugrater.com/releases/msrc-cve-2026-1002182026-11-01 https://bugrater.com/releases/msrc-cve-2026-1002192026-11-01 https://bugrater.com/releases/msrc-cve-2026-1002202026-11-01 https://bugrater.com/releases/msrc-cve-2026-882192026-11-01 https://bugrater.com/releases/msrc-cve-2026-695062026-11-01 https://bugrater.com/releases/msrc-cve-2026-1002222026-11-01 https://bugrater.com/releases/msrc-cve-2026-1002252026-11-01 https://bugrater.com/releases/msrc-cve-2026-702122026-11-01 https://bugrater.com/releases/msrc-cve-2026-882262026-11-01 https://bugrater.com/releases/msrc-cve-2026-700232026-11-01 https://bugrater.com/releases/msrc-cve-2026-1021872026-11-01 https://bugrater.com/releases/msrc-cve-2026-962092026-11-01 https://bugrater.com/releases/msrc-cve-2026-1021882026-11-01 https://bugrater.com/releases/msrc-cve-2026-1021892026-11-01 https://bugrater.com/releases/msrc-cve-2026-1021862026-11-01 https://bugrater.com/releases/msrc-cve-2026-1021912026-11-01 https://bugrater.com/releases/msrc-cve-2026-1021922026-11-01 https://bugrater.com/releases/msrc-cve-2026-1021932026-11-01 https://bugrater.com/releases/msrc-cve-2026-1021952026-11-01 https://bugrater.com/releases/msrc-cve-2026-1021942026-11-01 https://bugrater.com/releases/msrc-cve-2026-1021962026-11-01 https://bugrater.com/releases/msrc-cve-2026-1022012026-11-01 https://bugrater.com/releases/msrc-cve-2026-1022032026-11-01 https://bugrater.com/releases/msrc-cve-2026-1022022026-11-01 https://bugrater.com/releases/msrc-cve-2026-1021982026-11-01 https://bugrater.com/releases/msrc-cve-2026-1022042026-11-01 https://bugrater.com/releases/msrc-cve-2026-1022062026-11-01 https://bugrater.com/releases/msrc-cve-2026-1022052026-11-01 https://bugrater.com/releases/msrc-cve-2026-1022072026-11-01 https://bugrater.com/releases/msrc-cve-2026-1022092026-11-01 https://bugrater.com/releases/msrc-cve-2026-1022102026-11-01 https://bugrater.com/releases/msrc-cve-2026-1022182026-11-01 https://bugrater.com/releases/msrc-cve-2026-1022112026-11-01 https://bugrater.com/releases/msrc-cve-2026-1022202026-11-01 https://bugrater.com/releases/msrc-cve-2026-1022172026-11-01 https://bugrater.com/releases/msrc-cve-2026-1002152026-11-01 https://bugrater.com/releases/msrc-cve-2026-1022252026-11-01 https://bugrater.com/releases/msrc-cve-2026-1022142026-11-01 https://bugrater.com/releases/msrc-cve-2026-1022262026-11-01 https://bugrater.com/releases/msrc-cve-2026-1094532026-11-01 https://bugrater.com/releases/msrc-cve-2026-1028692026-11-01 https://bugrater.com/releases/msrc-cve-2026-699222026-11-01 https://bugrater.com/releases/msrc-cve-2026-1035542026-11-01 https://bugrater.com/releases/msrc-cve-2026-1035532026-11-01 https://bugrater.com/releases/msrc-cve-2026-1035552026-11-01 https://bugrater.com/releases/msrc-cve-2026-1035602026-11-01 https://bugrater.com/releases/msrc-cve-2026-1035652026-11-01 https://bugrater.com/releases/msrc-cve-2026-1021972026-11-01 https://bugrater.com/releases/msrc-cve-2026-1022152026-11-01 https://bugrater.com/releases/msrc-cve-2026-1022162026-11-01 https://bugrater.com/releases/msrc-cve-2026-1021992026-11-01 https://bugrater.com/releases/msrc-cve-2026-1035672026-11-01 https://bugrater.com/releases/msrc-cve-2026-1035772026-11-01 https://bugrater.com/releases/msrc-cve-2026-1035692026-11-01 https://bugrater.com/releases/msrc-cve-2026-1035782026-11-01 https://bugrater.com/releases/msrc-cve-2026-1050032026-11-01 https://bugrater.com/releases/msrc-cve-2026-1050042026-11-01 https://bugrater.com/releases/msrc-cve-2026-1050052026-11-01 https://bugrater.com/releases/msrc-cve-2026-1050062026-11-01 https://bugrater.com/releases/msrc-cve-2026-1050072026-11-01 https://bugrater.com/releases/msrc-cve-2026-1050082026-11-01 https://bugrater.com/releases/msrc-cve-2026-1050092026-11-01 https://bugrater.com/releases/msrc-cve-2026-1050102026-11-01 https://bugrater.com/releases/msrc-cve-2026-977982026-11-01 https://bugrater.com/releases/msrc-cve-2026-977992026-11-01 https://bugrater.com/releases/msrc-cve-2026-701622026-11-01 https://bugrater.com/releases/msrc-cve-2026-927072026-11-01 https://bugrater.com/releases/msrc-cve-2026-1050132026-11-01 https://bugrater.com/releases/msrc-cve-2026-961132026-11-01 https://bugrater.com/releases/msrc-cve-2026-978032026-11-01 https://bugrater.com/releases/msrc-cve-2026-978042026-11-01 https://bugrater.com/releases/msrc-cve-2026-978062026-11-01 https://bugrater.com/releases/msrc-cve-2026-978092026-11-01 https://bugrater.com/releases/msrc-cve-2026-978072026-11-01 https://bugrater.com/releases/msrc-cve-2026-978082026-11-01 https://bugrater.com/releases/msrc-cve-2026-978102026-11-01 https://bugrater.com/releases/msrc-cve-2026-978112026-11-01 https://bugrater.com/releases/msrc-cve-2026-978142026-11-01 https://bugrater.com/releases/msrc-cve-2026-978152026-11-01 https://bugrater.com/releases/msrc-cve-2026-978132026-11-01 https://bugrater.com/releases/msrc-cve-2026-978192026-11-01 https://bugrater.com/releases/msrc-cve-2026-978172026-11-01 https://bugrater.com/releases/msrc-cve-2026-978212026-11-01 https://bugrater.com/releases/msrc-cve-2026-978232026-11-01 https://bugrater.com/releases/msrc-cve-2026-978252026-11-01 https://bugrater.com/releases/msrc-cve-2026-978272026-11-01 https://bugrater.com/releases/msrc-cve-2026-978292026-11-01 https://bugrater.com/releases/msrc-cve-2026-978302026-11-01 https://bugrater.com/releases/msrc-cve-2026-978282026-11-01 https://bugrater.com/releases/msrc-cve-2026-978312026-11-01 https://bugrater.com/releases/msrc-cve-2026-978322026-11-01 https://bugrater.com/releases/msrc-cve-2026-978342026-11-01 https://bugrater.com/releases/msrc-cve-2026-978352026-11-01 https://bugrater.com/releases/msrc-cve-2026-978362026-11-01 https://bugrater.com/releases/msrc-cve-2026-978222026-11-01 https://bugrater.com/releases/msrc-cve-2026-978242026-11-01 https://bugrater.com/releases/msrc-cve-2026-1035682026-11-01 https://bugrater.com/releases/msrc-cve-2026-978332026-11-01 https://bugrater.com/releases/msrc-cve-2026-978262026-11-01 https://bugrater.com/releases/msrc-cve-2026-978402026-11-01 https://bugrater.com/releases/msrc-cve-2026-978372026-11-01 https://bugrater.com/releases/msrc-cve-2026-978382026-11-01 https://bugrater.com/releases/msrc-cve-2026-978412026-11-01 https://bugrater.com/releases/msrc-cve-2026-978422026-11-01 https://bugrater.com/releases/msrc-cve-2026-978442026-11-01 https://bugrater.com/releases/msrc-cve-2026-1081272026-11-01 https://bugrater.com/releases/msrc-cve-2026-1081282026-11-01 https://bugrater.com/releases/msrc-cve-2026-978432026-11-01 https://bugrater.com/releases/msrc-cve-2026-1081292026-11-01 https://bugrater.com/releases/msrc-cve-2026-1081302026-11-01 https://bugrater.com/releases/msrc-cve-2026-1081312026-11-01 https://bugrater.com/releases/msrc-cve-2026-1081332026-11-01 https://bugrater.com/releases/msrc-cve-2026-1081322026-11-01 https://bugrater.com/releases/msrc-cve-2026-1081342026-11-01 https://bugrater.com/releases/msrc-cve-2026-1081362026-11-01 https://bugrater.com/releases/msrc-cve-2026-1081352026-11-01 https://bugrater.com/releases/msrc-cve-2026-1084712026-11-01 https://bugrater.com/releases/msrc-cve-2026-1084632026-11-01 https://bugrater.com/releases/msrc-cve-2026-1050162026-11-01 https://bugrater.com/releases/msrc-cve-2026-977812026-11-01 https://bugrater.com/releases/msrc-cve-2026-978392026-11-01 https://bugrater.com/releases/msrc-cve-2026-1084272026-11-01 https://bugrater.com/releases/msrc-cve-2026-1084282026-11-01 https://bugrater.com/releases/msrc-cve-2026-1084292026-11-01 https://bugrater.com/releases/msrc-cve-2026-1084302026-11-01 https://bugrater.com/releases/msrc-cve-2026-1084312026-11-01 https://bugrater.com/releases/msrc-cve-2026-1084322026-11-01 https://bugrater.com/releases/msrc-cve-2026-1084332026-11-01 https://bugrater.com/releases/msrc-cve-2026-1084342026-11-01 https://bugrater.com/releases/msrc-cve-2026-1084352026-11-01 https://bugrater.com/releases/msrc-cve-2026-1084362026-11-01 https://bugrater.com/releases/msrc-cve-2026-1084372026-11-01 https://bugrater.com/releases/msrc-cve-2026-1084402026-11-01 https://bugrater.com/releases/msrc-cve-2026-1084382026-11-01 https://bugrater.com/releases/msrc-cve-2026-1084392026-11-01 https://bugrater.com/releases/msrc-cve-2026-1084412026-11-01 https://bugrater.com/releases/msrc-cve-2026-1084432026-11-01 https://bugrater.com/releases/msrc-cve-2026-1084422026-11-01 https://bugrater.com/releases/msrc-cve-2026-1084262026-11-01 https://bugrater.com/releases/msrc-cve-2026-1084442026-11-01 https://bugrater.com/releases/msrc-cve-2026-1084452026-11-01 https://bugrater.com/releases/msrc-cve-2026-1084462026-11-01 https://bugrater.com/releases/msrc-cve-2026-1084472026-11-01 https://bugrater.com/releases/msrc-cve-2026-1084482026-11-01 https://bugrater.com/releases/msrc-cve-2026-1084492026-11-01 https://bugrater.com/releases/msrc-cve-2026-1084512026-11-01 https://bugrater.com/releases/msrc-cve-2026-1084502026-11-01 https://bugrater.com/releases/msrc-cve-2026-1084532026-11-01 https://bugrater.com/releases/msrc-cve-2026-1084522026-11-01 https://bugrater.com/releases/msrc-cve-2026-1084542026-11-01 https://bugrater.com/releases/msrc-cve-2026-1084552026-11-01 https://bugrater.com/releases/msrc-cve-2026-1094682026-11-01 https://bugrater.com/releases/msrc-cve-2026-877072026-11-01 https://bugrater.com/releases/msrc-cve-2026-959432026-11-01 https://bugrater.com/releases/msrc-cve-2026-1022082026-11-01 https://bugrater.com/releases/msrc-cve-2026-1094612026-11-01 https://bugrater.com/releases/msrc-cve-2026-800922026-11-01 https://bugrater.com/releases/msrc-cve-2026-838312026-11-01 https://bugrater.com/releases/msrc-cve-2026-858902026-11-01 https://bugrater.com/releases/msrc-cve-2026-858972026-11-01 https://bugrater.com/releases/msrc-cve-2026-961982026-11-01 https://bugrater.com/releases/msrc-cve-2026-858982026-11-01 https://bugrater.com/releases/msrc-cve-2026-961992026-11-01 https://bugrater.com/releases/msrc-cve-2026-701852026-11-01 https://bugrater.com/releases/msrc-cve-2026-978122026-11-01 https://bugrater.com/releases/msrc-cve-2026-700742026-11-01 https://bugrater.com/releases/msrc-cve-2026-1057282026-11-01 https://bugrater.com/releases/msrc-cve-2026-1050142026-11-01 https://bugrater.com/releases/msrc-cve-2026-961852026-11-01 https://bugrater.com/releases/msrc-cve-2026-1084562026-11-01 https://bugrater.com/releases/msrc-cve-2026-839382026-11-01 https://bugrater.com/releases/msrc-cve-2026-1100632026-11-01 https://bugrater.com/releases/msrc-cve-2026-1114972026-11-01 https://bugrater.com/releases/msrc-cve-2026-1141482026-11-01 https://bugrater.com/releases/msrc-cve-2026-978052026-11-01 https://bugrater.com/releases/msrc-cve-2026-977852026-11-01 https://bugrater.com/releases/msrc-cve-2026-961922026-11-01 https://bugrater.com/releases/msrc-cve-2026-962032026-11-01 https://bugrater.com/releases/msrc-cve-2026-880902026-11-01 https://bugrater.com/releases/msrc-cve-2026-853302026-11-01 https://bugrater.com/releases/msrc-cve-2026-858992026-11-01 https://bugrater.com/releases/msrc-cve-2026-961872026-11-01 https://bugrater.com/releases/msrc-cve-2026-880772026-11-01 https://bugrater.com/releases/msrc-cve-2026-209422026-11-01 https://bugrater.com/releases/msrc-cve-2026-880782026-11-01 https://bugrater.com/releases/msrc-cve-2026-961962026-11-01 https://bugrater.com/releases/msrc-cve-2026-627652026-11-01 https://bugrater.com/releases/msrc-cve-2026-978162026-11-01 https://bugrater.com/releases/msrc-cve-2026-968602026-11-01 https://bugrater.com/releases/msrc-cve-2026-1181472026-11-01 https://bugrater.com/releases/cve-2026-120195-a-security-vulnerability-has-been-detected-in-wavlink-wl-wn579a3-a-2026-03-10-94f93d4-the-impacted-element-is-the-function-set-wzdgwmesh-of-the-file-cgi-bin-a2026-11-01 https://bugrater.com/releases/cve-2026-120196-a-vulnerability-was-detected-in-wavlink-wn579x3-d-v250402-this-affects-the-function-port-forward-of-the-file-cgi-bin-wapi-cgi-the-manipulation-of-the-argumen2026-11-01 https://bugrater.com/releases/cve-2026-120197-a-flaw-has-been-found-in-wavlink-wl-wn530hg4b-m-v260724-this-impacts-the-function-port-forward-of-the-file-cgi-bin-wapi-cgi-this-manipulation-of-the-argument2026-11-01 https://bugrater.com/releases/traefik-security-releases-october-20262026-11-01 https://bugrater.com/releases/agit8or1-security-releases-october-20262026-11-01 https://bugrater.com/releases/cve-2026-107342-the-kali-forms-contact-form-drag-and-drop-builder-wordpress-plugin-before-2-4-30-does-not-perform-a-capability-check-when-its-test-email-handler-resolves-an2026-11-01 https://bugrater.com/releases/cve-2026-107343-the-kali-forms-contact-form-drag-and-drop-builder-wordpress-plugin-before-2-4-30-does-not-perform-a-capability-check-on-its-test-email-handler-relying-only2026-11-01 https://bugrater.com/releases/cve-2026-113481-the-media-library-assistant-wordpress-plugin-before-3-44-does-not-check-that-the-requesting-user-is-allowed-to-view-a-post-before-disclosing-which-taxonomy-term2026-11-01 https://bugrater.com/releases/cve-2026-113482-the-media-library-assistant-wordpress-plugin-before-3-44-does-not-escape-one-of-its-shortcode-attributes-before-outputting-it-in-an-attribute-of-generated-links2026-11-01 https://bugrater.com/releases/cve-2026-118168-the-mappress-wordpress-plugin-before-2-97-15-does-not-restrict-which-user-s-data-its-front-end-map-embed-handler-renders-allowing-unauthenticated-visitors-to2026-11-01 https://bugrater.com/releases/cve-2026-120198-a-vulnerability-has-been-found-in-wavlink-wl-wn530be1-a-v251117-affected-is-the-function-con-check-read-finish-of-the-file-protocol-csp-such-manipulation-of2026-11-01 https://bugrater.com/releases/cve-2026-120217-a-vulnerability-was-detected-in-delgan-loguru-0-7-3-the-affected-element-is-the-function-ansiparser-feed-of-the-file-loguru-colorizer-py-of-the-component-ansi2026-11-01 https://bugrater.com/releases/cve-2026-120218-a-flaw-has-been-found-in-typemill-up-to-2-26-0-the-impacted-element-is-the-function-controllerapiimage-saveimage-of-the-file-system-typemill-models-svgsanitiz2026-11-01 https://bugrater.com/releases/cve-2026-112887-gitea-actions-task-tokens-authenticate-to-the-rest-api-as-a-shared-system-user-with-a-negative-id-which-repository-organization-project-and-key-filters-treat2026-11-01 https://bugrater.com/releases/cve-2026-113429-legacy-v1-to-v3-actions-artifact-uploads-stored-the-request-s-content-encoding-header-unchecked-in-the-column-that-is-served-as-the-artifact-s-content-type2026-11-01 https://bugrater.com/releases/cve-2026-114199-get-api-v1-users-username-heatmap-computed-the-contribution-heatmap-with-the-repository-access-of-the-token-owner-and-ignored-the-public-only-restriction-o2026-11-01 https://bugrater.com/releases/cve-2026-116289-gitea-did-not-reject-personal-access-tokens-restricted-to-public-resources-public-only-on-the-organization-actions-runner-registration-token-endpoint-and-t2026-11-01 https://bugrater.com/releases/cve-2026-116296-the-api-routes-for-releases-release-assets-milestones-and-repository-labels-did-not-reject-changes-to-archived-repositories-a-user-with-write-access-to-an-ar2026-11-01 https://bugrater.com/releases/cve-2026-116474-the-gitea-token-of-a-gitea-actions-job-authenticates-as-the-gitea-actions-system-user-and-the-api-v1-user-email-and-gpg-key-endpoints-accepted-that-user2026-11-01 https://bugrater.com/releases/cve-2026-117635-the-api-v1-admin-route-group-did-not-enforce-the-public-only-restriction-of-personal-access-tokens-a-public-only-token-with-admin-scope-issued-by-a-site-a2026-11-01 https://bugrater.com/releases/cve-2026-117646-the-repositories-stars-and-watching-tabs-of-user-profiles-and-the-repository-list-of-organization-home-pages-included-private-repositories-for-every-signed-in2026-11-01 https://bugrater.com/releases/cve-2026-117649-the-issue-timeline-api-and-the-web-issue-page-hid-cross-reference-events-that-point-at-issues-the-reader-cannot-access-but-not-dependency-added-and-dependen2026-11-01 https://bugrater.com/releases/cve-2026-117677-when-parsing-an-uploaded-helm-chart-gitea-decompressed-the-archive-and-read-every-tar-entry-while-looking-for-chart-yaml-without-limiting-the-decompressed-si2026-11-01 https://bugrater.com/releases/cve-2026-117685-the-oci-registry-s-cross-repository-blob-mount-checked-the-target-package-against-the-token-s-public-only-restriction-but-checked-the-source-blob-only-agains2026-11-01 https://bugrater.com/releases/cve-2026-118386-workflows-triggered-by-a-pull-request-review-were-read-from-the-commit-named-in-the-review-s-commit-id-while-the-fork-restrictions-were-decided-by-the-review2026-11-01 https://bugrater.com/releases/cve-2026-118394-the-oauth2-userinfo-endpoint-login-oauth-userinfo-decided-whether-to-limit-the-groups-claim-to-public-organizations-by-re-parsing-the-authorization-hea2026-11-01 https://bugrater.com/releases/cve-2026-118395-gitea-1-27-3-stopped-personal-access-tokens-restricted-to-public-resources-public-only-from-creating-repositories-through-post-api-v1-user-repos-and-pos2026-11-01 https://bugrater.com/releases/cve-2026-118504-the-web-interface-blocks-issue-and-pull-request-changes-on-archived-repositories-but-several-issue-routes-of-the-rest-api-did-not-check-whether-the-repository2026-11-01 https://bugrater.com/releases/cve-2026-119441-delete-api-v1-orgs-org-repos-deletes-all-repositories-of-an-organization-but-it-did-not-enforce-the-public-only-restriction-of-access-tokens-the-route-on2026-11-01 https://bugrater.com/releases/cve-2026-119533-repository-and-organization-project-boards-listed-the-pull-requests-that-reference-each-issue-on-the-board-without-checking-whether-the-viewer-can-read-them-wh2026-11-01 https://bugrater.com/releases/cve-2026-119625-the-username-web-route-accepted-personal-access-tokens-over-http-basic-authentication-without-checking-their-scope-a-token-confined-to-an-unrelated-scope2026-11-01 https://bugrater.com/releases/cve-2026-119627-the-web-profile-and-rss-atom-feed-routes-of-users-and-organizations-checked-only-whether-a-signed-in-viewer-could-see-a-limited-visibility-owner-without-consid2026-11-01 https://bugrater.com/releases/cve-2026-120223-a-vulnerability-was-identified-in-oray-pugongying-x5-pro-up-to-7-6-1-this-impacts-the-function-session-get-of-the-file-session-lua-of-the-component-session-id2026-11-01 https://bugrater.com/releases/cve-2026-120263-when-oauth2-client-account-linking-is-set-to-auto-not-the-default-and-registration-is-enabled-the-link-account-sign-up-form-looked-up-the-existing-acco2026-11-01 https://bugrater.com/releases/cve-2026-120224-a-security-flaw-has-been-discovered-in-oray-pugongying-x5-pro-up-to-7-6-1-affected-is-the-function-run-apis-by-json-run-async-task-of-the-component-api-authori2026-11-01 https://bugrater.com/releases/cve-2026-120225-a-weakness-has-been-identified-in-oray-pugongying-x5-pro-up-to-7-6-1-affected-by-this-vulnerability-is-the-function-config-restore-ex-of-the-file-etc-openwrt2026-11-01 https://bugrater.com/releases/cve-2026-120226-a-security-vulnerability-has-been-detected-in-hangzhou-xiongmai-technology-p2papi-dll-1-3-3-32-on-windows-affected-by-this-issue-is-the-function-p2papi-connect2026-11-01 https://bugrater.com/releases/cve-2026-120227-a-vulnerability-was-detected-in-wavlink-wn701ae-m01ae-v260105-this-affects-the-function-del-staticrule-of-the-file-static-route-setting-sh-of-the-component-ioo2026-11-01 https://bugrater.com/releases/cve-2026-120306-beta9-turns-each-shell-command-in-a-tenant-image-definition-into-a-dockerfile-run-line-and-executes-it-with-buildah-on-the-build-worker-the-worker-image-sets-b2026-11-01 https://bugrater.com/releases/cve-2026-120307-the-beta9-worker-serves-the-sandbox-file-api-from-outside-the-container-gethostpathfromcontainerpath-turns-the-tenant-s-container-path-into-a-worker-path-if-t2026-11-01 https://bugrater.com/releases/cve-2026-120308-a-beta9-tenant-can-attach-a-volume-when-deploying-a-function-endpoint-or-task-queue-the-gateway-builds-the-host-path-by-joining-the-shared-volumes-root-the2026-11-01 https://bugrater.com/releases/cve-2026-117680-improper-check-for-unusual-or-exceptional-conditions-vulnerability-in-the-pattern-and-patternproperties-keywords-in-lud-jsv-allows-an-unauthenticated-remote-att2026-11-01 https://bugrater.com/releases/cve-2026-120228-a-flaw-has-been-found-in-wavlink-wn553x1-b-v260403-2-0-0-this-vulnerability-affects-the-function-sub-416d88-of-the-file-bin-ioos-of-the-component-ioos-service2026-11-01 https://bugrater.com/releases/cve-2026-120230-a-vulnerability-was-found-in-wavlink-wn701ae-260105-impacted-is-the-function-del-vlan-group-of-the-component-ioos-web-backend-the-manipulation-of-the-argument2026-11-01 https://bugrater.com/releases/cve-2026-120231-a-vulnerability-was-determined-in-wavlink-wn553x1-b-v260403-2-0-0-the-affected-element-is-the-function-sub-416568-of-the-file-bin-ioos-of-the-component-openvp2026-11-01 https://bugrater.com/releases/cve-2026-120232-a-vulnerability-was-identified-in-horizon-datasys-reboot-restore-standard-up-to-13-2-the-impacted-element-is-the-function-sub-23908-in-the-library-shield-sys-o2026-11-01 https://bugrater.com/releases/cve-2026-119480-improper-limitation-of-a-pathname-to-a-restricted-directory-path-traversal-vulnerability-in-crocoblock-jetformbuilder-jetformbuilder-allows-path-traversal-t2026-11-01 https://bugrater.com/releases/cve-2026-120233-a-security-flaw-has-been-discovered-in-ag-ui-protocol-ag-ui-up-to-0-0-58-this-affects-an-unknown-function-of-the-file-sdks-typescript-packages-client-src-agent2026-11-01 https://bugrater.com/releases/cve-2026-120234-a-weakness-has-been-identified-in-ag-ui-protocol-ag-ui-up-to-0-0-58-this-impacts-the-function-e-text-of-the-component-http-transport-executing-a-manipulation2026-11-01 https://bugrater.com/releases/cve-2026-120235-a-security-vulnerability-has-been-detected-in-ag-ui-protocol-ag-ui-up-to-0-0-58-affected-is-the-function-parsessestream-of-the-file-sdks-typescript-packages-cl2026-11-01 https://bugrater.com/releases/cve-2026-120338-prefab-ui-s-generative-ui-sandbox-runs-caller-supplied-python-inside-pyodide-python-compiled-to-webassembly-in-a-deno-subprocess-the-feature-is-documented-as2026-11-01 https://bugrater.com/releases/cve-2026-62048-improper-neutralization-of-special-elements-used-in-an-sql-command-sql-injection-vulnerability-in-liquid-web-stellarwp-bookit-bookit-allows-sql-injection2026-11-01 https://bugrater.com/releases/cve-2026-66570-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-vulnerability-in-nickboss-wordpress-file-upload-wp-file-upload-allows-store2026-11-01 https://bugrater.com/releases/ptbsare-security-releases-october-20262026-11-01 https://bugrater.com/releases/commerce-license-moderately-critical-access-bypass-sa-contrib-2026-2602026-11-02 https://bugrater.com/releases/commerce-core-moderately-critical-information-disclosure-sa-contrib-2026-2592026-11-02 https://bugrater.com/releases/commerce-core-moderately-critical-cross-site-request-forgery-sa-contrib-2026-2582026-11-02 https://bugrater.com/releases/commerce-core-moderately-critical-access-bypass-sa-contrib-2026-2572026-11-02 https://bugrater.com/releases/commerce-core-less-critical-access-bypass-sa-contrib-2026-2562026-11-02 https://bugrater.com/releases/commerce-core-moderately-critical-information-disclosure-sa-contrib-2026-2552026-11-02 https://bugrater.com/releases/commerce-core-highly-critical-access-bypass-sa-contrib-2026-2542026-11-02 https://bugrater.com/releases/implecode-security-releases-october-20262026-11-02 https://bugrater.com/releases/jellyfin-security-releases-october-20262026-11-02 https://bugrater.com/releases/jenkins-security-releases-november-20172026-11-02 https://bugrater.com/releases/cve-2026-120236-a-vulnerability-was-detected-in-ag-ui-protocol-ag-ui-up-to-0-0-58-affected-by-this-vulnerability-is-an-unknown-functionality-of-the-component-transport-decoder2026-11-02 https://bugrater.com/releases/cve-2026-120237-a-flaw-has-been-found-in-ag-ui-protocol-ag-ui-up-to-0-0-58-affected-by-this-issue-is-the-function-isinterruptexpired-of-the-file-sdks-typescript-packages-clien2026-11-02 https://bugrater.com/releases/cve-2026-120238-a-vulnerability-has-been-found-in-wavlink-wn553x1-b-260403-2-0-0-this-affects-the-function-sub-4162a8-of-the-file-bin-ioos-of-the-component-ovpn-file-handler2026-11-02 https://bugrater.com/releases/cve-2026-120239-a-vulnerability-was-found-in-wavlink-wn553x1-b-v260403-2-0-0-this-vulnerability-affects-the-function-sub-419da8-of-the-file-bin-ioos-of-the-component-wireguar2026-11-02 https://bugrater.com/releases/cve-2026-120240-a-vulnerability-was-determined-in-wavlink-wn553x1-b-v260403-2-0-0-this-issue-affects-the-function-sub-41a748-of-the-file-bin-ioos-of-the-component-wireguard-c2026-11-02 https://bugrater.com/releases/cve-2026-120241-a-vulnerability-was-identified-in-ruijie-rg-es205gc-rg-es206gc-p-rg-es208gc-rg-es210gc-lp-and-rg-es210gs-p-esw-1-0-1-b1p48-impacted-is-an-unknown-function-o2026-11-02 https://bugrater.com/releases/cve-2026-120242-a-security-flaw-has-been-discovered-in-ruijie-rg-es205gc-rg-es206gc-p-rg-es208gc-rg-es210gc-lp-and-rg-es210gs-p-esw-1-0-1-b1p48-the-affected-element-is-an-u2026-11-02 https://bugrater.com/releases/cve-2026-120274-a-vulnerability-was-identified-in-beecue-fastbee-up-to-2-1-0-affected-by-this-issue-is-some-unknown-functionality-of-the-file-iot-script-of-the-component-groo2026-11-02 https://bugrater.com/releases/cve-2026-82115-missing-authorization-in-apache-wicket-org-apache-wicket-protocol-ws-api-websocketmessagebroadcasthandler-the-request-handler-wicket-s-native-websocket-suppo2026-11-02 https://bugrater.com/releases/cve-2026-82557-missing-authorization-in-apache-wicket-org-apache-wicket-markup-html-form-form-resolves-the-component-that-submitted-a-form-from-the-request-parameters-in-for2026-11-02 https://bugrater.com/releases/cve-2026-82558-missing-authorization-in-apache-wicket-org-apache-wicket-protocol-ws-api-websocketbehavior-through-which-wicket-s-native-websocket-support-hands-a-message-se2026-11-02 https://bugrater.com/releases/cve-2026-82559-insufficient-session-expiration-in-apache-wicket-org-apache-wicket-protocol-ws-websocketsettings-newwebsocketrequest-wraps-the-websocket-upgrade-request-in2026-11-02 https://bugrater.com/releases/cve-2026-82704-missing-authorization-in-apache-wicket-org-apache-wicket-core-request-handler-listenerrequesthandler-invokes-an-irequestlistener-only-when-org-apache-wicket-c2026-11-02 https://bugrater.com/releases/cve-2026-82705-missing-authorization-in-apache-wicket-org-apache-wicket-authorization-iauthorizationstrategy-declares-isresourceauthorized-and-that-method-has-a-single-en2026-11-02 https://bugrater.com/releases/cve-2026-82840-session-fixation-in-apache-wicket-org-apache-wicket-authroles-authentication-authenticatedwebsession-is-the-authentication-base-class-of-wicket-s-role-based-s2026-11-02 https://bugrater.com/releases/cve-2026-82898-incorrect-order-of-security-checks-in-apache-wicket-org-apache-wicket-protocol-http-resourceisolationrequestcyclelistener-obtains-the-page-a-request-targets-b2026-11-02 https://bugrater.com/releases/cve-2026-111089-apache-wicket-reads-texts-from-the-application-s-resource-bundles-a-localized-label-a-css-class-name-and-writes-some-of-them-into-the-javascript-and-the-ma2026-11-02 https://bugrater.com/releases/cve-2026-120275-a-security-flaw-has-been-discovered-in-shanghai-xi-yu-ji-zhi-technology-minimax-code-0-5-8-this-affects-an-unknown-part-of-the-component-find-command-handler2026-11-02 https://bugrater.com/releases/cve-2026-82956-improper-neutralization-of-input-during-web-page-generation-in-apache-wicket-org-apache-wicket-ajax-ajaxnewwindownotifyingbehavior-notices-that-a-page-instanc2026-11-02 https://bugrater.com/releases/cve-2026-83539-improper-neutralization-of-input-during-web-page-generation-in-apache-wicket-org-apache-wicket-extensions-markup-html-basic-smartlinklabel-and-org-apache-wick2026-11-02 https://bugrater.com/releases/cve-2026-83559-improper-encoding-or-escaping-of-output-in-apache-wicket-org-apache-wicket-core-util-string-javascriptutils-escapequotes-replaces-each-single-quote-in-its-i2026-11-02 https://bugrater.com/releases/cve-2026-83594-memory-allocation-with-an-excessive-size-value-in-apache-wicket-org-apache-wicket-markup-html-form-upload-resource-fileuploadtoresourcefield-uploads-files-to2026-11-02 https://bugrater.com/releases/cve-2026-84170-allocation-of-resources-without-limits-or-throttling-in-apache-wicket-org-apache-wicket-markup-html-form-upload-resource-abstractfileuploadresource-is-the-ser2026-11-02 https://bugrater.com/releases/cve-2026-84172-files-accessible-to-external-parties-in-apache-wicket-org-apache-wicket-markup-html-packageresourceguard-decides-whether-a-file-on-the-classpath-may-be-stream2026-11-02 https://bugrater.com/releases/cve-2026-84177-incorrect-behavior-order-in-apache-wicket-a-file-path-is-validated-before-the-framework-appends-the-attributes-that-complete-it-org-apache-wicket-request-res2026-11-02 https://bugrater.com/releases/cve-2026-84231-improper-neutralization-of-input-during-web-page-generation-in-apache-wicket-org-apache-wicket-markup-html-link-externallink-builds-a-javascript-click-handler2026-11-02 https://bugrater.com/releases/cve-2026-87718-apache-wicket-10-10-0-10-11-0-and-9-24-0-do-not-set-the-content-security-policy-headers-on-a-page-whose-render-request-handler-is-wrapped-in-more-than-one-ireq2026-11-02 https://bugrater.com/releases/cve-2026-95863-improper-neutralization-of-input-during-web-page-generation-in-apache-wicket-apache-wicket-generates-javascript-that-refers-to-the-elements-it-renders-and-wr2026-11-02 https://bugrater.com/releases/cve-2026-120276-a-weakness-has-been-identified-in-wavlink-wn536ax6-a-v260507-2-0-0-this-vulnerability-affects-the-function-sub-416760-of-the-file-bin-ioos-of-the-component-we2026-11-02 https://bugrater.com/releases/cve-2026-120277-a-security-vulnerability-has-been-detected-in-wavlink-wn536ax6-a-v260507-2-0-0-this-issue-affects-the-function-sub-41a1d8-of-the-file-bin-ioos-of-the-componen2026-11-02 https://bugrater.com/releases/cve-2026-120278-a-vulnerability-was-detected-in-wavlink-wn536ax6-a-v260507-2-0-0-impacted-is-the-function-sub-416d48-sub-41a7c0-of-the-file-bin-ioos-of-the-component-vpn-clie2026-11-02 https://bugrater.com/releases/cve-2026-120279-a-flaw-has-been-found-in-wavlink-wn536ax6-a-v260507-the-affected-element-is-an-unknown-function-of-the-file-protocol-csp-of-the-component-openvpn-cli-handler2026-11-02 https://bugrater.com/releases/cve-2026-120280-a-vulnerability-has-been-found-in-wavlink-wn536ax6-a-v260507-the-impacted-element-is-the-function-wireguard-cli-group-handler-of-the-file-protocol-csp-of-the2026-11-02 https://bugrater.com/releases/cve-2026-120281-a-vulnerability-was-found-in-wavlink-wn536ax6-a-v260507-this-affects-the-function-strcpy-of-the-file-protocol-csp-of-the-component-openvpn-handler-the-manipu2026-11-02 https://bugrater.com/releases/cve-2026-120282-a-vulnerability-was-determined-in-wavlink-wn536ax6-a-v260507-this-impacts-the-function-host-black-of-the-file-protocol-csp-this-manipulation-of-the-argument2026-11-02 https://bugrater.com/releases/cve-2026-120283-a-vulnerability-was-identified-in-linksys-e8450-1-2-00-360516-affected-is-the-function-strcpy-of-the-file-www-cgi-bin-portal-cgi-such-manipulation-of-the-arg2026-11-02 https://bugrater.com/releases/cve-2026-120319-a-vulnerability-was-found-in-sanluan-publiccms-4-x-5-x-6-x-this-affects-the-function-traderefundservice-updateamound-of-the-file-publiccms-parent-publiccms-tra2026-11-02 https://bugrater.com/releases/cve-2026-120320-a-vulnerability-was-determined-in-jxxghp-moviepilot-up-to-3-1-2-this-vulnerability-affects-the-function-workflowexecutor-restore-context-of-the-file-app-chain2026-11-02 https://bugrater.com/releases/cve-2026-120322-a-vulnerability-was-identified-in-termix-ssh-termix-up-to-2-9-2-this-issue-affects-some-unknown-processing-of-the-file-plugin-api-file-manager-transfertohost2026-11-02 https://bugrater.com/releases/cve-2026-120323-a-security-flaw-has-been-discovered-in-samanhappy-mcphub-up-to-1-0-45-1-1-7-impacted-is-an-unknown-function-of-the-file-src-utils-passthroughheaders-ts-the-ma2026-11-02 https://bugrater.com/releases/cve-2026-120339-a-security-flaw-has-been-discovered-in-mathurvishal-cloudclassroom-php-project-this-vulnerability-affects-unknown-code-of-the-file-updatedetailsfromfaculty-php2026-11-02 https://bugrater.com/releases/cve-2026-120340-a-weakness-has-been-identified-in-mathurvishal-cloudclassroom-php-project-this-issue-affects-some-unknown-processing-of-the-component-global-session-handler-e2026-11-02 https://bugrater.com/releases/cve-2026-120341-a-security-vulnerability-has-been-detected-in-mathurvishal-cloudclassroom-php-project-impacted-is-an-unknown-function-of-the-file-studentdetails-php-the-manip2026-11-02 https://bugrater.com/releases/cve-2026-120342-a-vulnerability-was-detected-in-mathurvishal-cloudclassroom-php-project-the-affected-element-is-an-unknown-function-of-the-file-viewquery-php-the-manipulation2026-11-02 https://bugrater.com/releases/cve-2026-120343-a-flaw-has-been-found-in-mathurvishal-cloudclassroom-php-project-the-impacted-element-is-an-unknown-function-of-the-file-manageassessment2-php-this-manipulati2026-11-02 https://bugrater.com/releases/cve-2026-120344-a-vulnerability-has-been-found-in-wavlink-wn551x3-a-m51x3-v251020-wo-182e965-this-affects-the-function-system-of-the-file-bin-ioos-of-the-component-wireguard2026-11-02 https://bugrater.com/releases/cve-2026-120345-a-vulnerability-was-found-in-wavlink-wn551x3-a-m51x3-v251020-wo-182e965-this-impacts-the-function-sub-41a430-of-the-file-bin-ioos-of-the-component-dns-resolut2026-11-02 https://bugrater.com/releases/cve-2026-120347-a-vulnerability-was-determined-in-dayrui-xunruicms-up-to-4-7-4-affected-is-the-function-view-of-the-file-dayrui-fcms-core-view-php-of-the-component-member-modu2026-11-02 https://bugrater.com/releases/cve-2026-120348-a-vulnerability-was-identified-in-dayrui-xunruicms-up-to-4-7-4-affected-by-this-vulnerability-is-the-function-get-tpl-content-of-the-file-dayrui-fcms-library2026-11-02 https://bugrater.com/releases/cve-2026-120349-a-security-flaw-has-been-discovered-in-dayrui-xunruicms-up-to-4-7-4-affected-by-this-issue-is-the-function-str-replace-of-the-file-var-www-html-zzmob-index-ph2026-11-02 https://bugrater.com/releases/cve-2026-103310-the-payhere-payment-gateway-wordpress-plugin-from-2-4-0-through-2-4-5-does-not-verify-the-authenticity-of-payment-notifications-when-the-merchant-secret-is-unse2026-11-02 https://bugrater.com/releases/cve-2024-7075-the-user-search-function-within-the-management-console-fails-to-properly-encode-user-supplied-input-before-rendering-it-in-the-browser-this-allows-an-attacker2026-11-02 https://bugrater.com/releases/cve-2026-118871-sql-injection-vulnerability-classified-as-an-internal-threat-level-attackers-can-steal-database-information-via-sql-injection-while-logged-in2026-11-02 https://bugrater.com/releases/cve-2026-117518-fastify-reply-from-is-a-fastify-plugin-that-forwards-requests-to-an-upstream-http-server-in-versions-up-to-and-including-12-8-0-the-plugin-validated-proxy-pa2026-11-02 https://bugrater.com/releases/cve-2026-117531-fastify-multipart-is-the-multipart-form-data-and-file-upload-plugin-for-the-fastify-web-framework-in-versions-5-3-0-through-10-1-6-the-plugin-does-not-propag2026-11-02 https://bugrater.com/releases/cve-2026-117549-fastify-secure-session-is-a-session-plugin-for-fastify-that-stores-an-encrypted-session-in-a-cookie-in-versions-7-5-0-through-8-4-1-when-the-plugin-is-config2026-11-02 https://bugrater.com/releases/cve-2026-120213-fastify-http-proxy-is-a-fastify-plugin-that-proxies-http-requests-to-an-upstream-server-under-a-configured-prefix-in-versions-9-0-0-through-11-6-5-when-an-ap2026-11-02 https://bugrater.com/releases/cve-2026-120214-fastify-http-proxy-is-a-fastify-plugin-that-proxies-http-requests-to-an-upstream-server-under-a-configured-prefix-in-versions-11-6-0-through-11-6-2-the-desti2026-11-02 https://bugrater.com/releases/cve-2026-120215-fastify-cors-is-the-cors-plugin-for-the-fastify-web-framework-in-versions-8-2-0-through-11-3-x-an-application-that-registers-the-plugin-with-the-non-default2026-11-02 https://bugrater.com/releases/cve-2026-120216-fastify-is-a-web-framework-for-node-js-in-versions-5-8-0-through-5-12-7-when-the-server-is-configured-with-a-nonzero-handlertimeout-and-a-route-returns-a-stre2026-11-02 https://bugrater.com/releases/cve-2026-92886-missing-authorization-vulnerability-in-t-b-tak-b-lgem-software-technologies-research-institute-eta-register-allows-privilege-escalation-this-issue-affects-eta2026-11-02 https://bugrater.com/releases/cve-2026-103420-joomla-extension-php-web-design-com-csrf-for-various-actions-in-stageit-1-0-5-7-5-6-0-6-3-52026-11-02 https://bugrater.com/releases/cve-2026-105600-joomla-extension-php-web-design-com-rce-via-setting-strings-in-stageit-1-0-5-7-5-6-0-6-3-52026-11-02 https://bugrater.com/releases/cve-2026-105601-joomla-extension-php-web-design-com-reflected-xss-in-stageit-1-0-5-7-5-6-0-6-3-52026-11-02 https://bugrater.com/releases/cve-2026-109083-improper-isolation-or-compartmentalization-vulnerability-in-apache-syncope-an-administrator-with-adequate-entitlements-can-import-arbitrary-bpmn-process-defin2026-11-02 https://bugrater.com/releases/cve-2026-110535-improper-privilege-management-vulnerability-in-apache-syncope-authprofile-self-updates-allow-non-admin-users-to-configure-impersonation-for-wa-surrogate-aut2026-11-02 https://bugrater.com/releases/cve-2026-111959-out-of-bounds-read-vulnerability-in-apache-arrow-rust-arrow-crate-from-version-33-0-0-through-to-versions-57-3-1-58-4-0-59-3-1-and-60-0-0-improper-va2026-11-02 https://bugrater.com/releases/cve-2026-113511-authorization-bypass-through-user-controlled-key-vulnerability-in-apache-syncope-a-delegated-administrator-can-relocate-a-realm-subtree-across-administrativ2026-11-02 https://bugrater.com/releases/cve-2026-113687-improper-isolation-or-compartmentalization-vulnerability-in-apache-syncope-an-administrator-with-adequate-entitlements-for-implementations-can-create-a-mali2026-11-02 https://bugrater.com/releases/cve-2026-114364-improper-neutralization-of-special-elements-used-in-an-sql-command-sql-injection-vulnerability-in-apache-syncope-this-cve-covers-an-incomplete-fix-for-c2026-11-02 https://bugrater.com/releases/cve-2026-120463-warracker-before-1-0-4-contains-a-missing-authorization-vulnerability-in-its-paperless-ngx-integration-that-allows-an-authenticated-non-administrative-user-to2026-11-02 https://bugrater.com/releases/cve-2026-74993-improper-neutralization-of-special-elements-used-in-an-sql-command-sql-injection-vulnerability-in-starnet-computer-and-network-systems-inventory-tracking-ap2026-11-02 https://bugrater.com/releases/cve-2025-71450-inih-before-r63-contains-a-one-byte-stack-buffer-under-read-in-ini-parse-stream-in-ini-c-that-allows-attackers-to-read-abyss-1-via-an-embedded-nul-byte-afte2026-11-02 https://bugrater.com/releases/cve-2026-118052-in-eclipse-threadx-versions-6-0-1-through-6-5-2-202603-the-module-manager-loaders-return-an-overflow-error-without-releasing-the-module-manager-mutex-when-a-mo2026-11-02 https://bugrater.com/releases/cve-2026-120318-product-gallery-slider-additional-variation-images-for-woocommerce-2-3-23-before-2-3-26-contains-a-missing-authorization-vulnerability-in-codestar-backup-ajax2026-11-02 https://bugrater.com/releases/cve-2026-120425-chatify-before-1-6-4-contains-an-authorization-bypass-vulnerability-in-the-pusher-channel-authorization-endpoint-that-allows-authenticated-users-to-subscribe-to2026-11-02 https://bugrater.com/releases/cve-2026-120426-opencsg-csghub-through-v2-6-0-ce-contains-an-authorization-bypass-vulnerability-in-the-unauthenticated-file-resolve-route-that-allows-remote-attackers-to-read-p2026-11-02 https://bugrater.com/releases/cve-2026-120427-mrdoc-through-1-1-1-contains-a-missing-authorization-vulnerability-in-the-get-doctemp-view-that-allows-authenticated-users-to-read-other-users-document-templat2026-11-02 https://bugrater.com/releases/cve-2026-120428-pandawiki-3-65-0-through-3-87-5-contains-a-stored-cross-site-scripting-vulnerability-that-allows-unauthenticated-attackers-to-upload-html-files-with-image-exten2026-11-02 https://bugrater.com/releases/cve-2026-120429-camaleon-cms-before-2-9-2-contains-a-missing-authorization-vulnerability-in-admin-mediacontroller-that-allows-low-privileged-authenticated-users-to-bypass-the2026-11-02 https://bugrater.com/releases/cve-2026-120430-camaleon-cms-before-2-9-2-contains-an-insecure-direct-object-reference-vulnerability-in-admin-categoriescontroller-that-allows-authenticated-users-to-modify-un2026-11-02 https://bugrater.com/releases/cve-2026-120431-netpbm-before-10-86-51-11-x-before-11-02-29-and-11-03-before-11-15-07-contains-a-heap-based-buffer-overflow-in-sgitopnm-s-readchannels-function-when-process2026-11-02 https://bugrater.com/releases/cve-2026-120432-netpbm-before-10-86-51-11-02-30-and-11-15-08-contains-an-integer-overflow-vulnerability-in-winicontopam-that-allows-attackers-to-corrupt-heap-memory-via-overs2026-11-02 https://bugrater.com/releases/cve-2026-120433-netpbm-before-10-86-51-11-x-before-11-02-30-and-11-03-before-11-15-08-contains-a-stack-based-buffer-overflow-in-the-picttoppm-paintpoly-function-due-to-an-u2026-11-02 https://bugrater.com/releases/cve-2026-120434-netpbm-before-10-86-51-11-x-before-11-02-30-and-11-03-before-11-15-08-contains-a-stack-based-buffer-overflow-in-picttoppm-s-scanpoly-function-in-converter-p2026-11-02 https://bugrater.com/releases/cve-2026-120435-netpbm-before-10-86-51-11-x-before-11-02-30-and-11-03-before-11-15-08-contains-a-heap-buffer-overflow-in-xpmtoppm-caused-by-an-unvalidated-characters-per-pixe2026-11-02 https://bugrater.com/releases/cve-2026-120436-netpbm-before-10-86-51-11-x-before-11-02-30-and-11-03-before-11-15-08-contains-an-integer-overflow-in-jbigtopnm-that-causes-heap-buffer-overflow-when-computin2026-11-02 https://bugrater.com/releases/cve-2026-120437-netpbm-before-10-86-51-11-x-before-11-02-30-and-11-03-before-11-15-08-contains-an-out-of-bounds-read-vulnerability-in-the-tgatoppm-converter-s-get-pixel-fun2026-11-02 https://bugrater.com/releases/cve-2026-120438-quickjs-ng-before-0-16-0-contains-an-integer-overflow-in-js-proxy-get-own-property-names-in-quickjs-c-that-causes-a-heap-buffer-overflow-on-32-bit-hosts-atta2026-11-02 https://bugrater.com/releases/cve-2026-120439-quickjs-ng-before-0-16-0-contains-an-integer-overflow-in-js-typed-array-sort-in-quickjs-c-that-allows-attackers-to-cause-a-heap-buffer-overflow-on-32-bit-host2026-11-02 https://bugrater.com/releases/cve-2026-120440-quickjs-ng-before-0-16-0-contains-a-memory-leak-vulnerability-in-js-atomics-store-in-quickjs-c-that-fails-to-free-the-converted-value-when-returning-a-rangeer2026-11-02 https://bugrater.com/releases/cve-2026-120441-owntone-server-through-29-3-contains-an-sql-injection-vulnerability-in-mpd-sticker-find-in-src-mpd-c-that-allows-unauthenticated-remote-attackers-to-inject-sq2026-11-02 https://bugrater.com/releases/cve-2026-120442-ape-volo-admin-before-3-6-1-contains-an-authentication-bypass-vulnerability-that-allows-unauthenticated-attackers-to-forge-administrator-tokens-using-a-hardcode2026-11-02 https://bugrater.com/releases/cve-2026-120443-gofound-through-1-4-1-contains-a-stored-cross-site-scripting-vulnerability-that-allows-unauthenticated-attackers-to-inject-scripts-by-submitting-document-text-t2026-11-02 https://bugrater.com/releases/cve-2026-120444-gofound-through-1-4-1-contains-a-path-traversal-vulnerability-that-allows-unauthenticated-attackers-to-delete-arbitrary-directories-by-supplying-sequences-i2026-11-02 https://bugrater.com/releases/cve-2026-120445-madong-admin-saas-through-5-1-4-contains-an-incorrect-authorization-vulnerability-in-accesstokenmiddleware-that-allows-authenticated-tenant-users-to-access-the2026-11-02 https://bugrater.com/releases/cve-2026-120446-madong-admin-saas-through-5-1-4-contains-a-missing-authentication-vulnerability-in-the-platform-tenant-management-api-because-the-platformapi-middleware-key-n2026-11-02 https://bugrater.com/releases/cve-2026-120447-hotgo-through-2-15-1-contains-an-authentication-bypass-vulnerability-that-allows-unauthenticated-attackers-to-choose-the-sms-login-verification-code-by-supplyin2026-11-02 https://bugrater.com/releases/cve-2026-120448-doracms-through-3-1-0-contains-a-mass-assignment-vulnerability-in-the-put-api-v1-user-api-keys-id-endpoint-that-allows-authenticated-low-privileged-users-to-r2026-11-02 https://bugrater.com/releases/cve-2026-120449-outline-before-1-12-0-contains-an-improper-access-control-vulnerability-that-allows-unauthenticated-users-to-read-unpublished-documents-because-the-share-loader2026-11-02 https://bugrater.com/releases/cve-2026-120450-laradashboard-1-4-0-before-1-4-9-contains-an-improper-authorization-vulnerability-that-allows-authenticated-users-with-read-only-email-template-view-permission2026-11-02 https://bugrater.com/releases/cve-2026-120451-libgphoto2-through-2-5-34-contains-stack-based-and-heap-based-buffer-overflow-vulnerabilities-in-jl2005c-init-that-allow-malicious-usb-devices-to-corrupt-memo2026-11-02 https://bugrater.com/releases/cve-2026-120452-libgphoto2-through-2-5-34-contains-a-heap-out-of-bounds-read-and-write-vulnerability-in-jl2005bcd-decompress-that-allows-malicious-usb-cameras-to-corrupt-heap2026-11-02 https://bugrater.com/releases/cve-2026-120453-the-sleuth-kit-through-4-15-0-contains-a-heap-out-of-bounds-read-vulnerability-in-hfs-load-extended-attrs-in-tsk-fs-hfs-c-that-reads-the-decmpfs-header-withou2026-11-02 https://bugrater.com/releases/cve-2026-120454-the-sleuth-kit-through-4-15-0-contains-a-null-pointer-dereference-vulnerability-in-decmpfs-decompress-lzvn-attr-that-allows-attackers-to-crash-the-tool-by-sup2026-11-02 https://bugrater.com/releases/cve-2026-120455-rapidyaml-through-0-16-0-contains-an-out-of-bounds-write-vulnerability-in-parseengine-add-annotation-that-allows-attackers-to-corrupt-memory-by-supplying-ya2026-11-02 https://bugrater.com/releases/cve-2026-120456-l-smash-through-2-14-5-contains-a-heap-out-of-bounds-write-vulnerability-in-isom-read-hdlr-and-isom-read-dref-entry-in-core-read-c-triggered-by-oversized-bo2026-11-02 https://bugrater.com/releases/cve-2026-120457-libaec-through-1-1-7-contains-an-out-of-bounds-read-vulnerability-in-m-se-decode-in-src-decode-c-that-allows-attackers-to-bypass-a-signed-bounds-check-via-an2026-11-02 https://bugrater.com/releases/cve-2026-120458-kvazaar-through-2-3-2-contains-an-infinite-loop-vulnerability-in-read-header-in-src-encmain-c-that-allows-attackers-to-hang-the-command-line-encoder-by-supply2026-11-02 https://bugrater.com/releases/cve-2026-120459-python-jose-through-3-5-0-contains-an-authentication-bypass-vulnerability-that-allows-unauthenticated-attackers-to-forge-jwts-because-hmackey-and-cryptographyhm2026-11-02 https://bugrater.com/releases/cve-2026-120460-jpom-through-2-11-12-contains-a-cross-workspace-authorization-bypass-vulnerability-that-allows-authenticated-users-to-manage-other-workspaces-docker-hosts-by-s2026-11-02 https://bugrater.com/releases/cve-2026-120461-jpom-through-2-11-12-contains-a-cross-workspace-authorization-bypass-in-post-node-ssh-command-batch-that-resolves-command-templates-and-ssh-nodes-by-id-without2026-11-02 https://bugrater.com/releases/cve-2026-120487-laradashboard-before-1-4-5-contains-an-incorrect-authorization-vulnerability-in-settingpolicy-managecoreupgrades-that-allows-non-superadmin-administrators-wi2026-11-02 https://bugrater.com/releases/cve-2026-120488-laradashboard-before-1-4-9-contains-a-stored-cross-site-scripting-vulnerability-that-allows-authenticated-users-with-post-create-or-post-edit-permission-to-inje2026-11-02 https://bugrater.com/releases/cve-2026-120489-outline-before-1-12-0-contains-an-incorrect-authorization-vulnerability-in-authorizedocumentpublish-that-allows-authenticated-members-to-publish-documents-int2026-11-02 https://bugrater.com/releases/cve-2026-120491-wing-ftp-server-before-8-2-6-contains-a-stored-cross-site-scripting-vulnerability-that-allows-authenticated-web-client-users-to-inject-script-by-sending-a-craft2026-11-02 https://bugrater.com/releases/cve-2026-120492-chainlit-2-12-0-contains-a-server-side-request-forgery-vulnerability-that-allows-unauthenticated-attackers-to-bypass-path-scoped-mcp-allowed-urls-entries-becaus2026-11-02 https://bugrater.com/releases/cve-2026-73695-control-web-panel-cwp-before-webpanel-version-1-16-contains-a-path-traversal-vulnerability-in-services-users-index-php-that-allows-attackers-to-include-arbitr2026-11-02 https://bugrater.com/releases/cve-2026-73696-control-web-panel-cwp-before-webpanel-version-1-12-contains-an-execution-after-redirect-vulnerability-in-the-user-panel-authentication-flow-cwpuserindex-tha2026-11-02 https://bugrater.com/releases/cve-2026-73697-control-web-panel-cwp-before-webpanel-version-1-16-contains-an-arbitrary-file-write-and-os-command-injection-vulnerability-in-the-phpini-editor-user-panel-mod2026-11-02 https://bugrater.com/releases/cve-2026-104080-control-web-panel-cwp-before-webpanel-version-1-30-contains-an-os-command-injection-vulnerability-in-the-loopback-api-valid-token-route-that-allows-unauthen2026-11-02 https://bugrater.com/releases/cve-2026-109140-the-vulnerability-is-that-krill-encrypts-every-login-session-token-with-a-nonce-built-from-a-counter-that-is-reset-to-0-on-every-krill-restart-so-the-same-key2026-11-02 https://bugrater.com/releases/cve-2026-109141-the-vulnerability-gives-a-role-that-is-restricted-to-a-list-of-cas-cas-its-full-permission-set-for-every-request-that-is-not-tied-to-a-ca-including-t2026-11-02 https://bugrater.com/releases/cve-2026-109142-when-a-ca-s-parent-lives-on-the-same-krill-server-instead-of-building-and-verifying-a-signed-cms-message-it-runs-the-rfc-6492-provisioning-exchange-in-process2026-11-02 https://bugrater.com/releases/cve-2026-114408-in-eclipse-threadx-netx-duo-versions-6-4-5-202504-through-6-5-2-202603a-built-with-ipv6-path-mtu-discovery-the-icmpv6-packet-too-big-handler-uses-the-destinat2026-11-02 https://bugrater.com/releases/cve-2026-115653-in-eclipse-threadx-versions-6-0-1-through-6-5-2-202603-the-pendsv-handler-of-the-cortex-m-module-ports-saves-a-preempted-user-mode-module-thread-s-registers-in2026-11-02 https://bugrater.com/releases/cve-2026-115654-in-eclipse-threadx-versions-6-0-1-through-6-5-2-202603-the-module-manager-s-thread-control-services-do-not-check-that-a-thread-passed-by-a-user-mode-memory-pr2026-11-02 https://bugrater.com/releases/cve-2026-120500-an-otter-wiki-before-2-26-2-contains-a-stored-cross-site-scripting-vulnerability-in-otterwikimdrenderer-block-code-that-allows-attackers-who-can-edit-pages-inc2026-11-02 https://bugrater.com/releases/cve-2026-120501-an-otter-wiki-2-20-1-before-2-26-2-contains-a-file-disclosure-vulnerability-in-the-datatable-embedding-that-allows-attackers-who-can-edit-pages-including-anony2026-11-02 https://bugrater.com/releases/cve-2026-77876-control-web-panel-cwp-before-webpanel-version-1-16-contains-an-os-command-injection-vulnerability-in-the-protected-directory-user-panel-module-that-allows-att2026-11-02 https://bugrater.com/releases/cve-2026-77877-control-web-panel-cwp-before-webpanel-version-1-30-contains-a-missing-authentication-vulnerability-that-allows-attackers-able-to-reach-the-loopback-api-servic2026-11-02 https://bugrater.com/releases/cve-2026-77878-control-web-panel-cwp-before-webpanel-version-1-30-contains-an-os-command-injection-vulnerability-in-the-loopback-api-database-restore-route-v1-restoredataba2026-11-02 https://bugrater.com/releases/cve-2026-77879-control-web-panel-cwp-before-webpanel-version-1-16-contains-a-sql-injection-vulnerability-in-the-loopback-api-authentication-gate-access-token-which-connec2026-11-02 https://bugrater.com/releases/cve-2026-77880-control-web-panel-cwp-before-webpanel-version-1-16-contains-an-os-command-injection-vulnerability-in-the-loopback-api-password-change-route-newpass-which-r2026-11-02 https://bugrater.com/releases/cve-2026-77881-control-web-panel-cwp-before-webpanel-version-1-30-contains-a-blind-sql-injection-vulnerability-in-an-unauthenticated-loopback-api-route-that-connects-to-mysq2026-11-02 https://bugrater.com/releases/cve-2026-88809-a-security-vulnerability-exists-in-the-suse-rancher-manager-meta-proxy-endpoint-meta-proxy-this-endpoint-is-intended-to-forward-requests-only-to-destinatio2026-11-02 https://bugrater.com/releases/cve-2026-94290-suse-rancher-fleet-clusters-reference-a-kubeconfig-secret-that-the-controller-uses-to-install-and-manage-a-fleet-agent-on-the-target-cluster-the-controller-did2026-11-02 https://bugrater.com/releases/smrealms-security-releases-october-20262026-11-02 https://bugrater.com/releases/diffsk-security-releases-october-20262026-11-03 https://bugrater.com/releases/orbitale-security-releases-october-20262026-11-03 https://bugrater.com/releases/kiwilan-security-releases-october-20262026-11-03 https://bugrater.com/releases/tibillet-security-releases-october-20262026-11-03 https://bugrater.com/releases/mlflow-security-releases-october-20262026-11-03 https://bugrater.com/releases/cve-2026-105769-kaniko-before-1-25-20-can-send-a-microsoft-entra-id-azure-ad-access-token-for-azure-resource-manager-to-an-attacker-controlled-registry-host-kaniko-uses-the2026-11-03 https://bugrater.com/releases/cve-2026-88810-a-privilege-escalation-issue-was-discovered-in-rancher-manager-s-role-based-access-control-the-inheritednamespacedrules-field-of-a-globalrole-propagates-permis2026-11-03 https://bugrater.com/releases/cve-2026-88811-missing-filtering-in-the-suse-rancher-manager-meta-proxy-could-cause-passed-in-rancher-credentials-to-be-leaked-to-cloud-providers-this-affects-suse-rancher-22026-11-03 https://bugrater.com/releases/cve-2026-119085-improper-neutralization-of-special-elements-used-in-a-template-engine-in-the-publishing-component-of-amazon-virtual-engineering-workbench-vew-could-allow-a-re2026-11-03 https://bugrater.com/releases/cve-2026-120416-a-security-vulnerability-has-been-detected-in-andyfactory-newspaper4k-up-to-0-9-6-this-affects-the-function-article-parse-of-the-file-newspaper-extractors-imag2026-11-03 https://bugrater.com/releases/cve-2026-105603-joomla-extension-dj-extensions-com-authenticated-arbitrary-file-upload-in-dj-classifieds-3-11-3-the-joomla-extension-dj-classifieds-is-vulnerable-to-an2026-11-03 https://bugrater.com/releases/cve-2026-105604-joomla-extension-dj-extensions-com-unauthenticated-sql-injection-in-dj-classifieds-3-11-3-the-joomla-extension-dj-classifieds-is-vulnerable-to-an-unauth2026-11-03 https://bugrater.com/releases/cve-2026-105605-joomla-extension-dj-extensions-com-idor-vulnerability-allowing-cross-account-ad-access-in-dj-classifieds-3-11-3-a-duplicate-my-ad-convenience-feature2026-11-03 https://bugrater.com/releases/cve-2026-105606-joomla-extension-joomlaboat-com-unauthenticated-arbitrary-file-upload-in-custom-tables-3-7-8-an-unauthenticated-attacker-can-upload-a-polyglot-file-with2026-11-03 https://bugrater.com/releases/cve-2026-119731-munshi-by-petpooja-before-2026-06-30-contained-a-payment-bypass-vulnerability-in-its-subscription-payment-webhook-at-post-api-payment-order-webhook-which-la2026-11-03 https://bugrater.com/releases/cve-2026-119732-munshi-by-petpooja-before-2026-07-28-contained-a-broken-object-level-authorization-vulnerability-that-allows-authenticated-sub-users-to-delete-invoices-belong2026-11-03 https://bugrater.com/releases/cve-2026-119733-munshi-by-petpooja-before-2026-07-07-contained-a-missing-authorization-vulnerability-in-its-company-deletion-workflow-at-delete-api-companies-company-id-w2026-11-03 https://bugrater.com/releases/cve-2026-119734-munshi-by-petpooja-before-2026-06-17-contained-a-broken-object-level-authorization-vulnerability-that-allows-authenticated-attackers-to-access-another-user-s2026-11-03 https://bugrater.com/releases/cve-2026-119735-munshi-by-petpooja-before-2026-07-13-contained-a-stored-cross-site-scripting-vulnerability-that-allows-authenticated-users-to-inject-malicious-markup-through2026-11-03 https://bugrater.com/releases/cve-2026-119736-attendo-formerly-petpooja-payroll-admin-android-application-version-3-0-13-and-earlier-contains-a-hard-coded-credentials-vulnerability-that-allows-attackers-t2026-11-03 https://bugrater.com/releases/cve-2026-120059-for-an-updatable-cursor-over-a-table-without-oids-that-has-an-auto-increment-int4-column-psqlodbc-places-that-column-s-name-as-reported-by-the-server-into-a2026-11-03 https://bugrater.com/releases/cve-2026-120065-for-an-updatable-cursor-over-a-table-without-oids-that-has-an-auto-increment-int4-column-psqlodbc-uses-that-column-to-identify-rows-it-places-the-column-s-nam2026-11-03 https://bugrater.com/releases/cve-2026-120067-for-updatable-cursors-which-are-enabled-by-default-psqlodbc-adds-hidden-ctid-and-for-tables-with-oids-oid-columns-to-the-query-it-copies-each-value-into-a2026-11-03 https://bugrater.com/releases/cve-2026-81938-grafana-mimir-s-alertmanager-rejects-tenant-supplied-receiver-configurations-that-reference-local-files-but-the-check-did-not-cover-two-http-client-settings-h2026-11-03 https://bugrater.com/releases/cve-2026-102435-the-ultra-addons-for-contact-form-7-plugin-for-wordpress-is-vulnerable-to-arbitrary-file-deletion-due-to-insufficient-file-path-validation-in-the-getobjattr-fu2026-11-03 https://bugrater.com/releases/cve-2026-119737-the-pppoe-wrapper-vendor-daemon-from-the-amlogic-android-sdk-as-shipped-on-nexbox-a95x-amlogic-s905-s905x-tv-boxes-contains-a-command-injection-vulnerabilit2026-11-03 https://bugrater.com/releases/cve-2026-119738-the-vobsub-subtitle-decoder-libsub-vob-part-of-the-amlogic-droidlogic-subtitleservice-as-shipped-on-nexbox-a95x-amlogic-s905x-tv-boxes-contains-an-infinit2026-11-03 https://bugrater.com/releases/cve-2026-119739-the-vobsub-subtitle-decoder-libsub-vob-part-of-the-amlogic-droidlogic-subtitleservice-as-shipped-on-nexbox-a95x-amlogic-s905x-tv-boxes-contains-an-out-of2026-11-03 https://bugrater.com/releases/cve-2026-119740-nexbox-a95x-tv-boxes-built-on-the-amlogic-s905x-platform-contain-an-unauthenticated-console-exposed-via-an-internal-uart-header-on-the-pcb-that-allows-physical2026-11-03 https://bugrater.com/releases/cve-2026-120689-hdf5-through-2-2-0-contains-an-uncontrolled-recursion-vulnerability-in-h5b-iterate-helper-in-src-h5b-c-when-iterating-a-version-1-b-tree-the-function-does2026-11-03 https://bugrater.com/releases/jenkins-security-releases-february-20182026-11-03 https://bugrater.com/releases/jenkins-security-releases-march-20182026-11-03 https://bugrater.com/releases/jenkins-security-releases-april-20182026-11-03 https://bugrater.com/releases/jenkins-security-releases-may-20182026-11-03 https://bugrater.com/releases/jenkins-security-releases-june-20182026-11-03 https://bugrater.com/releases/jenkins-security-releases-july-20182026-11-03 https://bugrater.com/releases/jenkins-security-releases-august-20182026-11-03 https://bugrater.com/releases/jenkins-security-releases-september-20182026-11-03 https://bugrater.com/releases/jenkins-security-releases-october-20182026-11-03 https://bugrater.com/releases/jenkins-security-releases-december-20182026-11-03 https://bugrater.com/releases/cve-2026-105475-improper-neutralization-of-a-nul-byte-in-cpanel-allows-remote-attackers-to-read-any-mail-account-s-calendar-and-contact-data2026-11-03 https://bugrater.com/releases/cve-2026-105476-improper-link-resolution-before-file-access-in-cpanel-allows-remote-authenticated-users-to-write-arbitrary-root-owned-files-and-escalate-privileges2026-11-03 https://bugrater.com/releases/cve-2026-120503-a-vulnerability-was-detected-in-echohs-geekezbrowser-up-to-1-7-2-1-8-0-this-affects-an-unknown-part-of-the-file-api-status-of-the-component-public-api-the-ma2026-11-03 https://bugrater.com/releases/cve-2026-29508-readymedia-formerly-minidlna-versions-1-3-0-through-1-3-3-contain-a-stack-based-buffer-overflow-vulnerability-that-allows-remote-attackers-to-corrupt-stack-me2026-11-03 https://bugrater.com/releases/cve-2026-115215-in-eclipse-threadx-netx-duo-versions-6-0-through-6-5-2-202603a-the-netx-secure-dtls-server-allocates-a-session-from-its-fixed-session-pool-for-the-first-datagr2026-11-03 https://bugrater.com/releases/cve-2026-115403-in-eclipse-threadx-netx-duo-versions-6-0-through-6-5-2-202603a-built-with-bsd-raw-socket-and-ipv6-support-the-ipv6-raw-send-path-uses-the-destination-table-en2026-11-03 https://bugrater.com/releases/cve-2026-120091-temporal-server-compiles-a-worker-controller-instance-module-go-temporal-io-auto-scaled-workers-into-its-worker-service-and-that-module-registers-a-compute-p2026-11-03 https://bugrater.com/releases/cve-2026-120740-a-flaw-was-found-in-hivex-by-supplying-a-specially-crafted-windows-registry-hive-file-an-attacker-can-trigger-an-out-of-bounds-memory-read-when-hivex-parses-r2026-11-03 https://bugrater.com/releases/cve-2026-86596-the-s2member-plugin-for-wordpress-is-vulnerable-to-remote-code-execution-in-all-versions-up-to-and-including-260927-via-the-item-name-parameter-parameter2026-11-03 https://bugrater.com/releases/cve-2026-120597-a-vulnerability-was-identified-in-welcart-e-commerce-plugin-up-to-2-12-6-on-wordpress-this-affects-the-function-escott-main-error-page-message-of-the-file-cla2026-11-03 https://bugrater.com/releases/cve-2026-120752-pymupdf-1-25-3-before-2-0-contains-a-stack-based-buffer-overflow-vulnerability-in-jm-set-annot-callout-line-that-copies-a-caller-supplied-number-of-callout-po2026-11-03 https://bugrater.com/releases/cve-2026-71450-authentication-bypass-using-an-alternate-path-or-channel-vulnerability-in-johnson-controls-easyio-neo-ec-and-cw-edge-controller-allows-authentication-bypass-t2026-11-03 https://bugrater.com/releases/cve-2026-120830-a-flaw-was-found-in-libslirp-in-icmp-forward-error-when-building-an-icmp-error-response-the-length-of-the-quoted-original-ipv4-packet-was-taken-from-the-ip2026-11-03 https://bugrater.com/releases/tp-link-systems-inc-security-releases-april-20262026-11-03 https://bugrater.com/releases/baserow-security-releases-september-20262026-11-03 https://bugrater.com/releases/cloudflare-security-releases-october-20262026-11-03 https://bugrater.com/releases/ning-security-releases-october-20262026-11-03 https://bugrater.com/releases/cas-bigdatalab-security-releases-october-20262026-11-03 https://bugrater.com/releases/jd-opensource-security-releases-october-20262026-11-03 https://bugrater.com/releases/tracer-cloud-security-releases-october-20262026-11-03 https://bugrater.com/releases/chatchat-space-security-releases-october-20262026-11-03 https://bugrater.com/releases/apconw-security-releases-october-20262026-11-03 https://bugrater.com/releases/evoscientist-security-releases-october-20262026-11-03 https://bugrater.com/releases/coze-dev-security-releases-october-20262026-11-03 https://bugrater.com/releases/letta-ai-security-releases-october-20262026-11-03 https://bugrater.com/releases/cve-2026-105770-octo-sts-github-com-octo-sts-app-before-0-11-2-returns-trust-policy-configuration-to-callers-whose-oidc-token-does-not-satisfy-that-policy-trustpolicy-checkt2026-11-03 https://bugrater.com/releases/cve-2026-120833-labbench-before-0-46-1-contains-a-deserialization-of-untrusted-data-vulnerability-in-read-and-read-relational-that-passes-any-file-with-a-p-or-pickle-exte2026-11-03 https://bugrater.com/releases/cve-2026-107441-an-out-of-bounds-write-vulnerability-in-the-cgi-program-of-zyxel-gs1900-24e-firmware-versions-through-2-90-aahk-2-c0-could-allow-an-unauthenticated-adjacent-att2026-11-03 https://bugrater.com/releases/cve-2026-120831-a-flaw-was-found-in-libslirp-in-if-output-when-moving-a-session-from-the-fast-queue-to-the-batch-queue-the-code-unlinked-and-reinserted-an-arbitrary-packet2026-11-03 https://bugrater.com/releases/cve-2026-76955-a-buffer-overflow-vulnerability-in-the-zdp-wtp-binary-in-zyxel-nwa110ax-firmware-versions-through-7-12-abtg-0-c0-could-allow-a-lan-based-attacker-to-escalate-pr2026-11-03 https://bugrater.com/releases/cve-2026-111464-the-wp-fastest-cache-plugin-for-wordpress-is-vulnerable-to-sensitive-information-exposure-in-all-versions-up-to-and-including-1-5-3-the-plugin-caches-the-res2026-11-03 https://bugrater.com/releases/cve-2026-120518-the-buddypress-xprofile-image-field-plugin-for-wordpress-is-vulnerable-to-arbitrary-file-deletion-in-all-versions-up-to-and-including-3-1-0-this-is-due-to-bp2026-11-03 https://bugrater.com/releases/cve-2026-120524-the-news-kit-addons-for-elementor-plugin-for-wordpress-is-vulnerable-to-stored-cross-site-scripting-via-the-formdata-parameter-in-all-versions-up-to-and-incl2026-11-03 https://bugrater.com/releases/cve-2026-120534-the-advanced-custom-fields-extended-pro-plugin-for-wordpress-is-vulnerable-to-limited-code-injection-in-all-versions-up-to-and-including-0-9-2-6-via-the-rend2026-11-03 https://bugrater.com/releases/cve-2026-120538-the-easy-digital-downloads-plugin-for-wordpress-is-vulnerable-to-authentication-bypass-leading-to-administrator-account-takeover-in-all-versions-up-to-and-incl2026-11-03 https://bugrater.com/releases/cve-2026-120544-the-academy-lms-ai-course-builder-quizzes-certificates-elearning-plugin-for-wordpress-is-vulnerable-to-directory-traversal-in-all-versions-up-to-and-incl2026-11-03 https://bugrater.com/releases/cve-2026-120551-the-wp-compress-instant-performance-speed-optimization-plugin-for-wordpress-is-vulnerable-to-authorization-bypass-in-all-versions-up-to-and-including-7-222026-11-03 https://bugrater.com/releases/cve-2026-120552-the-seo-engine-smart-seo-with-ai-schema-redirection-for-wordpress-plugin-for-wordpress-is-vulnerable-to-stored-cross-site-scripting-via-the-title-paramet2026-11-03 https://bugrater.com/releases/cve-2026-120558-the-advanced-shipment-tracking-for-woocommerce-plugin-for-wordpress-is-vulnerable-to-sql-injection-via-the-tracking-provider-parameter-of-the-post-wp-json-w2026-11-03 https://bugrater.com/releases/cve-2026-120559-the-contact-form-extender-for-divi-builder-plugin-for-wordpress-is-vulnerable-to-arbitrary-file-deletion-due-to-insufficient-file-path-validation-in-the-cfefd-r2026-11-03 https://bugrater.com/releases/cve-2026-120561-the-jetformbuilder-dynamic-blocks-form-builder-plugin-for-wordpress-is-vulnerable-to-unauthorized-modification-of-data-due-to-a-missing-capability-check-on-th2026-11-03 https://bugrater.com/releases/cve-2026-120563-the-woocommerce-multilingual-multicurrency-with-wpml-plugin-for-wordpress-is-vulnerable-to-sql-injection-in-all-versions-up-to-and-including-5-5-7-this-is2026-11-03 https://bugrater.com/releases/cve-2026-120574-the-surecart-plugin-for-wordpress-is-vulnerable-to-unauthenticated-account-takeover-in-all-versions-up-to-and-including-4-9-5-the-passwordless-one-time-code2026-11-03 https://bugrater.com/releases/cve-2026-120575-the-photo-engine-media-organizer-lightroom-plugin-for-wordpress-is-vulnerable-to-stored-cross-site-scripting-via-the-hierarchy-name-parameter-in-all-ver2026-11-03 https://bugrater.com/releases/cve-2026-120577-the-fluentcart-a-new-era-of-ecommerce-faster-lighter-and-simpler-plugin-for-wordpress-is-vulnerable-to-arbitrary-file-deletion-due-to-insufficient-file-path2026-11-03 https://bugrater.com/releases/cve-2026-120578-the-ai-alt-text-generator-plugin-for-wordpress-is-vulnerable-to-authorization-bypass-in-all-versions-up-to-and-including-2-7-0-this-is-due-to-the-plugin-not2026-11-03 https://bugrater.com/releases/cve-2026-120971-a-flaw-was-found-in-resteasy-s-default-exception-mapper-when-an-unhandled-exception-other-than-a-webapplicationexception-is-not-handled-by-an-application-excep2026-11-03 https://bugrater.com/releases/cve-2026-103379-the-wati-chat-and-notification-wordpress-plugin-through-1-1-8-does-not-require-a-valid-non-empty-secret-on-a-public-endpoint-that-returns-its-stored-api-token2026-11-03 https://bugrater.com/releases/cve-2026-104647-the-wemail-wordpress-plugin-through-2-1-6-does-not-correctly-verify-user-capabilities-in-its-rest-api-permission-checks-treating-any-user-whose-role-is-in-the2026-11-03 https://bugrater.com/releases/cve-2026-104648-the-wemail-wordpress-plugin-through-2-1-6-does-not-restrict-a-site-wide-third-party-email-service-api-key-to-administrators-exposing-it-in-an-admin-screen-tha2026-11-03 https://bugrater.com/releases/cve-2026-105967-the-gallery-for-social-photo-wordpress-plugin-through-1-0-0-41-does-not-validate-a-user-supplied-url-before-using-it-to-perform-a-server-side-request-allowing2026-11-03 https://bugrater.com/releases/cve-2026-105993-the-dt-directory-lite-addon-wordpress-plugin-through-1-1-does-not-perform-nonce-or-capability-checks-on-its-settings-handlers-allowing-unauthenticated-attacker2026-11-03 https://bugrater.com/releases/cve-2026-106004-the-dt-lms-wordpress-plugin-through-1-2-does-not-perform-capability-or-nonce-checks-on-one-of-its-ajax-actions-allowing-unauthenticated-attackers-to-revoke-an2026-11-03 https://bugrater.com/releases/cve-2026-115205-the-azexo-store-locator-wordpress-plugin-through-1-4-does-not-have-a-capability-check-or-any-authorization-control-when-deleting-a-post-allowing-any-authentica2026-11-03 https://bugrater.com/releases/cve-2026-120987-whale-browser-before-5-39-412-57-allows-an-attacker-to-bypass-the-iframe-sandbox-in-a-dual-tab-environment2026-11-03 https://bugrater.com/releases/cve-2026-120988-billboard-js-before-4-1-3-allows-an-attacker-to-execute-malicious-javascript-due-to-improper-sanitization-of-series-ids-during-legend-template-rendering2026-11-03 https://bugrater.com/releases/cve-2026-13594-zoho-corporation-s-manageengine-log360-and-eventlog-analyzer-versions-13062-and-below-are-vulnerable-to-an-issue-that-could-allow-an-adversary-to-gain-unauthori2026-11-03 https://bugrater.com/releases/cve-2026-103327-the-cryptocloud-wordpress-plugin-from-3-0-0-through-3-0-1-does-not-verify-the-authenticity-of-the-payment-notifications-received-by-its-gateway-callback-as-the2026-11-03 https://bugrater.com/releases/cve-2026-113421-in-eclipse-threadx-versions-6-0-1-through-6-5-2-202603-threadx-modules-does-not-revoke-a-module-s-trace-buffer-full-callback-when-the-module-is-stopped-and-unl2026-11-03 https://bugrater.com/releases/cve-2026-115231-in-eclipse-threadx-versions-6-0-1-through-6-5-2-202603-the-module-manager-lets-a-user-mode-memory-protected-module-post-a-forged-callback-request-to-another-m2026-11-03 https://bugrater.com/releases/cve-2026-118444-out-of-bounds-read-vulnerabilities-in-the-pybddisasm-python-bindings-may-disclose-adjacent-process-memory-during-instruction-decoding-the-nd-decode-function-ma2026-11-03 https://bugrater.com/releases/cve-2026-121020-exposure-of-sensitive-information-to-an-unauthorized-actor-cwe-200-in-the-security-configuration-api-in-axxonsoft-axxon-one-before-3-2-0-on-windows-and-linux2026-11-03 https://bugrater.com/releases/cve-2026-121021-plaintext-storage-of-a-password-cwe-256-in-the-securitymanager-shared-configuration-in-axxonsoft-axxon-one-before-3-1-0-on-windows-and-linux-allows-a-local-at2026-11-03 https://bugrater.com/releases/cve-2026-121022-use-of-default-password-cwe-1393-in-the-web-client-in-axxonsoft-axxon-one-before-3-0-0-on-windows-and-linux-allows-a-remote-unauthenticated-attacker-to-log-in2026-11-03 https://bugrater.com/releases/cve-2026-121023-insertion-of-sensitive-information-into-log-file-cwe-532-in-the-arp-agent-component-in-axxonsoft-axxonnet-before-3-25-0-on-windows-and-linux-allows-a-local-at2026-11-03 https://bugrater.com/releases/cve-2026-121024-incorrect-authorization-cwe-863-in-the-health-monitoring-service-in-axxonsoft-axxonnet-before-3-28-0-on-linux-allows-a-remote-attacker-in-possession-of-a-shar2026-11-03 https://bugrater.com/releases/cve-2026-91075-the-eupago-gateway-for-woocommerce-wordpress-plugin-from-4-5-0-through-4-7-5-does-not-verify-the-authenticity-of-incoming-payment-confirmation-webhook-requests2026-11-03 https://bugrater.com/releases/cve-2026-92610-in-esmf-sdk-py-aspect-model-loader-versions-2-1-2-to-2-2-1-the-aspect-model-loader-resolves-cross-file-model-references-by-extracting-the-third-and-fourth-colo2026-11-03 https://bugrater.com/releases/cve-2026-119641-unsupported-when-assigned-improper-input-validation-vulnerability-in-apache-oozie-an-authenticated-oozie-user-can-reconfigure-another-tenant-s-workflow-j2026-11-03 https://bugrater.com/releases/cve-2026-119724-unsupported-when-assigned-improper-restriction-of-recursive-entity-references-in-dtds-xml-entity-expansion-vulnerability-in-apache-jclouds-this-is2026-11-03 https://bugrater.com/releases/cve-2026-120327-the-click-tracking-middleware-accepts-an-arbitrary-target-url-and-redirects-to-it-attackers-can-misuse-links-to-the-website-to-redirect-users-to-external-sites2026-11-03 https://bugrater.com/releases/cve-2026-120328-the-click-tracking-middleware-does-not-validate-the-authentication-code-of-a-recipient-if-the-code-is-omitted-unauthenticated-attackers-can-retrieve-personal-d2026-11-03 https://bugrater.com/releases/cve-2026-120329-saving-the-configuration-of-the-mail-backend-module-writes-submitted-settings-to-the-page-tsconfig-without-restricting-them-to-the-configuration-options-of-the2026-11-03 https://bugrater.com/releases/cve-2026-120330-backend-actions-and-ajax-routes-of-the-mail-module-do-not-check-whether-the-backend-user-has-access-to-the-page-of-the-requested-mail-or-recipient-group-backen2026-11-03 https://bugrater.com/releases/cve-2026-120331-content-of-external-url-mails-their-stylesheets-and-images-to-embed-is-fetched-by-the-server-without-validating-the-target-host-backend-users-with-access-to-t2026-11-03 https://bugrater.com/releases/cve-2026-120332-the-html-content-of-mails-and-tracked-urls-are-rendered-unescaped-in-the-backend-module-backend-users-with-access-to-the-mail-module-can-inject-arbitrary-html2026-11-03 https://bugrater.com/releases/cve-2026-120333-the-actions-linked-in-the-emails-of-the-extension-e-g-to-confirm-a-registration-or-the-deletion-of-an-account-do-not-reject-requests-with-a-missing-or-invali2026-11-03 https://bugrater.com/releases/cve-2026-89292-in-eclipse-mnestix-browser-versions-1-6-0-up-until-but-excluding-2-3-0-it-was-possible-for-an-unauthenticated-attacker-to-exfiltrate-the-mnestix-backend-api-key2026-11-03 https://bugrater.com/releases/cve-2026-89293-in-eclipse-mnestix-browser-versions-1-2-0-up-until-but-excluding-2-3-0-it-was-possible-for-an-unauthenticated-attacker-to-perform-actions-that-are-only-allowed2026-11-03 https://bugrater.com/releases/cve-2026-114442-apache-hertzbeat-versions-1-7-1-1-7-2-1-7-3-1-8-0-and-1-9-0-have-incomplete-xpath-expression-validation-in-the-http-collector-xml-parsing-path-an-authentic2026-11-03 https://bugrater.com/releases/cve-2026-99251-in-the-linux-kernel-the-following-vulnerability-has-been-resolved-drivers-hv-avoid-infinite-retry-loop-in-init-vp-index-there-is-a-retry-loop-in-init-vp2026-11-03 https://bugrater.com/releases/cve-2026-108046-direct-object-reference-idor-vulnerability-in-alosuite-due-to-insufficient-authorization-checks-when-processing-object-identifiers-by-modifying-the-identifie2026-11-03 https://bugrater.com/releases/cve-2026-108047-inadequate-authorization-vulnerability-in-alosuite-s-user-invitation-functionality-the-requests-userinvitation-endpoint-does-not-properly-validate-the-assig2026-11-03 https://bugrater.com/releases/cve-2026-108048-vulnerability-due-to-a-lack-of-request-limits-in-alosuite-s-password-recovery-functionality-the-account-resetpwd-endpoint-does-not-enforce-adequate-restrict2026-11-03 https://bugrater.com/releases/cve-2026-108049-clickjacking-vulnerability-in-the-alosuite-web-application-the-affected-login-interface-can-be-embedded-in-a-web-page-controlled-by-an-attacker-because-it-does2026-11-03 https://bugrater.com/releases/cve-2026-108050-a-stored-cross-site-scripting-xss-vulnerability-in-alosuite-that-affects-the-delivery-note-functionality-insufficient-sanitization-and-encoding-of-the-specif2026-11-03 https://bugrater.com/releases/cve-2026-108051-a-stored-cross-site-scripting-xss-vulnerability-in-alosuite-that-affects-the-delivery-note-functionality-insufficient-sanitization-and-encoding-of-the-specif2026-11-03 https://bugrater.com/releases/cve-2026-108052-a-stored-cross-site-scripting-xss-vulnerability-in-alosuite-that-affects-the-delivery-note-functionality-insufficient-sanitization-and-encoding-of-the-specif2026-11-03 https://bugrater.com/releases/cve-2026-108053-a-stored-cross-site-scripting-xss-vulnerability-in-alosuite-that-affects-the-delivery-note-functionality-insufficient-sanitization-and-encoding-of-the-specif2026-11-03 https://bugrater.com/releases/cve-2026-108054-a-stored-cross-site-scripting-xss-vulnerability-in-alosuite-that-affects-the-delivery-note-functionality-insufficient-sanitization-and-encoding-of-the-specif2026-11-03 https://bugrater.com/releases/cve-2026-108055-a-stored-cross-site-scripting-xss-vulnerability-in-alosuite-that-affects-the-delivery-note-functionality-insufficient-sanitization-and-encoding-of-the-specif2026-11-03 https://bugrater.com/releases/cve-2026-108056-a-stored-cross-site-scripting-xss-vulnerability-in-alosuite-that-affects-the-delivery-note-functionality-insufficient-sanitization-and-encoding-of-the-specif2026-11-03 https://bugrater.com/releases/cve-2026-108057-a-stored-cross-site-scripting-xss-vulnerability-in-alosuite-that-affects-the-delivery-note-functionality-insufficient-sanitization-and-encoding-of-the-specif2026-11-03 https://bugrater.com/releases/cve-2026-108058-a-stored-cross-site-scripting-xss-vulnerability-in-alosuite-that-affects-the-delivery-note-functionality-insufficient-sanitization-and-encoding-of-the-specif2026-11-03 https://bugrater.com/releases/cve-2026-108059-a-stored-cross-site-scripting-xss-vulnerability-in-alosuite-that-affects-the-delivery-note-functionality-insufficient-sanitization-and-encoding-of-the-specif2026-11-03 https://bugrater.com/releases/cve-2026-108060-a-stored-cross-site-scripting-xss-vulnerability-in-alosuite-that-affects-the-delivery-note-functionality-insufficient-sanitization-and-encoding-of-the-specif2026-11-03 https://bugrater.com/releases/cve-2026-121458-instatic-before-0-0-21-contains-a-missing-authorization-vulnerability-in-its-ai-mcp-content-read-tools-that-allows-low-privileged-authenticated-users-with-ai-ch2026-11-03 https://bugrater.com/releases/cve-2026-76124-the-buddyboss-app-plugin-for-wordpress-is-vulnerable-to-arbitrary-file-upload-in-all-versions-up-to-and-including-3-2-1-via-the-send-feedback-function-this-i2026-11-03 https://bugrater.com/releases/cve-2026-119742-nagios-xi-before-2026r2-contains-an-os-command-injection-vulnerability-in-the-mib-upload-feature-where-the-install-mib-function-in-mibs-php-sanitizes-uploaded2026-11-03 https://bugrater.com/releases/cve-2026-89295-in-eclipse-mnestix-aas-generator-versions-0-1-0-up-until-but-excluding-1-5-0-a-practical-upper-bound-on-the-client-supplied-count-parameter-of-the-get-api-v12026-11-03 https://bugrater.com/releases/cve-2026-110265-a-specially-crafted-malformed-search-query-could-return-results-from-outside-a-user-s-organization-log-analysis-of-runzero-s-hosted-environment-found-only-test2026-11-03 https://bugrater.com/releases/cve-2026-118488-in-eclipse-vert-x-versions-4-0-0-4-5-35-or-5-0-0-5-2-2-when-a-malicious-server-keeps-sending-bytes-on-an-eol-terminated-line-not-length-prefixed-for-ex2026-11-03 https://bugrater.com/releases/cve-2026-118489-in-eclipse-vert-x-versions-4-0-0-4-5-35-or-5-0-0-5-2-2-when-one-cachingwebclient-is-shared-across-users-the-documented-pattern-of-a-per-user-webclient2026-11-03 https://bugrater.com/releases/cve-2026-121387-freerdp-2-0-0-before-3-32-2-contains-an-out-of-bounds-read-vulnerability-in-freerdp-dsp-decode-gsm610-that-allows-malicious-rdp-servers-to-read-past-audio-buffe2026-11-03 https://bugrater.com/releases/cve-2026-121388-freerdp-from-3-0-0-before-3-32-2-contains-an-uncontrolled-resource-allocation-vulnerability-that-allows-malicious-rdp-servers-to-force-large-client-allocations2026-11-03 https://bugrater.com/releases/cve-2026-121389-freerdp-from-3-27-0-before-3-32-2-contains-a-denial-of-service-vulnerability-in-rdpdr-dump-packet-that-allows-malicious-rdp-servers-to-abort-clients-by-sending2026-11-03 https://bugrater.com/releases/cve-2026-121390-freerdp-3-0-0-before-3-32-2-built-with-with-aad-on-contains-a-reachable-assertion-because-its-arm-gateway-response-parser-accepts-a-missing-or-non-string-redire2026-11-03 https://bugrater.com/releases/cve-2026-121391-freerdp-from-3-0-0-before-3-32-2-contains-a-file-descriptor-leak-in-parallel-process-irp-create-that-fails-to-close-previous-descriptors-on-repeated-irp-mj-crea2026-11-03 https://bugrater.com/releases/cve-2026-121393-freerdp-from-3-0-0-before-3-32-2-contains-a-denial-of-service-vulnerability-that-allows-malicious-rdp-servers-to-abort-clients-built-with-verbose-winpr-assertio2026-11-03 https://bugrater.com/releases/cve-2026-121394-freerdp-from-3-11-0-before-3-32-2-contains-an-assertion-failure-in-the-remotefx-rlgr-decoder-that-allows-malicious-servers-to-terminate-clients-attackers-contr2026-11-03 https://bugrater.com/releases/cve-2026-121395-freerdp-from-3-17-0-before-3-32-2-contains-an-assertion-failure-in-the-remotefx-differential-decoder-when-verbose-winpr-assertions-are-enabled-a-malicious-rdp2026-11-03 https://bugrater.com/releases/cve-2026-121396-freerdp-clients-from-3-0-0-before-3-32-2-built-with-verbose-winpr-assertions-contain-a-reachable-assertion-in-rts-read-auth-verifier-triggered-by-malformed-rts2026-11-03 https://bugrater.com/releases/cve-2026-121397-freerdp-before-3-32-2-contains-a-heap-buffer-over-read-vulnerability-in-save-png-to-buffer-that-allows-malicious-rdp-servers-to-leak-client-memory-by-sending2026-11-03 https://bugrater.com/releases/cve-2026-121398-freerdp-before-3-32-2-contains-a-cross-thread-use-after-free-vulnerability-in-the-freerdp-proxy-dyn-channel-dump-module-during-session-teardown-a-malicious-rdp2026-11-03 https://bugrater.com/releases/cve-2026-121399-freerdp-before-3-32-2-contains-a-memory-allocation-vulnerability-in-rdg-receive-packet-that-allows-a-malicious-rd-gateway-to-force-a-2-gib-client-allocation-bef2026-11-03 https://bugrater.com/releases/cve-2026-121400-freerdp-before-3-32-2-contains-a-denial-of-service-vulnerability-in-rdg-process-control-packet-that-allows-a-malicious-rd-gateway-to-exhaust-client-cpu-by-sendi2026-11-03 https://bugrater.com/releases/cve-2026-121401-freerdp-before-3-32-2-contains-a-denial-of-service-vulnerability-where-rdg-process-packet-dispatches-a-pkt-type-extended-auth-msg-without-verifying-negotiated-m2026-11-03 https://bugrater.com/releases/cve-2026-121402-freerdp-before-3-32-2-contains-a-null-pointer-dereference-vulnerability-that-allows-malicious-rdp-servers-to-crash-xfreerdp-clients-by-sending-a-zero-width-rdpg2026-11-03 https://bugrater.com/releases/cve-2026-121403-freerdp-before-3-32-2-contains-a-denial-of-service-vulnerability-where-a-malformed-drive-device-iorequest-with-a-truncated-irp-mj-create-body-silently-kills-the2026-11-03 https://bugrater.com/releases/cve-2026-121404-freerdp-before-3-32-2-contains-a-denial-of-service-vulnerability-in-the-shadow-server-that-allows-authenticated-rdp-clients-to-spin-server-threads-by-sending-ze2026-11-03 https://bugrater.com/releases/cve-2026-121405-freerdp-before-3-32-2-fails-to-cap-the-outputbufferlength-in-serial-device-control-irp-requests-allowing-malicious-servers-to-trigger-excessive-memory-allocati2026-11-03 https://bugrater.com/releases/cve-2026-121406-freerdp-before-3-32-2-allows-a-client-assertion-abort-because-rdpgfx-on-data-received-rejects-only-negative-zgfx-decompress-status-and-passes-the-resulting-null2026-11-03 https://bugrater.com/releases/cve-2026-121407-freerdp-before-3-32-2-contains-a-denial-of-service-vulnerability-in-the-shadow-server-s-remdesk-server-thread-that-allows-authenticated-clients-to-crash-the-pro2026-11-03 https://bugrater.com/releases/cve-2026-121408-freerdp-before-3-32-2-contains-a-use-after-free-in-the-urbdrc-usb-redirection-channel-because-findchannelbyid-returns-a-channel-pointer-without-a-reference-and2026-11-03 https://bugrater.com/releases/cve-2026-121409-freerdp-before-3-32-2-contains-a-denial-of-service-vulnerability-that-allows-malicious-servers-or-unauthenticated-peers-to-abort-clients-or-proxies-via-oversize2026-11-03 https://bugrater.com/releases/cve-2026-121410-freerdp-before-3-32-2-contains-a-denial-of-service-vulnerability-in-the-rdpgfx-alpha-wiretosurface-2-handler-that-fails-to-validate-zero-surface-dimensions-a-m2026-11-03 https://bugrater.com/releases/cve-2026-121411-freerdp-before-3-32-2-fails-to-bound-server-supplied-target-dimensions-and-output-origin-in-rdpgfx-mapsurfacetoscaledoutput-pdus-allowing-malicious-rdp-servers2026-11-03 https://bugrater.com/releases/cve-2026-121412-freerdp-from-3-0-0-before-3-32-2-contains-an-uncontrolled-resource-consumption-vulnerability-in-the-proxy-that-lets-connected-clients-retain-heap-memory-via-int2026-11-03 https://bugrater.com/releases/cve-2026-121416-surrealdb-2-0-0-before-3-3-1-does-not-enforce-deny-funcs-restrictions-on-method-style-function-calls-in-the-streaming-engine-because-methodpart-evaluate-inv2026-11-03 https://bugrater.com/releases/cve-2026-121417-surrealdb-before-3-3-0-contains-a-use-after-free-vulnerability-in-surrealdb-core-kv-backends-that-pass-borrowed-transaction-state-into-affinitypool-spawn-local2026-11-03 https://bugrater.com/releases/cve-2026-121418-surrealdb-from-3-1-0-before-3-3-0-contains-an-incorrect-authorization-vulnerability-that-allows-record-users-to-infer-restricted-field-values-because-the-stream2026-11-03 https://bugrater.com/releases/cve-2026-121419-surrealdb-from-3-1-0-before-3-3-0-contains-an-improper-authentication-vulnerability-where-the-mcp-boundsubject-fingerprint-uses-the-access-method-name-instead-o2026-11-03 https://bugrater.com/releases/cve-2026-121420-surrealdb-from-3-2-0-before-3-3-0-contains-a-server-side-request-forgery-vulnerability-in-the-filteringresolver-is-private-ip-check-that-fails-to-unwrap-nat642026-11-03 https://bugrater.com/releases/cve-2026-121421-surrealdb-3-1-0-before-3-3-0-contains-a-server-side-request-forgery-vulnerability-in-network-capability-matching-because-port-specific-deny-net-rules-host-po2026-11-03 https://bugrater.com/releases/cve-2026-121422-surrealdb-from-3-1-0-before-3-3-0-contains-a-server-side-request-forgery-vulnerability-that-allows-database-owners-to-bypass-port-specific-deny-net-rules-by-usi2026-11-03 https://bugrater.com/releases/cve-2026-121423-surrealdb-before-3-3-0-contains-an-unbounded-recursion-vulnerability-that-allows-authenticated-users-to-abort-the-surreald-process-by-triggering-stack-overflow2026-11-03 https://bugrater.com/releases/cve-2026-121427-azuracast-through-0-23-8-fails-to-remove-frontend-config-custom-config-in-put-station-id-profile-edit-for-users-lacking-the-manage-station-broadcasting-permi2026-11-03 https://bugrater.com/releases/cve-2026-121428-azuracast-through-0-23-8-contains-a-remote-code-execution-vulnerability-that-allows-authenticated-station-managers-to-inject-supervisor-configuration-through-th2026-11-03 https://bugrater.com/releases/cve-2026-121429-azuracast-through-0-23-8-contains-a-command-injection-vulnerability-that-allows-station-users-with-profile-permission-to-execute-os-commands-via-stereotool-sett2026-11-03 https://bugrater.com/releases/cve-2026-121430-azuracast-before-0-24-0-contains-a-missing-authorization-vulnerability-in-the-get-and-post-api-station-station-id-waveform-media-id-routes-which-lack-perm2026-11-03 https://bugrater.com/releases/cve-2026-121432-azuracast-before-0-24-0-contains-a-crlf-injection-vulnerability-that-allows-low-privilege-station-users-to-inject-playlist-entries-by-embedding-cr-lf-sequences2026-11-03 https://bugrater.com/releases/cve-2026-121433-azuracast-before-0-24-0-contains-a-stored-csv-formula-injection-vulnerability-that-allows-station-users-with-media-permission-to-persist-formula-prefixed-metada2026-11-03 https://bugrater.com/releases/cve-2026-121434-froxlor-2-3-0-before-2-3-15-contains-a-missing-authorization-check-in-the-certificates-add-and-certificates-update-api-commands-which-do-not-verify-whether-a-d2026-11-03 https://bugrater.com/releases/cve-2026-121435-froxlor-before-2-3-15-contains-an-authorization-bypass-vulnerability-that-allows-authenticated-customers-to-create-mysql-databases-by-calling-the-mysqls-add-api2026-11-03 https://bugrater.com/releases/cve-2026-121436-froxlor-from-2-3-8-before-2-3-15-contains-an-information-disclosure-vulnerability-that-allows-administrators-with-customers-see-all-to-view-every-account-s-api2026-11-03 https://bugrater.com/releases/cve-2026-121437-mistune-from-3-3-0-before-3-3-4-contains-a-denial-of-service-vulnerability-that-allows-remote-attackers-to-exhaust-cpu-through-quadratic-time-emphasis-delimiter2026-11-03 https://bugrater.com/releases/cve-2026-121438-mistune-before-3-3-3-contains-a-denial-of-service-vulnerability-in-inlineparser-parse-link-that-allows-attackers-to-cause-quadratic-cpu-growth-by-supplying-bala2026-11-03 https://bugrater.com/releases/cve-2026-121442-frappe-hrms-before-15-61-0-contains-a-permission-bypass-vulnerability-that-allows-authenticated-employees-to-view-other-employees-expense-advance-details-due-t2026-11-03 https://bugrater.com/releases/cve-2026-121443-svg-sanitizer-from-1-1-0-before-1-1-1-contains-a-denial-of-service-vulnerability-that-allows-remote-attackers-to-crash-requests-by-submitting-svg-input-ending-i2026-11-03 https://bugrater.com/releases/cve-2026-121444-svg-sanitizer-from-0-11-0-before-1-1-0-contains-an-algorithmic-complexity-denial-of-service-vulnerability-in-hasinfiniteloop-and-countuse-of-the-use-referen2026-11-03 https://bugrater.com/releases/cve-2026-121446-svg-sanitizer-from-0-5-0-before-1-1-0-contains-an-incomplete-filtering-vulnerability-that-allows-attackers-to-bypass-remote-url-removal-by-using-css-escape-sequ2026-11-03 https://bugrater.com/releases/cve-2026-121447-svg-sanitizer-before-1-1-0-contains-a-cross-site-scripting-vulnerability-that-allows-attackers-to-bypass-sanitization-by-placing-javascript-urls-in-the-animate2026-11-03 https://bugrater.com/releases/cve-2026-121448-dockhand-before-1-0-54-contains-a-path-traversal-vulnerability-that-allows-authenticated-users-to-read-overwrite-and-delete-env-files-outside-the-stacks-root2026-11-03 https://bugrater.com/releases/cve-2026-121449-dockhand-from-1-0-47-before-1-0-54-exposes-plaintext-stack-secrets-because-deploystack-attaches-resolved-secret-values-to-its-result-as-resolvedsecrets-which2026-11-03 https://bugrater.com/releases/cve-2026-108147-an-issue-was-discovered-in-django-6-1-before-6-1-3-6-0-4-before-6-0-10-and-5-2-13-before-5-2-19-django-http-multipartparser-multipartparser-is-subject-to-e2026-11-03 https://bugrater.com/releases/cve-2026-111211-an-issue-was-discovered-in-django-6-1-before-6-1-3-6-0-before-6-0-10-and-5-2-before-5-2-19-django-contrib-gis-forms-widgets-basegeometrywidget-deserialize2026-11-03 https://bugrater.com/releases/cve-2026-111362-an-issue-was-discovered-in-django-6-1-before-6-1-3-6-0-before-6-0-10-and-5-2-before-5-2-19-django-contrib-gis-gdal-ogrgeometry-does-not-restrict-external-c2026-11-03 https://bugrater.com/releases/cve-2026-113593-an-issue-was-discovered-in-django-6-1-before-6-1-3-6-0-before-6-0-10-and-5-2-before-5-2-19-the-django-middleware-cache-updatecachemiddleware-and-the-djang2026-11-03 https://bugrater.com/releases/cve-2026-113733-an-issue-was-discovered-in-django-6-1-before-6-1-3-and-6-0-before-6-0-10-the-django-contrib-admin-utils-display-for-field-function-did-not-obfuscate-the-pa2026-11-03 https://bugrater.com/releases/cve-2026-114582-an-issue-was-discovered-in-django-6-1-before-6-1-3-6-0-before-6-0-10-and-5-2-before-5-2-19-django-contrib-gis-gdal-spatialreference-and-related-transform2026-11-03 https://bugrater.com/releases/cve-2026-118487-in-eclipse-vert-x-versions-4-0-0-4-5-35-or-5-0-0-5-2-2-the-frameparser-in-vertx-stomp-creates-a-recordparser-without-setting-maxrecordsize-so-any2026-11-03 https://bugrater.com/releases/cve-2026-118505-improper-restriction-of-excessive-authentication-attempts-vulnerability-in-team-alembic-ash-authentication-allows-an-unauthenticated-attacker-to-guess-passwords2026-11-03 https://bugrater.com/releases/cve-2026-119215-authorization-bypass-through-user-controlled-key-vulnerability-in-team-alembic-ash-authentication-allows-a-user-with-an-account-to-install-a-totp-secret-they-co2026-11-03 https://bugrater.com/releases/cve-2026-119741-rsync-through-3-5-1-contains-a-denial-of-service-vulnerability-in-the-delta-transfer-sender-s-hash-search-in-match-c-that-allows-malicious-receivers-to-trigge2026-11-03 https://bugrater.com/releases/cve-2026-121260-a-flaw-has-been-found-in-ziroom-zhome-a0101-1-0-1-0-build-202004151405-this-issue-affects-the-function-loadstring-of-the-file-usr-lib-lua-luci-controller-api-z2026-11-03 https://bugrater.com/releases/cve-2026-121450-cfnext-before-3-1-0-contains-a-weak-cryptographic-derivation-vulnerability-that-allows-subscription-link-holders-to-recover-the-admin-password-because-the-subsc2026-11-03 https://bugrater.com/releases/cve-2026-121451-ab-download-manager-before-1-11-2-contains-a-cross-site-request-forgery-vulnerability-in-its-unauthenticated-browser-integration-api-that-allows-remote-attacker2026-11-03 https://bugrater.com/releases/cve-2026-121452-bbs-go-through-4-4-6-contains-an-improper-certificate-validation-vulnerability-that-allows-network-positioned-attackers-to-intercept-smtp-traffic-because-sendem2026-11-03 https://bugrater.com/releases/cve-2026-121453-sqlbot-through-1-10-3-contains-a-path-traversal-vulnerability-in-the-importtodb-endpoint-that-allows-authenticated-workspace-administrators-to-read-files-via-an2026-11-03 https://bugrater.com/releases/cve-2026-121454-padloc-through-4-3-0-contains-a-missing-authentication-vulnerability-in-scimserver-handlescimget-that-allows-unauthenticated-attackers-to-read-scim-directori2026-11-03 https://bugrater.com/releases/cve-2026-121455-dbgate-before-7-3-3-contains-a-missing-authorization-vulnerability-that-allows-connection-restricted-authenticated-users-to-bypass-login-permissions-because-tes2026-11-03 https://bugrater.com/releases/cve-2026-121543-smart-sso-through-2-0-1-contains-an-incorrect-authorization-vulnerability-in-permissionfilter-that-allows-any-authenticated-user-to-call-admin-console-apis-beca2026-11-03 https://bugrater.com/releases/cve-2026-121544-koodo-reader-through-2-4-6-contains-a-path-traversal-vulnerability-in-the-self-hosted-http-server-s-opds-handlers-that-allows-authenticated-attackers-to-read-fi2026-11-03 https://bugrater.com/releases/cve-2026-121545-dreeve-before-5-8-0-contains-a-missing-authentication-vulnerability-in-stravawebhookrequesthandler-handleevent-that-allows-unauthenticated-attackers-to-forge-s2026-11-03 https://bugrater.com/releases/cve-2026-121546-rutorrent-before-5-3-20-contains-a-path-traversal-vulnerability-in-the-datadir-plugin-that-allows-authenticated-users-to-escape-the-topdirectory-jail-because-co2026-11-03 https://bugrater.com/releases/cve-2026-121547-canop-dysk-before-3-8-2-contains-a-terminal-escape-sequence-injection-vulnerability-that-allows-local-users-to-inject-control-sequences-by-crafting-mount-metada2026-11-03 https://bugrater.com/releases/cve-2026-121548-jarun-nnn-through-5-3-contains-an-os-command-injection-vulnerability-in-plugins-togglex-that-allows-attackers-to-execute-commands-via-crafted-filenames-attacke2026-11-03 https://bugrater.com/releases/cve-2026-121549-nnn-through-5-3-contains-an-insecure-temporary-file-vulnerability-in-the-pdfread-and-nuke-plugins-that-allows-local-attackers-to-overwrite-files-by-exploiting-p2026-11-03 https://bugrater.com/releases/cve-2026-121550-nnn-through-5-3-contains-an-insecure-file-handling-vulnerability-that-allows-local-attackers-to-redirect-writes-because-main-accepts-an-existing-nnn-fifo-path2026-11-03 https://bugrater.com/releases/cve-2026-121551-postfixadmin-through-4-0-5-contains-a-stored-cross-site-scripting-vulnerability-that-allows-authenticated-mailbox-users-to-inject-script-by-creating-a-totp-exce2026-11-03 https://bugrater.com/releases/cve-2026-121552-dromara-domain-admin-before-1-6-79-contains-a-missing-authorization-vulnerability-in-the-post-api-getgroupuserlist-handler-that-allows-authenticated-users-to-r2026-11-03 https://bugrater.com/releases/cve-2026-121553-cotonti-through-1-0-0-generates-registration-and-email-change-validation-tokens-with-md5-microtime-allowing-attackers-to-bypass-email-ownership-verification2026-11-03 https://bugrater.com/releases/cve-2026-121554-cordova-plugin-advanced-http-1-5-0-through-3-3-1-contains-an-information-disclosure-vulnerability-that-leaks-cookies-to-third-party-hosts-because-the-javascript2026-11-03 https://bugrater.com/releases/cve-2026-121555-foxel-through-2-4-0-contains-a-missing-authentication-vulnerability-that-allows-unauthenticated-attackers-to-read-files-by-requesting-the-api-fs-stream-and-ap2026-11-03 https://bugrater.com/releases/cve-2026-121556-fastbee-through-2-1-0-contains-an-insecure-direct-object-reference-vulnerability-in-productcontroller-that-allows-authenticated-tenant-users-to-access-other-ten2026-11-03 https://bugrater.com/releases/cve-2026-121557-wppconnect-server-through-2-10-74-contains-a-missing-authentication-vulnerability-that-allows-unauthenticated-attackers-to-send-whatsapp-messages-by-calling-the2026-11-03 https://bugrater.com/releases/cve-2026-121558-auditpilot-before-commit-4669c93-contains-an-authorization-bypass-vulnerability-in-metadata-allowed-in-rag-agentic-rag-py-that-allows-authenticated-users-to-re2026-11-03 https://bugrater.com/releases/cve-2026-121559-glpi-10-0-0-before-10-0-28-and-11-0-0-before-11-0-10-contains-a-privilege-escalation-vulnerability-that-allows-authenticated-users-to-obtain-elevated-profiles-b2026-11-03 https://bugrater.com/releases/cve-2026-121560-logchimp-0-9-0-alpha-1-before-0-9-3-contains-an-authorization-bypass-vulnerability-that-allows-authenticated-post-authors-to-modify-any-other-post-by-supplying2026-11-03 https://bugrater.com/releases/cve-2026-121561-label-studio-before-1-23-2-label-studio-sdk-before-2-1-2-contains-a-server-side-request-forgery-vulnerability-that-allows-authenticated-users-to-read-internal2026-11-03 https://bugrater.com/releases/cve-2026-121562-ctfd-3-1-0-before-3-8-7-contains-an-information-disclosure-vulnerability-in-the-api-v1-teams-list-endpoint-that-exposes-non-public-team-custom-field-values-un2026-11-03 https://bugrater.com/releases/cve-2026-121564-incomplete-comparison-with-missing-factors-cwe-1023-in-merge-chats-whatstk-utils-chat-merge-py-reached-from-basechat-merge-in-whatstk-from-0-3-0-befor2026-11-03 https://bugrater.com/releases/cve-2026-73328-volmarg-personal-management-system-through-2-1-0-contains-an-unrestricted-file-upload-vulnerability-that-allows-authenticated-users-to-upload-php-files-via-the2026-11-03 https://bugrater.com/releases/cve-2026-97350-securepoint-ssl-vpn-client-v2-on-windows-contains-vulnerabilities-in-the-handling-of-openvpn-configurations-and-proxy-settings-that-allow-non-privileged-local-u2026-11-03 https://bugrater.com/releases/cve-2026-103077-missing-authorization-vulnerability-in-mycred-mycred-mycred-allows-exploiting-incorrectly-configured-access-control-security-levels-this-issue-affects-mycred-f2026-11-03 https://bugrater.com/releases/cve-2026-103916-docker-sandboxes-sbx-cp-does-not-safely-confine-host-side-paths-to-a-shared-workspace-a-malicious-sandbox-can-create-or-replace-a-workspace-symlink-so-that-a-l2026-11-03 https://bugrater.com/releases/cve-2026-109593-an-unauthenticated-attacker-with-network-access-to-the-sonicwall-gms-9-5-2-and-earlier-versions-may-be-able-to-read-internal-gms-files-potentially-exposing-sen2026-11-03 https://bugrater.com/releases/cve-2026-109594-post-authentication-improper-neutralization-of-special-elements-used-in-an-sql-command-sql-injection-vulnerability-has-been-identified-in-the-end-of-life-so2026-11-03 https://bugrater.com/releases/cve-2026-114183-insertion-of-sensitive-information-into-sent-data-vulnerability-in-wpvibes-anywhere-elementor-anywhere-elementor-allows-retrieve-embedded-sensitive-data-this-is2026-11-03 https://bugrater.com/releases/cve-2026-114185-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-vulnerability-in-wpvibes-anywhere-elementor-anywhere-elementor-allows-store2026-11-03 https://bugrater.com/releases/cve-2026-114187-missing-authorization-vulnerability-in-wpvibes-anywhere-elementor-anywhere-elementor-allows-exploiting-incorrectly-configured-access-control-security-levels-thi2026-11-03 https://bugrater.com/releases/cve-2026-116858-improper-neutralization-of-script-related-html-tags-in-a-web-page-basic-xss-vulnerability-in-wpmu-dev-forminator-forminator-allows-code-injection-this-issue-a2026-11-03 https://bugrater.com/releases/cve-2026-116859-missing-authorization-vulnerability-in-wpmu-dev-forminator-forminator-allows-exploiting-incorrectly-configured-access-control-security-levels-this-issue-affects2026-11-03 https://bugrater.com/releases/cve-2026-119485-missing-authorization-vulnerability-in-wedevs-dokan-dokan-lite-allows-exploiting-incorrectly-configured-access-control-security-levels-this-issue-affects-dokan2026-11-03 https://bugrater.com/releases/cve-2026-119487-missing-authorization-vulnerability-in-wedevs-dokan-dokan-lite-allows-exploiting-incorrectly-configured-access-control-security-levels-this-issue-affects-dokan2026-11-03 https://bugrater.com/releases/cve-2026-119495-missing-authorization-vulnerability-in-webberzone-better-search-better-search-allows-exploiting-incorrectly-configured-access-control-security-levels-this-issue2026-11-03 https://bugrater.com/releases/cve-2026-119509-missing-authorization-vulnerability-in-eranfl-clickcease-click-fraud-protection-clickcease-click-fraud-protection-allows-exploiting-incorrectly-configured-acces2026-11-03 https://bugrater.com/releases/cve-2026-119521-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-vulnerability-in-cozmoslabs-paid-member-subscriptions-paid-member-subscript2026-11-03 https://bugrater.com/releases/cve-2026-120843-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-vulnerability-in-barn2-plugins-posts-table-with-search-sort-posts-data-ta2026-11-03 https://bugrater.com/releases/cve-2026-120846-missing-authorization-vulnerability-in-uncanny-owl-uncanny-automator-uncanny-automator-allows-exploiting-incorrectly-configured-access-control-security-levels-t2026-11-03 https://bugrater.com/releases/cve-2026-121261-a-vulnerability-has-been-found-in-phpmyadmin-shapefile-up-to-4-0-1-impacted-is-the-function-shaperecord-loadfromfile-of-the-component-shp-file-handler-such-m2026-11-03 https://bugrater.com/releases/cve-2026-121262-a-vulnerability-was-found-in-phpmyadmin-sql-parser-6-0-0-6-0-1-the-affected-element-is-the-function-parse-of-the-file-src-statements-explainstatement-php-perf2026-11-03 https://bugrater.com/releases/cve-2026-121587-coolify-before-4-1-1-contains-an-information-disclosure-vulnerability-that-allows-unauthenticated-attackers-to-enumerate-application-names-across-all-teams-via2026-11-03 https://bugrater.com/releases/cve-2026-121588-texlyre-from-0-11-0-before-0-13-5-contains-a-stored-cross-site-scripting-vulnerability-that-allows-attackers-to-execute-script-by-supplying-malicious-lsp-or-typ2026-11-03 https://bugrater.com/releases/cve-2026-121602-solanum-before-commit-2ce64de-contains-a-heap-based-buffer-overflow-vulnerability-that-allows-a-malicious-linked-server-to-corrupt-memory-by-sending-overlong-ch2026-11-03 https://bugrater.com/releases/cve-2026-121603-solanum-before-commit-2ea1382-contains-a-buffer-overflow-vulnerability-in-ms-kill-that-allows-malicious-linked-servers-to-corrupt-memory-by-sending-an-overlon2026-11-03 https://bugrater.com/releases/cve-2026-121604-wlroots-before-0-20-2-contains-an-out-of-bounds-read-vulnerability-in-read-surface-class-in-xwayland-xwm-c-that-allows-local-x11-clients-to-leak-compositor-he2026-11-03 https://bugrater.com/releases/cve-2026-121631-lightdash-0-2609-0-before-3-137-0-contains-an-authorization-bypass-vulnerability-in-the-renameservice-that-allows-authenticated-users-with-update-project-permis2026-11-03 https://bugrater.com/releases/cve-2026-28327-solarwinds-dameware-was-found-to-be-affected-by-a-dll-hijacking-vulnerability-the-hijack-occurs-during-installations-only-and-requires-access-to-the-local-mach2026-11-03 https://bugrater.com/releases/cve-2026-28335-solarwinds-dameware-was-found-to-be-affected-by-a-buffer-overflow-vulnerability-that-can-result-in-remote-code-execution-authentication-is-required2026-11-03 https://bugrater.com/releases/cve-2026-28336-solarwinds-dameware-was-found-to-be-affected-by-a-command-injection-vulnerability-that-could-lead-to-the-compromise-of-the-remotely-controlled-host-authenticat2026-11-03 https://bugrater.com/releases/cve-2026-39743-missing-authorization-vulnerability-in-wc-lovers-wcfm-membership-wc-multivendor-membership-allows-exploiting-incorrectly-configured-access-control-security-leve2026-11-03 https://bugrater.com/releases/cve-2026-39777-missing-authorization-vulnerability-in-wc-lovers-wcfm-membership-wc-multivendor-membership-allows-exploiting-incorrectly-configured-access-control-security-leve2026-11-03 https://bugrater.com/releases/cve-2026-97072-missing-authorization-vulnerability-in-mycred-mycred-mycred-allows-exploiting-incorrectly-configured-access-control-security-levels-this-issue-affects-mycred-f2026-11-03 https://bugrater.com/releases/cve-2026-116845-netbox-from-2-9-0-before-4-7-4-contains-a-broken-access-control-vulnerability-in-bulkcomponentcreateview-that-allows-authenticated-users-to-bypass-view-permissi2026-11-03 https://bugrater.com/releases/cve-2026-121263-a-vulnerability-was-determined-in-phpmyadmin-motranslator-up-to-6-0-1-the-impacted-element-is-the-function-loader-gettranslator-of-the-file-motranslator-maste2026-11-03 https://bugrater.com/releases/cve-2026-121624-nanosystems-supremo-for-windows-and-macos-before-5-0-2-3874-contains-an-improper-certificate-validation-vulnerability-that-allows-adjacent-attackers-to-intercep2026-11-03 https://bugrater.com/releases/cve-2026-121625-gnu-gatekeeper-gnugk-before-5-16-contains-an-out-of-bounds-read-vulnerability-in-parsertcp-in-proxychannel-cxx-that-allows-remote-rtp-peers-to-read-heap-mem2026-11-03 https://bugrater.com/releases/cve-2026-121626-gnu-gatekeeper-gnugk-before-5-16-contains-an-out-of-bounds-read-vulnerability-in-h46024socket-receivedprobepacket-that-allows-remote-attackers-to-cause-a-h2026-11-03 https://bugrater.com/releases/cve-2026-121627-buku-5-0-through-5-1-1-contains-a-stored-cross-site-scripting-vulnerability-in-the-bukuserver-bookmark-list-that-allows-attackers-to-execute-script-via-an-unesc2026-11-03 https://bugrater.com/releases/cve-2026-121628-bagisto-before-2-3-16-and-2-4-x-before-2-4-1-contains-a-race-condition-vulnerability-in-managecartrule-that-allows-attackers-to-redeem-single-use-coupons-mult2026-11-03 https://bugrater.com/releases/cve-2026-112917-in-docker-desktop-for-windows-with-the-wsl2-backend-an-unprivileged-linux-container-can-use-32-bit-socketcall-to-bypass-the-default-seccomp-restriction-on-af-v2026-11-03 https://bugrater.com/releases/cve-2026-121382-a-vulnerability-was-determined-in-netcore-nbr100v2-1-3-240614-030928-affected-by-this-issue-is-the-function-msg-aes-dec-of-the-file-usr-bin-auto-ac-this-mani2026-11-03 https://bugrater.com/releases/cve-2026-121501-a-vulnerability-was-determined-in-mathurvishal-cloudclassroom-php-project-the-affected-element-is-the-function-session-regenerate-id-of-the-file-loginlinkadmin2026-11-03 https://bugrater.com/releases/cve-2025-71451-vembu-bdrsuite-before-7-6-0-contains-an-unauthenticated-cross-site-scripting-vulnerability-in-templates-progress-serverside-serverbackupprogress-sgp-that-allows2026-11-03 https://bugrater.com/releases/cve-2025-71452-vembu-bdrsuite-before-7-6-0-contains-an-unauthenticated-cross-site-scripting-vulnerability-in-templates-progress-clientside-restoreprogress-sgp-that-allows-remo2026-11-03 https://bugrater.com/releases/cve-2026-105821-the-tapo-cloud-mqtt-broker-contains-a-broken-access-control-vulnerability-in-a-proxy-topic-used-by-authenticated-tapo-devices-to-request-service-tokens-the-bro2026-11-03 https://bugrater.com/releases/cve-2026-105822-the-tapo-cloud-mqtt-proxy-contains-a-server-side-request-forgery-ssrf-vulnerability-because-it-accepts-a-user-controlled-host-value-without-sufficient-input-v2026-11-03 https://bugrater.com/releases/cve-2026-110826-improper-session-invalidation-after-authentication-credential-change-vulnerability-in-team-alembic-ash-authentication-allows-an-attacker-holding-a-victim-s-sess2026-11-03 https://bugrater.com/releases/cve-2026-121577-inefficient-regular-expression-complexity-cwe-1333-in-generate-regex-whatstk-whatsapp-parser-py-in-whatstk-from-0-2-0-before-0-9-0-allows-a-party-that-sup2026-11-03 https://bugrater.com/releases/cve-2026-93325-buildx-bake-requires-the-user-to-grant-entitlements-with-allow-or-an-interactive-prompt-before-a-build-reaches-outside-the-working-directory-under-progress2026-11-03 https://bugrater.com/releases/cve-2026-95722-a-local-privilege-escalation-vulnerability-has-been-discovered-in-the-virtual-intranet-access-via-client-successful-exploitation-of-this-vulnerability-could2026-11-03 https://bugrater.com/releases/cve-2026-95723-a-missing-integrity-verification-vulnerability-has-been-discovered-in-the-virtual-intranet-access-via-client-successful-exploitation-of-this-vulnerability-co2026-11-03 https://bugrater.com/releases/cve-2026-95724-an-improper-certificate-validation-vulnerability-exists-in-hpe-networking-virtual-intranet-access-via-successful-exploitation-could-allow-an-unauthenticated2026-11-03 https://bugrater.com/releases/cve-2026-95725-a-command-injection-vulnerability-exists-in-the-via-client-for-linux-successful-exploitation-could-allow-a-low-privileged-local-attacker-to-execute-arbitrary-c2026-11-03 https://bugrater.com/releases/cve-2026-95726-a-buffer-overflow-vulnerability-in-hpe-networking-via-could-allow-an-unauthenticated-remote-attacker-to-conduct-a-denial-of-service-attack-successful-exploitat2026-11-03 https://bugrater.com/releases/cve-2026-95727-a-command-injection-vulnerability-exists-in-hpe-networking-via-successful-exploitation-could-allow-an-authenticated-administrative-user-to-execute-arbitrary-co2026-11-03 https://bugrater.com/releases/cve-2026-95728-an-arbitrary-file-write-vulnerability-exists-in-the-virtual-intranet-access-via-client-successful-exploitation-could-allow-a-local-attacker-with-low-privileg2026-11-03 https://bugrater.com/releases/cve-2026-95729-a-sensitive-information-disclosure-vulnerability-exists-in-hpe-networking-via-successful-exploitation-could-allow-an-authenticated-attacker-to-obtain-sensitive2026-11-03 https://bugrater.com/releases/cve-2026-95730-a-buffer-overflow-vulnerability-exists-in-hpe-networking-via-that-could-allow-an-authenticated-low-privileged-local-user-to-cause-a-denial-of-service-successfu2026-11-03 https://bugrater.com/releases/cve-2026-95731-hardcoded-password-vulnerabilities-in-the-command-line-interface-of-hpe-networking-fabric-composer-could-allow-an-unauthenticated-remote-attacker-to-access-the2026-11-03 https://bugrater.com/releases/cve-2026-95732-an-authentication-bypass-vulnerability-exists-in-the-underlying-operating-system-of-hpe-networking-fabric-composer-successful-exploitation-could-allow-an-unaut2026-11-03 https://bugrater.com/releases/cve-2026-95733-a-vulnerability-exists-in-a-component-of-hpe-networking-fabric-composer-successful-exploitation-could-allow-an-unauthenticated-adjacent-attacker-to-execute-arb2026-11-03 https://bugrater.com/releases/cve-2026-95734-a-sensitive-information-disclosure-vulnerability-in-the-api-of-hpe-networking-fabric-composer-could-allow-an-authenticated-low-privileged-user-to-access-sensiti2026-11-03 https://bugrater.com/releases/cve-2026-95735-an-improper-certificate-validation-vulnerability-exists-in-hpe-networking-fabric-composer-successful-exploitation-could-allow-an-unauthenticated-remote-attacke2026-11-03 https://bugrater.com/releases/cve-2026-95736-improper-certificate-validation-vulnerabilities-exist-in-the-affected-interface-of-hpe-networking-fabric-composer-which-could-be-exploited-by-an-unauthenticate2026-11-03 https://bugrater.com/releases/cve-2026-95737-a-privilege-escalation-vulnerability-exists-in-the-underlying-operating-system-of-hpe-networking-fabric-composer-successful-exploitation-could-allow-a-local-at2026-11-03 https://bugrater.com/releases/cve-2026-95738-authentication-bypass-vulnerabilities-in-the-affected-interface-of-hpe-networking-fabric-composer-could-allow-an-unauthenticated-remote-attacker-to-circumvent-e2026-11-03 https://bugrater.com/releases/cve-2026-95739-an-improper-restriction-of-excessive-authentication-attempts-vulnerability-in-the-api-of-hpe-networking-fabric-composer-could-allow-an-unauthenticated-remote-at2026-11-03 https://bugrater.com/releases/cve-2026-95740-an-improper-certificate-validation-vulnerability-in-hpe-networking-fabric-composer-could-allow-an-unauthenticated-adjacent-attacker-to-intercept-communications2026-11-03 https://bugrater.com/releases/cve-2026-95741-a-missing-integrity-verification-vulnerability-exists-in-the-api-of-hpe-networking-fabric-composer-successful-exploitation-could-allow-a-low-privileged-authent2026-11-03 https://bugrater.com/releases/cve-2026-95742-an-arbitrary-file-write-vulnerability-exists-in-the-underlying-operating-system-of-hpe-networking-fabric-composer-successful-exploitation-could-allow-an-authen2026-11-03 https://bugrater.com/releases/cve-2026-95743-local-privilege-escalation-vulnerabilities-exist-in-the-underlying-operating-system-of-hpe-networking-fabric-composer-successful-exploitation-could-allow-a-loc2026-11-03 https://bugrater.com/releases/cve-2026-95744-a-sensitive-information-disclosure-vulnerability-in-the-affected-interface-of-hpe-networking-fabric-composer-could-allow-an-authenticated-low-privileged-attacke2026-11-03 https://bugrater.com/releases/cve-2026-95745-a-vulnerability-in-the-api-of-hpe-networking-fabric-composer-could-allow-an-unauthenticated-remote-attacker-to-conduct-a-denial-of-service-attack-successful-ex2026-11-03 https://bugrater.com/releases/cve-2026-95746-an-authentication-bypass-vulnerability-in-the-api-endpoint-of-hpe-networking-fabric-composer-could-allow-an-unauthenticated-adjacent-attacker-to-circumvent-exis2026-11-03 https://bugrater.com/releases/cve-2026-95747-a-privilege-escalation-vulnerability-exists-in-the-ssh-interface-of-hpe-networking-fabric-composer-which-could-allow-an-authenticated-low-privileged-attacker-to2026-11-03 https://bugrater.com/releases/cve-2026-95748-a-sql-injection-vulnerability-exists-in-hpe-networking-fabric-composer-successful-exploitation-could-allow-an-unauthenticated-adjacent-attacker-to-run-arbitrar2026-11-03 https://bugrater.com/releases/cve-2026-95749-a-missing-integrity-verification-vulnerability-exists-in-hpe-networking-fabric-composer-successful-exploitation-could-allow-an-unauthenticated-remote-attacker2026-11-03 https://bugrater.com/releases/cve-2026-95750-an-improper-certificate-validation-vulnerability-in-hpe-networking-fabric-composer-could-allow-an-unauthenticated-remote-attacker-to-access-sensitive-informatio2026-11-03 https://bugrater.com/releases/cve-2026-95751-an-improper-certificate-validation-vulnerability-in-the-api-of-hpe-networking-fabric-composer-could-allow-an-unauthenticated-remote-attacker-to-circumvent-exist2026-11-03 https://bugrater.com/releases/cve-2026-95752-a-local-privilege-escalation-vulnerability-exists-in-the-api-of-hpe-networking-fabric-composer-successful-exploitation-could-allow-a-low-privileged-local-attac2026-11-03 https://bugrater.com/releases/cve-2026-95753-a-privilege-escalation-vulnerability-exists-in-the-api-of-hpe-networking-fabric-composer-successful-exploitation-could-allow-an-authenticated-attacker-with-low2026-11-03 https://bugrater.com/releases/cve-2026-95755-improper-certificate-validation-vulnerabilities-in-the-affected-interface-of-hpe-networking-fabric-composer-could-allow-an-unauthenticated-adjacent-attacker-to2026-11-03 https://bugrater.com/releases/cve-2026-95756-a-command-injection-vulnerability-exists-in-the-api-of-hpe-networking-fabric-composer-and-could-be-exploited-by-an-authenticated-remote-attacker-with-administra2026-11-03 https://bugrater.com/releases/cve-2026-95757-a-local-authentication-bypass-vulnerability-exists-in-an-api-of-hpe-networking-fabric-composer-successful-exploitation-could-allow-a-local-attacker-with-low-pr2026-11-03 https://bugrater.com/releases/cve-2026-95758-an-authorization-bypass-vulnerability-exists-in-the-api-of-hpe-networking-fabric-composer-successful-exploitation-could-allow-an-authenticated-attacker-to-bypa2026-11-03 https://bugrater.com/releases/cve-2026-95759-audit-log-bypass-vulnerabilities-exist-in-the-api-of-hpe-networking-fabric-composer-successful-exploitation-could-allow-an-authenticated-attacker-with-low-priv2026-11-03 https://bugrater.com/releases/cve-2026-95760-a-privilege-escalation-vulnerability-exists-in-the-api-of-hpe-networking-fabric-composer-if-certain-preconditions-outside-of-the-attacker-s-control-are-met-suc2026-11-03 https://bugrater.com/releases/cve-2026-95761-an-improper-certificate-validation-vulnerability-exists-in-hpe-networking-fabric-composer-successful-exploitation-could-allow-an-authenticated-attacker-with-lo2026-11-03 https://bugrater.com/releases/cve-2026-95762-an-insufficient-session-expiration-vulnerability-exists-in-the-api-of-hpe-networking-fabric-composer-if-certain-preconditions-outside-of-the-attacker-s-control2026-11-03 https://bugrater.com/releases/cve-2026-95763-an-improper-certificate-validation-vulnerability-in-hpe-networking-fabric-composer-could-allow-an-unauthenticated-remote-attacker-to-access-sensitive-informatio2026-11-03 https://bugrater.com/releases/cve-2026-95764-an-improper-certificate-validation-vulnerability-exists-in-the-api-of-hpe-networking-fabric-composer-successful-exploitation-could-allow-an-unauthenticated-adj2026-11-03 https://bugrater.com/releases/cve-2026-95765-a-sensitive-information-disclosure-vulnerability-exists-in-the-web-based-management-interface-of-hpe-networking-fabric-composer-successful-exploitation-could-a2026-11-03 https://bugrater.com/releases/cve-2026-95766-sensitive-information-disclosure-vulnerabilities-in-hpe-networking-fabric-composer-could-allow-an-authenticated-attacker-with-low-privileges-to-access-sensitive2026-11-03 https://bugrater.com/releases/cve-2026-95767-an-unauthenticated-information-disclosure-vulnerability-exists-in-the-api-of-hpe-networking-fabric-composer-successful-exploitation-could-allow-an-unauthentica2026-11-03 https://bugrater.com/releases/cve-2026-95768-a-privilege-escalation-vulnerability-exists-in-the-api-of-hpe-networking-fabric-composer-if-certain-preconditions-outside-of-the-attacker-s-control-are-met-suc2026-11-03 https://bugrater.com/releases/cve-2026-95769-an-audit-log-spoofing-vulnerability-exists-in-the-api-of-hpe-networking-fabric-composer-successful-exploitation-could-allow-an-unauthenticated-remote-attacker2026-11-03 https://bugrater.com/releases/cve-2026-95770-a-sensitive-information-disclosure-vulnerability-in-the-underlying-operating-system-of-hpe-networking-fabric-composer-could-allow-an-authenticated-low-privilege2026-11-03 https://bugrater.com/releases/cve-2026-95771-an-authenticated-information-disclosure-vulnerability-exists-in-an-api-endpoint-of-hpe-networking-fabric-composer-successful-exploitation-could-allow-an-authen2026-11-03 https://bugrater.com/releases/cve-2026-95772-a-race-condition-vulnerability-exists-in-the-api-of-hpe-networking-fabric-composer-successful-exploitation-could-allow-an-authenticated-attacker-with-low-privi2026-11-03 https://bugrater.com/releases/cve-2026-95773-a-denial-of-service-vulnerability-has-been-identified-in-hpe-networking-fabric-composer-successful-exploitation-of-this-vulnerability-could-allow-a-low-privile2026-11-03 https://bugrater.com/releases/cve-2026-95774-a-sensitive-information-disclosure-vulnerability-exists-in-hpe-networking-fabric-composer-successful-exploitation-could-allow-an-unauthenticated-remote-attacke2026-11-03 https://bugrater.com/releases/cve-2026-95775-a-local-information-disclosure-vulnerability-exists-in-the-underlying-operating-system-of-hpe-networking-fabric-composer-successful-exploitation-could-allow-a2026-11-03 https://bugrater.com/releases/cve-2026-95776-an-authenticated-path-traversal-vulnerability-exists-in-the-api-of-hpe-networking-fabric-composer-which-could-be-exploited-by-an-authenticated-low-privileged-u2026-11-03 https://bugrater.com/releases/cve-2026-95777-a-sensitive-information-disclosure-vulnerability-exists-in-the-management-interface-of-hpe-networking-fabric-composer-successful-exploitation-could-allow-a-low2026-11-03 https://bugrater.com/releases/cve-2026-121502-a-vulnerability-was-identified-in-mathurvishal-cloudclassroom-php-project-the-impacted-element-is-an-unknown-function-of-the-file-facultydetails-php-the-manip2026-11-03 https://bugrater.com/releases/cve-2026-121509-a-security-flaw-has-been-discovered-in-headless-cms-plugin-up-to-2-0-4-on-wordpress-this-affects-the-function-get-required-post-data-of-the-file-wp-json-rae-v2026-11-03 https://bugrater.com/releases/cve-2026-121514-a-weakness-has-been-identified-in-easysoft-zentao-pms-up-to-22-6-this-impacts-the-function-usermodel-checkgroupchange-of-the-file-module-user-model-php-of-the2026-11-03 https://bugrater.com/releases/cve-2026-121517-a-vulnerability-was-detected-in-irfanview-4-76-0-0-on-win64-affected-by-this-vulnerability-is-an-unknown-functionality-of-the-component-tiff-wang-annotation-ha2026-11-03 https://bugrater.com/releases/cve-2026-61495-tinyusb-through-0-21-0-fixed-in-commit-e85c2b8-contains-an-out-of-bounds-write-vulnerability-in-the-mtp-device-class-helper-mtp-container-get-string-in-src2026-11-03 https://bugrater.com/releases/cve-2026-61497-tinyusb-before-0-20-1-contains-an-integer-underflow-vulnerability-in-the-hid-host-report-descriptor-parser-tuh-hid-parse-report-descriptor-in-src-class-hid-hi2026-11-03 https://bugrater.com/releases/cve-2026-112354-etrel-inch-ac-charging-station-management-web-interface-prior-to-firmware-versions-7-1-2-and-8-0-1-contains-a-hard-coded-default-credentials-vulnerability-that2026-11-03 https://bugrater.com/releases/cve-2026-115541-humhub-community-edition-1-19-0-contains-a-stored-cross-site-scripting-vulnerability-in-the-friendship-confirmation-dialog-an-authenticated-low-privileged-memb2026-11-03 https://bugrater.com/releases/cve-2026-118865-an-authenticated-os-command-injection-vulnerability-exists-in-the-offline-download-component-usb-storage-allocation-of-archer-ax3000-v2-when-a-usb-storage-de2026-11-03 https://bugrater.com/releases/cve-2026-121524-a-flaw-has-been-found-in-sumiie24-school-management-system-up-to-d946d649c7c95e101fc5679ecd91999533bb10d7-affected-by-this-issue-is-some-unknown-functionality2026-11-03 https://bugrater.com/releases/cve-2026-121531-a-vulnerability-has-been-found-in-umami-3-3-x-3-4-0-3-4-1-this-affects-an-unknown-part-of-the-file-src-app-api-auth-login-route-ts-of-the-component-2fa-policy2026-11-03 https://bugrater.com/releases/cve-2026-121541-in-docker-buildx-versions-v0-19-0-through-v0-38-0-an-untrusted-bake-definition-that-builds-multiple-targets-together-may-expose-files-accessible-to-the-buildx2026-11-03 https://bugrater.com/releases/cve-2026-121542-in-docker-buildx-versions-v0-19-0-through-v0-38-0-an-untrusted-bake-definition-may-expose-files-accessible-to-the-buildx-client-without-the-expected-fs-read-ap2026-11-03 https://bugrater.com/releases/cve-2026-121614-docker-sandboxes-versions-0-31-0-before-0-50-0-do-not-neutralize-repository-controlled-git-configuration-when-running-certain-host-side-git-commands-an-attacke2026-11-03 https://bugrater.com/releases/cve-2022-29966-emerson-ovation-has-several-protocols-that-have-no-authentication-which-could-allow-an-attacker-to-change-controller-configuration-or-cause-a-denial-of-service2026-11-03 https://bugrater.com/releases/cve-2022-30267-emerson-ovation-was-found-to-have-no-authentication-of-firmware-signing-and-relies-on-an-insecure-checksum-for-integrity-this-could-allow-an-attacker-to-push2026-11-03 https://bugrater.com/releases/cve-2026-104608-a-remote-code-execution-vulnerability-was-identified-in-github-enterprise-server-in-the-git-service-babeld-babeld-held-references-into-internal-collections-w2026-11-03 https://bugrater.com/releases/cve-2026-110288-a-cross-site-request-forgery-vulnerability-was-identified-in-github-enterprise-server-that-allowed-an-unauthenticated-attacker-to-delete-stored-slack-and-micros2026-11-03 https://bugrater.com/releases/cve-2026-118237-an-out-of-bounds-read-vulnerability-was-identified-in-github-enterprise-server-in-the-git-service-babeld-when-proving-possession-of-a-host-key-babeld-s-ssh2026-11-03 https://bugrater.com/releases/cve-2026-121535-a-vulnerability-was-found-in-miroslavpejic85-mirotalk-p2p-up-to-2-0-87-this-vulnerability-affects-the-function-checkpassword-of-the-file-app-src-server-js-of-t2026-11-03 https://bugrater.com/releases/cve-2026-121539-a-vulnerability-was-found-in-miroslavpejic85-mirotalk-p2p-up-to-2-0-87-2-1-38-affected-by-this-issue-is-the-function-checkpassword-of-the-file-app-src-server-j2026-11-03 https://bugrater.com/releases/cve-2026-121581-a-vulnerability-has-been-found-in-arcreel-0-32-0-0-33-0-0-34-0-the-impacted-element-is-an-unknown-function-of-the-file-api-v1-providers-id-test-of-the-compo2026-11-03 https://bugrater.com/releases/cve-2026-121582-a-vulnerability-has-been-found-in-umami-up-to-3-4-1-impacted-is-an-unknown-function-of-the-file-src-app-api-record-route-ts-of-the-component-record-api-endpoin2026-11-03 https://bugrater.com/releases/cve-2026-121727-kore-before-4-3-0-contains-an-integer-underflow-vulnerability-in-http-request-body-handling-that-allows-unauthenticated-attackers-to-bypass-http-body-max-by-sen2026-11-03 https://bugrater.com/releases/cve-2026-121728-sourcehut-meta-sr-ht-0-56-11-before-0-89-0-contains-an-authorization-bypass-vulnerability-that-allows-unauthenticated-attackers-to-register-accounts-when-public2026-11-03 https://bugrater.com/releases/cve-2026-121729-emailflare-before-commit-cf31f33-contains-a-missing-authorization-vulnerability-in-the-inbox-service-api-keys-routes-that-allows-any-authenticated-member-to-li2026-11-03 https://bugrater.com/releases/cve-2026-121730-emailflare-before-commit-cf31f33-contains-a-missing-authorization-vulnerability-in-post-api-inbox-compose-that-allows-authenticated-members-to-send-mail-as-any2026-11-03 https://bugrater.com/releases/cve-2026-121731-rosariosis-before-12-9-contains-a-sql-injection-vulnerability-that-allows-authenticated-non-student-users-including-parents-to-inject-sql-via-the-unquoted-per2026-11-03 https://bugrater.com/releases/cve-2026-121732-rosariosis-before-12-9-contains-an-improper-authorization-vulnerability-that-allows-school-scoped-administrators-to-assign-fees-and-payments-to-students-of-othe2026-11-03 https://bugrater.com/releases/cve-2026-121733-bagisto-before-2-4-5-contains-a-stored-cross-site-scripting-vulnerability-that-allows-authenticated-customers-to-upload-html-files-via-the-rma-send-message-endp2026-11-03 https://bugrater.com/releases/cve-2026-121734-zaneops-1-14-0-before-1-15-2-contains-an-authorization-bypass-vulnerability-that-allows-any-workspace-administrator-to-read-another-workspace-s-pending-preview2026-11-03 https://bugrater.com/releases/cve-2026-121735-blueprintue-self-hosted-edition-before-4-3-4-contains-an-insufficient-session-expiration-vulnerability-that-allows-attackers-to-confirm-accounts-using-stale-tok2026-11-03 https://bugrater.com/releases/cve-2026-121736-nocodb-0-300-0-before-2026-08-0-contains-a-missing-authentication-vulnerability-in-the-post-api-v2-oauth-authorize-handler-that-allows-unauthenticated-attacker2026-11-03 https://bugrater.com/releases/stable-channel-update-for-desktop-52026-11-04 https://bugrater.com/releases/security-vulnerabilities-fixed-in-firefox-159-0-12026-11-04 https://bugrater.com/releases/security-vulnerabilities-fixed-in-firefox-esr-140-162026-11-04 https://bugrater.com/releases/security-vulnerabilities-fixed-in-firefox-esr-115-412026-11-04 https://bugrater.com/releases/cve-2026-121583-a-vulnerability-was-identified-in-sanluan-publiccms-5-this-affects-the-function-tradepaymentservice-pendingrefund-of-the-file-publiccms-parent-publiccms-trade2026-11-04 https://bugrater.com/releases/cve-2026-121585-a-security-flaw-has-been-discovered-in-infiniflow-ragflow-up-to-0-27-2-1-0-0-rc2-this-impacts-the-function-runsql-of-the-file-internal-engine-infinity-sql-go-o2026-11-04 https://bugrater.com/releases/cve-2026-121589-a-weakness-has-been-identified-in-spatie-url-signer-up-to-2-1-3-affected-is-the-function-abstracturlsigner-validate-of-the-file-abstracturlsigner-php-of-the-c2026-11-04 https://bugrater.com/releases/cve-2026-121597-a-weakness-has-been-identified-in-totolink-a950rg-4-1-2cu-5268-b20221104-this-affects-the-function-setappeasywizardconfig-of-the-file-cgi-bin-cstecgi-cgi-of-t2026-11-04 https://bugrater.com/releases/cve-2026-121598-a-security-vulnerability-has-been-detected-in-totolink-a950rg-4-1-2cu-5268-b20221104-this-impacts-the-function-strcpy-of-the-file-cgi-bin-cstecgi-cgi-of-the-c2026-11-04 https://bugrater.com/releases/cve-2026-121599-a-vulnerability-was-detected-in-totolink-a950rg-4-1-2cu-5268-b20221104-affected-is-the-function-setwifimultipleconfig-delwifimultipleconfig-of-the-file-cgi-bi2026-11-04 https://bugrater.com/releases/cve-2026-121600-a-flaw-has-been-found-in-totolink-a950rg-4-1-2cu-5268-b20221104-affected-by-this-vulnerability-is-the-function-setmacfilterrules-of-the-file-cgi-bin-cstecgi-c2026-11-04 https://bugrater.com/releases/cve-2026-121606-a-vulnerability-has-been-found-in-qihoo-360-d621-2-d603-2-d600-2-d619-d606-6-and-d706-up-to-6-4-9-affected-by-this-issue-is-the-function-verify-sign-of-the2026-11-04 https://bugrater.com/releases/cve-2026-110464-missing-authorization-in-asus-armoury-crate-allows-a-local-attacker-to-write-content-into-a-specific-file-or-registry-location-with-local-system-privileges-or2026-11-04 https://bugrater.com/releases/cve-2026-112116-an-exposed-ioctl-with-insufficient-access-control-in-asus-system-control-interface-allows-a-local-low-privileged-user-to-read-and-write-arbitrary-physical-memo2026-11-04 https://bugrater.com/releases/cve-2026-121607-a-vulnerability-was-found-in-qihoo-360-d603-2-d600-2-d606-6-and-d706-up-to-6-4-9-this-affects-the-function-testspeed-command-of-the-file-fs2-bin-iscm-perfo2026-11-04 https://bugrater.com/releases/cve-2026-121608-a-vulnerability-was-determined-in-qihoo-360-d603-2-d600-2-and-d606-6-up-to-6-3-2-this-vulnerability-affects-the-function-on-push-message-of-the-file-fs2-bin2026-11-04 https://bugrater.com/releases/cve-2026-121609-a-vulnerability-was-identified-in-qihoo-360-whole-home-router-m5-4-0-17-1566-this-issue-affects-the-function-home-of-the-file-etc-init-d-mpt-of-the-component2026-11-04 https://bugrater.com/releases/cve-2026-121610-a-security-flaw-has-been-discovered-in-funadmin-7-1-0-impacted-is-the-function-curd-selectlist-of-the-file-frontend-ajax-index-of-the-component-frontend-list2026-11-04 https://bugrater.com/releases/cve-2026-84730-stack-based-buffer-overflow-in-certain-asus-router-firmware-allows-an-unauthenticated-nearby-attacker-to-execute-arbitrary-commands-with-root-privileges-via-a-c2026-11-04 https://bugrater.com/releases/cve-2026-121615-a-vulnerability-was-determined-in-linksys-e5600-1-1-0-26-affected-is-an-unknown-function-of-the-file-cgi-bin-mesh-login-cgi-of-the-component-login-handler-ex2026-11-04 https://bugrater.com/releases/cve-2026-121616-a-vulnerability-was-identified-in-linksys-e5600-1-1-0-26-affected-by-this-vulnerability-is-the-function-strcpy-of-the-file-cgi-bin-mesh-login-cgi-of-the-compo2026-11-04 https://bugrater.com/releases/cve-2026-121617-a-security-flaw-has-been-discovered-in-linksys-e5600-1-1-0-26-affected-by-this-issue-is-the-function-init-multipart-of-the-file-cgi-bin-upload-fw-cgi-of-the-c2026-11-04 https://bugrater.com/releases/cve-2026-121618-a-weakness-has-been-identified-in-linksys-e5600-1-1-0-26-this-affects-an-unknown-part-of-the-file-cgi-bin-fqc-cgi-of-the-component-factory-quality-control-th2026-11-04 https://bugrater.com/releases/cve-2026-101165-the-mollie-payments-for-woocommerce-wordpress-plugin-before-8-2-0-does-not-verify-an-order-s-payment-state-or-the-requested-payment-gateway-before-removing-a-co2026-11-04 https://bugrater.com/releases/cve-2026-101166-the-mollie-payments-for-woocommerce-wordpress-plugin-before-8-2-0-does-not-verify-a-product-s-publication-status-before-creating-an-order-for-it-through-its-pay2026-11-04 https://bugrater.com/releases/cve-2026-104719-the-cookieyes-wordpress-plugin-before-3-5-8-does-not-correctly-restrict-who-can-write-its-cookie-category-script-fields-and-does-not-sanitize-or-escape-them2026-11-04 https://bugrater.com/releases/cve-2026-105191-the-erp-complete-hr-accounting-crm-suite-built-for-woocommerce-wordpress-plugin-before-1-17-11-does-not-perform-a-capability-check-on-an-ajax-action-that-re2026-11-04 https://bugrater.com/releases/cve-2026-105413-the-form-maker-by-10web-wordpress-plugin-before-1-15-51-does-not-consistently-escape-user-submitted-field-values-before-rendering-them-on-its-submissions-admin2026-11-04 https://bugrater.com/releases/cve-2026-106000-the-booking-package-wordpress-plugin-before-1-7-34-does-not-require-payment-to-be-completed-before-saving-a-booking-on-calendars-configured-to-require-online-pa2026-11-04 https://bugrater.com/releases/cve-2026-106649-the-kali-forms-contact-form-drag-and-drop-builder-wordpress-plugin-before-2-4-29-does-not-prevent-users-with-author-level-access-and-above-from-storing-arbi2026-11-04 https://bugrater.com/releases/cve-2026-108041-the-seopress-wordpress-plugin-before-10-4-does-not-sanitise-and-escape-some-of-its-analytics-tracking-settings-before-outputting-them-in-an-inline-script-print2026-11-04 https://bugrater.com/releases/cve-2026-108067-the-fv-flowplayer-video-player-wordpress-plugin-before-7-5-56-7212-does-not-properly-verify-record-ownership-before-modifying-or-deleting-stored-video-and-meta2026-11-04 https://bugrater.com/releases/cve-2026-108068-the-fv-flowplayer-video-player-wordpress-plugin-before-7-5-56-7212-does-not-perform-proper-authorization-checks-on-one-of-its-video-migration-functions-which-i2026-11-04 https://bugrater.com/releases/cve-2026-110692-the-powerpack-addons-for-elementor-widgets-form-styler-and-templates-wordpress-plugin-before-3-1-3-does-not-validate-a-user-supplied-url-before-using-it-in-a2026-11-04 https://bugrater.com/releases/cve-2026-110964-the-essential-real-estate-wordpress-plugin-before-5-3-5-does-not-verify-that-a-media-attachment-belongs-to-the-requesting-user-before-deleting-it-allowing-a-se2026-11-04 https://bugrater.com/releases/cve-2026-111740-the-post-duplicator-wordpress-plugin-before-3-0-17-does-not-check-whether-the-requesting-user-may-view-each-post-before-returning-a-list-of-posts-for-a-post-typ2026-11-04 https://bugrater.com/releases/cve-2026-111962-the-wp-remote-users-sync-wordpress-plugin-before-2-2-0-does-not-adequately-restrict-access-to-the-user-export-files-it-writes-beneath-the-public-web-root-relyi2026-11-04 https://bugrater.com/releases/cve-2026-114431-the-enable-media-replace-wordpress-plugin-before-4-2-3-does-not-pass-a-replaced-media-file-through-the-wordpress-upload-pipeline-so-the-upload-prefilter-that-s2026-11-04 https://bugrater.com/releases/cve-2026-115241-the-wpvivid-backup-migration-staging-wordpress-plugin-before-0-9-137-does-not-verify-that-a-submitted-snapshot-identifier-names-a-snapshot-it-actually-crea2026-11-04 https://bugrater.com/releases/cve-2026-115242-the-wpvivid-backup-migration-staging-wordpress-plugin-before-0-9-137-does-not-sanitize-the-staging-destination-folder-supplied-to-its-staging-start-handler2026-11-04 https://bugrater.com/releases/cve-2026-115243-the-wpvivid-backup-migration-staging-wordpress-plugin-before-0-9-137-does-not-validate-the-extension-of-the-file-it-actually-stores-when-handling-an-import2026-11-04 https://bugrater.com/releases/cve-2026-115250-the-text-typing-wordpress-plugin-before-2-2-2-does-not-properly-sanitize-and-escape-a-block-attribute-before-storing-it-and-later-outputting-it-into-a-page-ele2026-11-04 https://bugrater.com/releases/cve-2026-115257-the-wp-roster-wordpress-plugin-before-2-36-does-not-perform-any-capability-or-nonce-checks-before-writing-its-stored-roster-data-allowing-unauthenticated-attac2026-11-04 https://bugrater.com/releases/cve-2026-115426-the-wpvivid-backup-migration-staging-wordpress-plugin-before-0-9-138-does-not-properly-validate-a-backup-storage-directory-path-before-using-it-to-create-d2026-11-04 https://bugrater.com/releases/cve-2026-118403-the-premium-packages-wordpress-plugin-before-7-3-1-does-not-verify-that-the-requester-owns-a-guest-order-before-returning-its-details-allowing-unauthenticated2026-11-04 https://bugrater.com/releases/cve-2026-118404-the-premium-packages-wordpress-plugin-before-7-3-1-does-not-verify-ownership-or-session-binding-when-loading-a-previously-saved-shopping-cart-allowing-any-una2026-11-04 https://bugrater.com/releases/cve-2026-118422-the-stape-conversion-tracking-wordpress-plugin-before-2-3-11-does-not-validate-the-sub-path-appended-to-its-same-origin-proxy-s-upstream-endpoint-allowing-unau2026-11-04 https://bugrater.com/releases/cve-2026-118523-the-eventprime-wordpress-plugin-before-4-3-6-1-does-not-keep-the-built-in-pending-review-post-status-non-public-allowing-unauthenticated-users-to-view-posts2026-11-04 https://bugrater.com/releases/cve-2026-118637-the-simple-download-monitor-wordpress-plugin-before-4-1-3-does-not-properly-check-the-visibility-of-the-content-referenced-by-one-of-its-shortcodes-allowing-us2026-11-04 https://bugrater.com/releases/cve-2026-118783-the-all-in-one-video-gallery-wordpress-plugin-before-5-0-0-does-not-validate-and-escape-some-of-its-shortcode-attributes-before-outputting-them-back-in-a-page2026-11-04 https://bugrater.com/releases/cve-2026-118983-the-vikwidgetsloader-wordpress-plugin-before-1-12-3-does-not-sanitise-or-escape-several-block-attributes-before-outputting-them-inside-html-attributes-allowin2026-11-04 https://bugrater.com/releases/cve-2026-54851-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-vulnerability-in-awesomemotive-contact-form-by-wpforms-wpforms-lite-allows2026-11-04 https://bugrater.com/releases/cve-2026-62000-missing-authorization-vulnerability-in-wc-lovers-wcfm-marketplace-wc-multivendor-marketplace-allows-exploiting-incorrectly-configured-access-control-security-le2026-11-04 https://bugrater.com/releases/cve-2026-119366-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-vulnerability-in-advancedcoding-wpdiscuz-wpdiscuz-allows-stored-xss-this-is2026-11-04 https://bugrater.com/releases/cve-2026-119477-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-vulnerability-in-jacob-n-breetvelt-wp-photo-album-plus-wp-photo-album-plus2026-11-04 https://bugrater.com/releases/cve-2026-54861-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-vulnerability-in-aguila-technologies-wp-customer-area-customer-area-allows2026-11-04 https://bugrater.com/releases/cve-2026-56065-insertion-of-sensitive-information-into-externally-accessible-file-or-directory-vulnerability-in-doofinder-doofinder-for-woocommerce-doofinder-for-woocommerce-a2026-11-04 https://bugrater.com/releases/cve-2026-57639-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-vulnerability-in-roland-murg-wp-booking-system-wp-booking-system-allows-ref2026-11-04 https://bugrater.com/releases/cve-2026-57666-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-vulnerability-in-aguila-technologies-wp-customer-area-customer-area-allows2026-11-04 https://bugrater.com/releases/cve-2026-57775-authentication-bypass-using-an-alternate-path-or-channel-vulnerability-in-relywp-simple-cloudflare-turnstile-simple-cloudflare-turnstile-allows-authentication-a2026-11-04 https://bugrater.com/releases/cve-2026-62007-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-vulnerability-in-unlimited-elements-unlimited-elements-for-elementor-free2026-11-04 https://bugrater.com/releases/cve-2026-62126-allocation-of-resources-without-limits-or-throttling-vulnerability-in-miniorange-saml-sp-single-sign-on-miniorange-saml-20-single-sign-on-allows-http-dos-this-i2026-11-04 https://bugrater.com/releases/cve-2026-114420-seppmail-secure-email-gateway-before-15-1-1-does-not-neutralize-ldap-metacharacters-in-an-unauthenticated-account-selection-input-in-its-gina-web-interface-a-r2026-11-04 https://bugrater.com/releases/cve-2026-114421-seppmail-secure-email-gateway-before-15-1-1-permits-password-recovery-for-a-created-but-unregistered-gina-account-whose-initial-password-is-empty-without-adequa2026-11-04 https://bugrater.com/releases/cve-2026-114424-seppmail-secure-email-gateway-before-15-1-1-can-evaluate-attacker-influenced-replacement-text-as-perl-code-in-sender-or-recipient-replacement-rules-an-unauthen2026-11-04 https://bugrater.com/releases/cve-2026-114425-seppmail-secure-email-gateway-before-15-1-1-trusts-a-file-path-supplied-in-externally-provided-large-file-transfer-attachment-metadata-an-unauthenticated-remot2026-11-04 https://bugrater.com/releases/cve-2026-114426-seppmail-secure-email-gateway-before-15-1-1-processes-and-writes-v1-file-interface-upload-data-before-authenticating-the-caller-and-without-an-absolute-request2026-11-04 https://bugrater.com/releases/cve-2026-19721-improper-restriction-of-xml-external-entity-reference-vulnerability-in-t-b-tak-b-lgem-software-technologies-research-institute-mzager-allows-serialized-data-ex2026-11-04 https://bugrater.com/releases/cve-2026-19731-improper-limitation-of-a-pathname-to-a-restricted-directory-path-traversal-vulnerability-in-t-b-tak-b-lgem-software-technologies-research-institute-mzager2026-11-04 https://bugrater.com/releases/cve-2026-110021-plcnext-engineer-checks-gsdx-manifest-reference-digests-but-does-not-cryptographically-verify-the-xml-signaturevalue-over-canonicalized-signedinfo-an-unaut2026-11-04 https://bugrater.com/releases/cve-2026-110022-the-pfi-plugin-framework-deploys-executable-assemblies-dlls-from-a-signed-plugin-package-into-the-local-plugin-repository-and-loads-them-via-reflection-but-t2026-11-04 https://bugrater.com/releases/cve-2026-110935-the-pfi-plugin-framework-deployment-routine-does-not-validate-path-components-when-extracting-archive-entries-to-the-local-plugin-repository-archive-entries-co2026-11-04 https://bugrater.com/releases/cve-2026-111036-server-side-request-forgery-ssrf-vulnerability-in-the-coupa-supplier-portal-saas-platform-specifically-in-the-document-conversion-functionality-available-in2026-11-04 https://bugrater.com/releases/cve-2026-111037-a-reflected-cross-site-scripting-xss-vulnerability-in-the-tenders-module-of-the-coupa-supplier-portal-saas-platform-the-vulnerability-arises-because-the-lis2026-11-04 https://bugrater.com/releases/cve-2026-111038-csv-formula-injection-vulnerability-in-the-export-functionality-of-the-coupa-supplier-portal-saas-platform-the-vulnerability-arises-because-certain-user-contro2026-11-04 https://bugrater.com/releases/cve-2026-111040-the-platform-allows-persistent-html-injection-into-editable-fields-managed-by-tinymce-an-authenticated-attacker-with-low-privileges-can-inject-unsanitised-html2026-11-04 https://bugrater.com/releases/cve-2026-111822-improper-invalidation-of-cached-authorizations-vulnerability-in-apache-activemq-apache-activemq-runtime-config-after-the-runtime-configuration-plugin-remov2026-11-04 https://bugrater.com/releases/cve-2026-115498-the-slim-jetpack-plugin-for-wordpress-is-vulnerable-to-stored-cross-site-scripting-via-the-g-page-id-website-website-contact-field-parameter-in-all-version2026-11-04 https://bugrater.com/releases/cve-2026-120554-the-import-and-export-users-and-customers-plugin-for-wordpress-is-vulnerable-to-privilege-escalation-in-all-versions-up-to-and-including-2-5-11-this-is-due-to2026-11-04 https://bugrater.com/releases/cve-2026-93900-the-simple-captcha-with-cloudflare-turnstile-plugin-for-wordpress-is-vulnerable-to-stored-cross-site-scripting-via-the-id-attribute-of-the-gravity-simple-tur2026-11-04 https://bugrater.com/releases/cve-2026-94459-irispowerscan-contain-default-user-accounts-with-predictable-credentials-an-unauthenticated-attacker-with-access-to-an-affected-installation-could-use-these-cr2026-11-04 https://bugrater.com/releases/cve-2026-94460-irispowerscan-contain-an-insecure-default-configuration-where-the-built-in-installation-account-is-assigned-elevated-privileges-with-a-predictable-password-whi2026-11-04 https://bugrater.com/releases/cve-2026-95649-irispowerscan-insufficiently-restrict-the-use-of-untrusted-scripts-an-authenticated-user-with-access-to-script-functionality-can-import-or-modify-scripts-that2026-11-04 https://bugrater.com/releases/cve-2026-100235-incorrect-authorization-due-to-a-time-of-check-to-time-of-use-toctou-race-condition-in-the-setacl-request-handling-of-apache-zookeeper-when-a-node-s-acl-is2026-11-04 https://bugrater.com/releases/cve-2026-100252-improper-authorization-vulnerability-in-apache-zookeeper-when-sasl-authentication-is-enabled-on-the-client-port-the-server-s-sasl-callback-handler-grants-eve2026-11-04 https://bugrater.com/releases/cve-2026-100300-improper-handling-of-exceptional-conditions-in-the-quota-subsystem-of-apache-zookeeper-allows-an-attacker-able-to-write-under-the-zookeeper-quota-subtree-una2026-11-04 https://bugrater.com/releases/cve-2026-102703-this-cna-information-record-relates-to-multiple-cves-the-text-explains-which-aspects-vulnerabilities-correspond-to-which-cve-a-common-access-pattern-is-a-b2026-11-04 https://bugrater.com/releases/cve-2026-102704-this-cna-information-record-relates-to-multiple-cves-the-text-explains-which-aspects-vulnerabilities-correspond-to-which-cve-a-common-access-pattern-is-a-b2026-11-04 https://bugrater.com/releases/cve-2026-103582-unbounded-memory-allocation-and-missing-frame-size-validation-in-apache-nms-activemq-the-net-openwire-client-package-apache-nms-activemq-before-2-3-0-th2026-11-04 https://bugrater.com/releases/cve-2026-108500-input-validation-vulnerability-in-apache-activemq-configured-to-use-the-ldapauthorizationmapplugin-allows-an-authenticated-attacker-to-create-or-address-a-desti2026-11-04 https://bugrater.com/releases/cve-2026-108946-improper-input-validation-vulnerability-in-apache-activemq-apache-activemq-kahadb-the-activemq-broker-resolves-connection-session-and-consumer-state-from2026-11-04 https://bugrater.com/releases/cve-2026-115448-uncontrolled-recursion-in-apache-zookeeper-the-server-serializes-its-data-tree-to-a-snapshot-by-recursing-one-stack-frame-per-znode-level-with-no-depth-bound2026-11-04 https://bugrater.com/releases/cve-2026-59263-a-manipulated-document-opened-in-apache-openoffice-4-1-16-or-earlier-may-allow-substituted-content-to-be-displayed-manipulating-the-user-such-documents-are-cor2026-11-04 https://bugrater.com/releases/cve-2026-59264-the-windows-installers-of-apache-openoffice-4-1-16-and-earlier-allow-an-already-manipulated-system-to-run-external-code-with-elevated-access-users-are-recommen2026-11-04 https://bugrater.com/releases/cve-2026-59268-an-out-of-bounds-write-vulnerability-in-apache-openoffice-versions-through-4-1-16-could-allow-an-attacker-to-craft-a-microsoft-word-document-that-would-crash-th2026-11-04 https://bugrater.com/releases/cve-2026-90624-an-unchecked-memory-access-in-the-pdf-import-code-of-apache-openoffice-versions-through-4-1-16-on-allows-a-crafted-pdf-to-execute-an-out-of-bounds-memory-write2026-11-04 https://bugrater.com/releases/cve-2026-90626-an-uncontrolled-memory-access-in-the-pdf-import-code-of-apache-openoffice-versions-through-4-1-16-allows-a-crafted-pdf-to-cause-an-out-of-bounds-memory-write-c2026-11-04 https://bugrater.com/releases/cve-2026-90627-the-flat-file-database-driver-in-apache-openoffice-versions-through-4-1-16-allows-a-crafted-document-to-read-the-contents-of-any-local-file-without-asking-the-u2026-11-04 https://bugrater.com/releases/cve-2026-90628-an-uncontrolled-memory-access-in-the-pdf-export-code-of-apache-openoffice-versions-through-4-1-16-allows-a-crafted-cff-font-to-cause-a-stack-overflow-problem-c2026-11-04 https://bugrater.com/releases/cve-2026-90629-an-uncontrolled-memory-access-in-the-wmf-import-code-of-apache-openoffice-versions-through-4-1-16-allows-a-crafted-wmf-file-to-cause-an-invalid-memory-access-c2026-11-04 https://bugrater.com/releases/cve-2026-90631-apache-openoffice-documents-can-contain-links-a-missing-authorization-vulnerability-in-apache-openoffice-allowed-an-attacker-to-craft-a-document-that-would-cau2026-11-04 https://bugrater.com/releases/cve-2026-90632-apache-openoffice-documents-can-include-multimedia-content-audio-video-etc-a-crafted-document-could-exploit-the-gstreamer-multimedia-component-of-apache-o2026-11-04 https://bugrater.com/releases/cve-2026-90634-an-uncontrolled-memory-access-in-the-pdf-import-code-of-apache-openoffice-versions-through-4-1-16-allows-a-crafted-pdf-to-cause-an-out-of-bounds-memory-write-c2026-11-04 https://bugrater.com/releases/cve-2026-104799-the-mobile-builder-plugin-for-wordpress-is-vulnerable-to-privilege-escalation-in-all-versions-up-to-and-including-1-4-2-via-the-wcfmmp-profile-settings-re2026-11-04 https://bugrater.com/releases/cve-2026-59267-a-crafted-dxf-document-causes-a-heap-buffer-overflow-in-draw-in-apache-openoffice-4-1-16-and-earlier-this-could-cause-a-crash-or-otherwise-a-corruption-of-memo2026-11-04 https://bugrater.com/releases/cve-2026-97397-the-remove-google-fonts-disable-block-or-replace-with-bunny-fonts-for-gdpr-compliance-plugin-for-wordpress-is-vulnerable-to-stored-cross-site-scripting-via2026-11-04 https://bugrater.com/releases/cve-2026-118513-authentication-bypass-by-spoofing-in-x509authenticator-and-x509authenticationlistener-of-symfony-versions-prior-to-5-4-56-6-x-prior-to-6-4-50-7-x-prior-to-7-42026-11-04 https://bugrater.com/releases/cve-2026-118516-the-symfony-routing-components-compiledurlmatcher-and-urlmatcher-interpret-the-host-and-path-information-differently-allowing-path-based-authorization-rules-to2026-11-04 https://bugrater.com/releases/cve-2026-119468-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-vulnerability-in-noptin-newsletter-team-noptin-newsletter-optin-box-allows2026-11-04 https://bugrater.com/releases/cve-2026-119481-incorrect-privilege-assignment-vulnerability-in-crocoblock-jetformbuilder-jetformbuilder-allows-privilege-escalation-this-issue-affects-jetformbuilder-from-n-a2026-11-04 https://bugrater.com/releases/cve-2026-121144-this-vulnerability-exists-in-the-ira-2-0-and-ira-ev-mobile-applications-due-to-presence-of-hardcoded-service-account-credentials-api-keys-and-authorization-tok2026-11-04 https://bugrater.com/releases/cve-2026-121145-this-vulnerability-exists-in-the-ira-2-0-and-ira-ev-mobile-applications-due-to-insufficient-validation-of-urls-and-origins-loaded-within-the-webview-component2026-11-04 https://bugrater.com/releases/cve-2026-121146-this-vulnerability-exists-in-the-ira-2-0-and-ira-ev-mobile-applications-due-to-the-recording-of-authentication-tokens-in-application-logs-used-for-development-a2026-11-04 https://bugrater.com/releases/cve-2026-121147-this-vulnerability-exists-in-the-ira-2-0-and-ira-ev-mobile-applications-due-to-improper-implementation-of-ssl-certificate-pinning-in-the-network-security-config2026-11-04 https://bugrater.com/releases/cve-2026-121373-the-symfony-htmlsanitizer-component-metarefreshattributesanitizer-introduced-to-fix-cve-2026-48761-sanitizes-the-refresh-url-of-content-attributes-of-meta-tag2026-11-04 https://bugrater.com/releases/cve-2026-121620-coopcycle-coopcycle-web-5-6-0-before-6-20-0-contains-a-missing-authentication-vulnerability-that-allows-unauthenticated-attackers-to-forge-zelty-webhook-events2026-11-04 https://bugrater.com/releases/cve-2026-121936-easyvoice-before-0-0-23-contains-a-server-side-request-forgery-vulnerability-that-allows-unauthenticated-attackers-to-make-the-server-send-post-requests-by-supp2026-11-04 https://bugrater.com/releases/cve-2026-121937-loonflow-before-r3-2-3-contains-a-missing-authorization-vulnerability-in-ticketflowhistoryview-that-allows-any-authenticated-user-to-read-other-users-ticket-fl2026-11-04 https://bugrater.com/releases/cve-2026-121938-langchain4j-aideepin-before-3-31-0-contains-an-insecure-direct-object-reference-vulnerability-that-allows-authenticated-users-to-read-other-users-character-cha2026-11-04 https://bugrater.com/releases/cve-2026-121939-databasement-before-1-10-9-contains-an-authentication-bypass-vulnerability-in-oauthservice-findorcreatelocaluser-that-links-oidc-identities-to-local-users-by2026-11-04 https://bugrater.com/releases/cve-2026-121940-stonewuu-ai-fusion-video-before-1-3-0-contains-an-insecure-direct-object-reference-vulnerability-that-allows-authenticated-users-to-access-other-users-projects2026-11-04 https://bugrater.com/releases/cve-2026-121941-libmt32emu-before-2-8-4-contains-a-heap-buffer-overflow-vulnerability-in-midistreamparserimpl-parsesysex-that-allows-attackers-to-write-past-a-heap-allocation2026-11-04 https://bugrater.com/releases/cve-2026-121942-zbar-through-0-23-95-contains-an-out-of-bounds-read-vulnerability-in-zbar-sq-decode-in-zbar-sqcode-c-that-allows-attackers-to-read-heap-memory-outside-the-im2026-11-04 https://bugrater.com/releases/cve-2026-121943-irontec-sngrep-through-1-9-0-contains-an-out-of-bounds-stack-read-vulnerability-in-sip-check-packet-and-sip-validate-packet-caused-by-an-off-by-one-length-check2026-11-04 https://bugrater.com/releases/cve-2026-121944-sngrep-through-1-9-0-contains-an-infinite-loop-vulnerability-in-capture-packet-reasm-ip-in-src-capture-c-that-allows-attackers-to-cause-denial-of-service-via2026-11-04 https://bugrater.com/releases/cve-2026-121945-coopcycle-coopcycle-web-before-6-20-1-contains-a-broken-access-control-vulnerability-that-allows-any-courier-to-read-and-modify-every-incident-because-incident2026-11-04 https://bugrater.com/releases/cve-2026-121946-zbateson-mail-mime-parser-before-3-0-9-and-4-x-before-4-0-6-contains-a-crlf-header-injection-vulnerability-in-message-building-helpers-that-fail-to-strip-cr-and2026-11-04 https://bugrater.com/releases/cve-2026-121970-pay-with-vipps-and-mobilepay-for-woocommerce-woo-vipps-before-6-4-1-contains-an-improper-cryptographic-signature-verification-vulnerability-in-the-recurring-p2026-11-04 https://bugrater.com/releases/cve-2026-65555-incorrect-privilege-assignment-vulnerability-in-uncanny-owl-uncanny-toolkit-for-learndash-uncanny-learndash-toolkit-allows-privilege-escalation-this-issue-affec2026-11-04 https://bugrater.com/releases/cve-2026-118391-allocation-of-resources-without-limits-or-throttling-vulnerability-in-elixir-ecto-ecto-allows-an-unauthenticated-remote-attacker-to-exhaust-memory-in-the-applic2026-11-04 https://bugrater.com/releases/cve-2026-119745-multivendorx-plugin-for-wordpress-before-5-0-21-contains-a-missing-authorization-vulnerability-that-allows-any-authenticated-user-including-subscribers-to-acc2026-11-04 https://bugrater.com/releases/cve-2026-121993-wepos-point-of-sale-for-woocommerce-before-2-0-3-contains-a-missing-authorization-vulnerability-in-the-wepos-v1-payment-process-rest-route-that-allows-authent2026-11-04 https://bugrater.com/releases/cve-2026-119776-in-all-prior-released-versions-of-frrouting-the-ospfv3-for-ipv6-implementation-does-not-check-that-ospfv3-packets-have-a-link-local-source-address-and-either2026-11-04 https://bugrater.com/releases/cve-2026-120421-in-eclipse-mojarra-versions-2-2-0-through-4-0-28-4-1-0-through-4-1-19-and-5-0-0-m1-through-5-0-0-m11-when-url-client-window-mode-is-enabled-jakarta-faces-c2026-11-04 https://bugrater.com/releases/cve-2026-121637-an-improper-integrity-validation-vulnerability-in-watchguard-authpoint-gateway-s-ldap-authentication-callback-allows-a-network-attacker-who-has-obtained-a-valid2026-11-04 https://bugrater.com/releases/cve-2026-121638-an-improper-certificate-validation-vulnerability-in-watchguard-authpoint-gateway-allows-an-attacker-with-an-on-path-network-position-to-intercept-and-modify-com2026-11-04 https://bugrater.com/releases/cve-2026-121639-a-missing-authentication-for-critical-function-vulnerability-in-watchguard-authpoint-gateway-allows-a-remote-unauthenticated-attacker-with-network-access-to-the2026-11-04 https://bugrater.com/releases/cve-2026-121640-an-authentication-bypass-by-capture-replay-vulnerability-in-watchguard-authpoint-gateway-allows-an-attacker-who-has-observed-a-legitimate-request-between-authpo2026-11-04 https://bugrater.com/releases/cve-2026-122007-oqtane-framework-before-10-3-0-contains-a-broken-access-control-vulnerability-in-settingcontroller-cs-that-allows-an-authenticated-site-administrator-to-read-an2026-11-04 https://bugrater.com/releases/cve-2026-122008-oqtane-framework-before-10-3-0-contains-a-server-side-request-forgery-vulnerability-in-the-uploadfile-endpoint-of-filecontroller-cs-that-allows-authenticated-re2026-11-04 https://bugrater.com/releases/cve-2026-106554-one-cbor-parsing-issue-in-jackson-dataformats-binary-s-cbor-module-an-unbounded-run-of-cbor-tags-drives-quadratic-time-taglist-growth-cpu-gc-exhaustion-dos-p2026-11-04 https://bugrater.com/releases/cve-2026-109518-on-debian-ubuntu-and-derivative-linux-distributions-an-on-path-attacker-who-can-manipulate-the-http-traffic-including-a-malicious-mirror-or-proxy-between-a2026-11-04 https://bugrater.com/releases/cve-2026-119746-prosoft-technology-icx35-devices-x35-hwc-a-and-icx35-hwc-e-contain-a-login-lockout-bypass-in-the-integrated-module-web-page-the-account-lockout-mechanism-tha2026-11-04 https://bugrater.com/releases/cve-2026-121950-freerdp-before-3-32-2-does-not-check-the-product-of-surface-dimensions-in-gdi-createsurface-when-handling-an-rdpgfx-create-surface-pdu-causing-an-integer-wrap2026-11-04 https://bugrater.com/releases/cve-2026-121951-freerdp-3-0-0-before-3-32-2-server-side-rdp-peer-input-parsing-skips-the-six-byte-body-of-a-slow-path-input-event-with-an-unknown-message-type-without-checking2026-11-04 https://bugrater.com/releases/cve-2026-121952-freerdp-before-3-32-2-has-an-out-of-bounds-write-in-the-proxy-because-rdp-read-bitmap-cache-v2-capability-set-rejects-only-numcellcaches-values-above-5-yet-the2026-11-04 https://bugrater.com/releases/cve-2026-121953-freerdp-before-3-32-2-has-a-use-after-free-in-the-client-s-rdpgfx-dynamic-virtual-channel-a-duplicate-name-channel-with-a-new-channelid-overwrites-the-listener2026-11-04 https://bugrater.com/releases/cve-2026-121954-freerdp-before-3-32-2-has-a-heap-out-of-bounds-write-in-the-planar-codec-because-freerdp-bitmap-planar-context-reset-commits-new-dimensions-before-buffer-reallo2026-11-04 https://bugrater.com/releases/cve-2026-121956-freerdp-before-3-32-2-contains-a-double-free-in-the-winpr-kerberos-sspi-retrievesometgt-function-which-installs-the-krb5-default-realm-into-a-target-principal2026-11-04 https://bugrater.com/releases/cve-2026-121957-freerdp-before-3-32-2-contains-a-use-after-free-vulnerability-that-allows-malicious-rdp-servers-to-corrupt-client-memory-by-racing-the-rdpgfx-resetgraphics-hand2026-11-04 https://bugrater.com/releases/cve-2026-121958-freerdp-through-3-32-1-has-a-heap-out-of-bounds-write-in-the-rdpgfx-client-because-the-delete-surface-callback-truncates-surface-hash-keys-to-16-bits-leaving-t2026-11-04 https://bugrater.com/releases/cve-2026-121959-freerdp-before-3-32-2-contains-an-infinite-loop-vulnerability-in-websocket-context-read-that-fails-to-handle-a-zero-bio-result-with-payload-outstanding-a-malic2026-11-04 https://bugrater.com/releases/cve-2026-121960-freerdp-before-3-32-2-contains-a-denial-of-service-vulnerability-in-the-nla-enabled-shadow-server-when-a-credssp-tsrequest-omits-negotokens-unauthenticated-att2026-11-04 https://bugrater.com/releases/cve-2026-121961-freerdp-before-3-32-2-contains-a-use-after-free-vulnerability-in-the-freerdp-proxy-drdynvc-tracker-when-intercepting-the-drdynvc-channel-a-malicious-target-ser2026-11-04 https://bugrater.com/releases/cve-2026-121962-freerdp-before-3-32-2-contains-a-heap-buffer-overflow-in-transport-default-read-pdu-when-handling-partial-early-user-authorization-reads-during-protocol-hybrid2026-11-04 https://bugrater.com/releases/cve-2026-121963-freerdp-before-3-32-2-contains-a-use-after-free-vulnerability-in-the-asynchronous-dynamic-rdpsnd-channel-that-allows-malicious-rdp-servers-to-trigger-freed-call2026-11-04 https://bugrater.com/releases/cve-2026-121964-freerdp-before-3-32-2-contains-a-heap-based-buffer-overflow-in-the-rd-gateway-rpc-client-where-rpc-client-recv-fragment-writes-bind-ack-and-alter-context-resp2026-11-04 https://bugrater.com/releases/cve-2026-121966-traefik-2-x-before-2-11-60-and-3-x-before-3-7-16-sends-forwardauth-subrequests-and-in-3-7-ingress-nginx-auth-url-requests-through-an-auth-server-connection2026-11-04 https://bugrater.com/releases/cve-2026-122032-spip-before-4-4-29-contains-a-sql-injection-vulnerability-that-allows-authenticated-attackers-with-back-office-access-to-inject-arbitrary-sql-by-submitting-a-di2026-11-04 https://bugrater.com/releases/cve-2026-119747-the-getpaid-plugin-for-wordpress-before-2-8-63-contains-an-incorrect-authorization-vulnerability-where-the-check-post-permissions-method-in-includes-api-class2026-11-04 https://bugrater.com/releases/cve-2026-119748-the-getpaid-plugin-for-wordpress-before-2-8-63-contains-an-authorization-bypass-vulnerability-that-allows-unauthenticated-attackers-to-access-and-manipulate-ano2026-11-04 https://bugrater.com/releases/cve-2026-119749-the-getpaid-plugin-for-wordpress-before-2-8-63-contains-an-improper-input-validation-vulnerability-that-allows-unauthenticated-attackers-to-bypass-payment-proce2026-11-04 https://bugrater.com/releases/cve-2026-121926-a-vulnerability-was-detected-in-yezhihao-jt808-server-up-to-a07f68c466b560b97ef41edb8a4966469abdf83e-affected-is-the-function-webmvcconfig-addinterceptors-of-t2026-11-04 https://bugrater.com/releases/cve-2026-121927-a-vulnerability-has-been-found-in-infiniflow-ragflow-up-to-0-27-3-affected-by-this-issue-is-the-function-account-get-of-the-file-common-data-source-seafile-co2026-11-04 https://bugrater.com/releases/cve-2026-121971-the-component-scopinghttpclient-in-symfony-httpclient-merges-the-options-of-its-default-scope-such-as-auth-bearer-or-auth-basic-into-a-request-before-resolvin2026-11-04 https://bugrater.com/releases/cve-2026-122054-converting-crafted-big-hkscs-input-to-ucs-4-or-the-internal-wide-character-encoding-for-example-with-iconv-in-the-gnu-c-library-version-2-18-through-2-31-may2026-11-04 https://bugrater.com/releases/cve-2026-57853-datagerry-before-3-3-0-contains-a-server-side-template-injection-vulnerability-that-allows-authenticated-attackers-with-base-docapi-template-add-permission-to-s2026-11-04 https://bugrater.com/releases/cve-2026-121928-a-vulnerability-was-identified-in-infiniflow-ragflow-up-to-0-27-2-this-issue-affects-some-unknown-processing-of-the-file-api-utils-file-utils-py-of-the-compone2026-11-04 https://bugrater.com/releases/cve-2026-121929-a-security-flaw-has-been-discovered-in-empiresoft-empirecms-up-to-8-0-impacted-is-an-unknown-function-of-the-file-e-member-mspace-index-php-the-manipulation2026-11-04 https://bugrater.com/releases/cve-2026-121930-a-weakness-has-been-identified-in-linksys-wrt54gl-4-30-18-the-affected-element-is-the-function-system-of-the-file-apply-cgi-of-the-component-ping-diagnostic-t2026-11-04 https://bugrater.com/releases/cve-2026-121931-a-security-vulnerability-has-been-detected-in-linksys-wrt54gl-4-30-18-the-impacted-element-is-the-function-system-of-the-file-apply-cgi-of-the-component-tracer2026-11-04 https://bugrater.com/releases/cve-2026-121932-a-vulnerability-was-detected-in-linksys-e5350-1-0-00-037-this-affects-the-function-system-of-the-file-wizard-apply-cgi-performing-a-manipulation-of-the-argum2026-11-04 https://bugrater.com/releases/cve-2026-82029-invoice-ninja-before-5-13-28-contains-a-broken-access-control-vulnerability-that-allows-authenticated-vendor-portal-contacts-to-access-documents-belonging-to-ot2026-11-04 https://bugrater.com/releases/cve-2026-82033-deepseek-harness-prior-to-0-1-2-alpha-2-and-specifically-commit-3e24087-contains-a-missing-authentication-vulnerability-in-its-web-profile-http-and-websocket2026-11-04 https://bugrater.com/releases/cve-2026-97701-zulip-is-an-open-source-team-collaboration-tool-in-zulip-server-versions-through-12-1-the-authenticated-post-messages-render-endpoint-renders-the-content-par2026-11-04 https://bugrater.com/releases/cve-2026-113368-sonatype-nexus-repository-3-does-not-check-that-a-user-account-is-authorized-to-access-a-repository-before-the-repository-is-added-as-a-member-of-a-group-reposi2026-11-04 https://bugrater.com/releases/cve-2026-113369-sonatype-nexus-repository-3-allows-a-user-account-that-can-push-manifests-to-a-hosted-oci-repository-a-user-account-that-holds-the-edit-permission-on-that-repo2026-11-04 https://bugrater.com/releases/cve-2026-113370-sonatype-nexus-repository-3-contains-a-sql-injection-vulnerability-in-the-optional-reindex-search-tables-by-pattern-task-a-user-who-holds-the-nexus-tasks-cre2026-11-04 https://bugrater.com/releases/cve-2026-113371-sonatype-nexus-repository-3-returns-the-signing-passphrase-of-an-apt-or-yum-repository-through-an-internal-rest-endpoint-to-a-user-account-that-holds-only-the2026-11-04 https://bugrater.com/releases/cve-2026-113374-sonatype-nexus-repository-3-does-not-require-realm-administration-permission-when-a-user-creates-a-rut-auth-capability-a-user-who-holds-only-the-capability-cre2026-11-04 https://bugrater.com/releases/cve-2026-115474-zulip-is-an-open-source-team-collaboration-tool-from-8-0-until-12-2-in-organizations-where-the-who-can-view-all-other-users-in-the-organization-setting-restri2026-11-04 https://bugrater.com/releases/cve-2026-115574-zulip-is-an-open-source-team-collaboration-tool-from-11-0-until-12-2-organizations-with-web-public-channels-enabled-exposed-the-get-json-users-endpoint-to-lo2026-11-04 https://bugrater.com/releases/cve-2026-121933-a-flaw-has-been-found-in-linksys-e5350-1-0-00-037-this-impacts-the-function-save-settings-of-the-file-wizard-apply-cgi-of-the-component-setup-wizard-executin2026-11-04 https://bugrater.com/releases/cve-2026-122192-improper-handling-of-a-failed-memory-remap-in-firecracker-versions-0-23-0-through-1-16-1-might-allow-a-guest-user-with-root-privileges-to-read-or-modify-firecra2026-11-04 https://bugrater.com/releases/cve-2026-122220-wpo365-login-wpo365-login-plugin-before-version-45-2-contains-an-authentication-bypass-by-capture-replay-vulnerability-caused-by-a-non-functional-anti-repla2026-11-04 https://bugrater.com/releases/cve-2025-71453-vtenext-before-25-02-2-contains-a-reflected-cross-site-scripting-vulnerability-in-modules-home-homewidgetblocklist-php-that-echoes-unsanitized-widgetid-keys-fro2026-11-04 https://bugrater.com/releases/cve-2025-71454-vtenext-before-25-02-2-contains-a-cross-site-request-forgery-protection-bypass-because-csrf-check-in-include-utils-vtecsrf-php-skips-csrf-token-validation-f2026-11-04 https://bugrater.com/releases/cve-2025-71455-vtenext-before-25-02-2-contains-a-session-identifier-disclosure-vulnerability-that-allows-attackers-to-read-the-phpsessid-value-returned-by-the-touch-web-servic2026-11-04 https://bugrater.com/releases/cve-2025-71456-vtenext-before-25-02-2-contains-an-sql-injection-vulnerability-that-allows-authenticated-low-privileged-users-to-inject-sql-by-supplying-a-crafted-fieldname-par2026-11-04 https://bugrater.com/releases/cve-2025-71457-vtenext-25-02-before-25-02-1-contains-an-authentication-bypass-vulnerability-that-allows-unauthenticated-attackers-to-change-any-account-password-via-hub-rpwd-p2026-11-04 https://bugrater.com/releases/cve-2026-121968-netrek-client-cow-through-3-3-3-contains-an-out-of-bounds-read-vulnerability-in-short-c-handlesmessage-that-allows-malicious-servers-to-crash-clients-via-an-u2026-11-04 https://bugrater.com/releases/cve-2026-121969-netrek-client-cow-through-3-3-3-contains-a-stack-based-buffer-overflow-vulnerability-in-handlesmessage-in-short-c-that-allows-malicious-servers-to-overflow-a2026-11-04 https://bugrater.com/releases/cve-2026-122009-a-flaw-has-been-found-in-datalinkdc-dinky-up-to-1-2-5-this-vulnerability-affects-the-function-flinkweburitemplateproxyservlet-getnewtargeturi-of-the-file-dinky2026-11-04 https://bugrater.com/releases/cve-2026-122013-a-vulnerability-was-detected-in-comfast-cf-wr632ax-2-6-0-1-affected-by-this-vulnerability-is-an-unknown-functionality-of-the-file-usr-bin-webmgnt-of-the-compo2026-11-04 https://bugrater.com/releases/cve-2026-122014-a-vulnerability-has-been-found-in-npc-worldwide-npcpy-up-to-2-1-27-this-affects-the-function-load-sft-model-of-the-file-npcpy-ft-sft-py-the-manipulation-of-th2026-11-04 https://bugrater.com/releases/cve-2026-122126-resiprocate-return-client-through-1-14-0-contains-a-heap-buffer-overflow-in-turntcpsocket-handlereadheader-that-allows-malicious-turn-servers-to-overwrite-me2026-11-04 https://bugrater.com/releases/cve-2026-122127-cesnet-ipfixcol2-2-7-1-before-2-9-0-contains-a-heap-based-buffer-overflow-in-lz4decoder-cpp-that-allows-unauthenticated-network-peers-to-write-past-heap-buffers2026-11-04 https://bugrater.com/releases/cve-2026-122129-cesnet-ipfixcol2-2-7-1-before-2-9-0-contains-a-memory-allocation-vulnerability-in-lz4decoder-read-start-header-that-allows-unauthenticated-attackers-to-exhau2026-11-04 https://bugrater.com/releases/cve-2026-122130-cesnet-ipfixcol2-2-3-0-before-2-9-0-contains-an-integer-overflow-vulnerability-in-the-forwarder-output-plugin-that-allows-unauthenticated-ipfix-exporters-to-ove2026-11-04 https://bugrater.com/releases/cve-2026-122131-joi-17-13-6-before-17-13-9-and-18-2-5-before-18-3-1-contains-a-prototype-pollution-vulnerability-in-lib-messages-js-compile-and-merge-that-fails-to-reject-a2026-11-04 https://bugrater.com/releases/cve-2026-122132-go-chi-chi-5-2-2-through-5-5-0-contains-an-open-redirect-vulnerability-in-the-redirectslashes-middleware-that-allows-attackers-to-redirect-victims-to-external-h2026-11-04 https://bugrater.com/releases/cve-2026-122133-mistral-vibe-before-2-25-5-on-windows-contains-an-untrusted-search-path-vulnerability-that-allows-attackers-to-execute-code-by-placing-git-exe-in-a-repository-r2026-11-04 https://bugrater.com/releases/cve-2026-122134-mistral-vibe-before-2-25-7-contains-a-remote-code-execution-vulnerability-that-allows-attackers-to-run-commands-by-configuring-malicious-git-clean-or-process-fi2026-11-04 https://bugrater.com/releases/cve-2026-122135-mistral-vibe-before-3-0-3-contains-a-remote-code-execution-vulnerability-that-allows-attackers-to-run-commands-by-abusing-repository-configured-gpg-program-duri2026-11-04 https://bugrater.com/releases/cve-2026-122136-powerlevel10k-before-1-20-19-contains-a-symlink-following-vulnerability-in-p9k-dump-instant-prompt-that-allows-local-attackers-to-overwrite-victim-writable-fil2026-11-04 https://bugrater.com/releases/cve-2026-122137-powerlevel10k-before-1-20-19-contains-an-insecure-temporary-directory-vulnerability-in-the-bundled-gitstatus-install-script-that-reuses-attacker-creatable-direc2026-11-04 https://bugrater.com/releases/cve-2026-122138-blueprintue-self-hosted-edition-4-2-0-before-4-3-4-contains-a-login-rate-limit-bypass-vulnerability-in-loginmiddleware-php-that-keys-failed-login-counters-on-ca2026-11-04 https://bugrater.com/releases/cve-2026-122139-blueprintue-self-hosted-edition-before-4-3-3-contains-an-account-enumeration-vulnerability-in-forgotpasswordmiddleware-php-that-allows-unauthenticated-attackers2026-11-04 https://bugrater.com/releases/cve-2026-122140-trawl-1-5-0-before-1-10-0-contains-a-server-side-request-forgery-vulnerability-that-allows-unauthenticated-attackers-to-bypass-the-mcp-outbound-url-policy-using2026-11-04 https://bugrater.com/releases/cve-2026-122224-webvirtcloud-through-commit-bb920b0-contains-a-missing-authorization-vulnerability-that-allows-low-privileged-authenticated-users-to-reach-migrateviewset-and-cr2026-11-04 https://bugrater.com/releases/cve-2026-122233-frankenphp-before-1-13-4-contains-an-information-disclosure-vulnerability-in-worker-mode-that-fails-to-clear-last-http-stream-response-headers-between-requests2026-11-04 https://bugrater.com/releases/cve-2026-122234-jsondiffpatch-before-0-7-7-contains-a-cross-site-scripting-vulnerability-that-allows-attackers-to-inject-markup-by-supplying-an-unescaped-array-move-destination2026-11-04 https://bugrater.com/releases/cve-2026-122235-jan-from-0-8-5-before-0-8-8-contains-a-workspace-guard-bypass-vulnerability-in-the-agent-tools-gate-rs-that-allows-attackers-to-write-files-outside-the-workspac2026-11-04 https://bugrater.com/releases/cve-2026-121745-node-version-manager-nvm-is-a-posix-compliant-shell-function-for-managing-multiple-node-js-versions-in-versions-0-40-0-through-0-40-8-when-nvm-auth-header2026-11-04 https://bugrater.com/releases/cve-2026-121746-node-version-manager-nvm-is-a-posix-compliant-shell-function-for-managing-multiple-node-js-versions-in-versions-0-40-0-through-0-40-8-nvm-use-save-and2026-11-04 https://bugrater.com/releases/cve-2026-121747-node-version-manager-nvm-is-a-posix-compliant-shell-function-for-managing-multiple-node-js-versions-in-versions-0-2-0-through-0-40-8-nvm-does-not-check-whet2026-11-04 https://bugrater.com/releases/cve-2026-121748-node-version-manager-nvm-is-a-posix-compliant-shell-function-for-managing-multiple-node-js-versions-in-versions-0-27-0-through-0-40-8-when-a-project-s-npm2026-11-04 https://bugrater.com/releases/cve-2026-121749-node-version-manager-nvm-is-a-posix-compliant-shell-function-for-managing-multiple-node-js-versions-in-versions-0-5-0-through-0-40-8-the-requested-version-p2026-11-04 https://bugrater.com/releases/cve-2026-121750-node-version-manager-nvm-is-a-posix-compliant-shell-function-for-managing-multiple-node-js-versions-in-versions-0-40-5-through-0-40-8-nvm-download-artifact2026-11-04 https://bugrater.com/releases/cve-2026-121751-node-version-manager-nvm-is-a-posix-compliant-shell-function-for-managing-multiple-node-js-versions-in-versions-0-39-6-through-0-40-8-nvm-ls-remote-and-o2026-11-04 https://bugrater.com/releases/cve-2026-122015-a-vulnerability-was-found-in-npc-worldwide-npcpy-up-to-2-1-27-this-vulnerability-affects-the-function-get-mlx-response-of-the-file-npcpy-gen-response-py-of-the2026-11-04 https://bugrater.com/releases/cve-2026-122016-a-vulnerability-was-determined-in-yangzongzhuan-ruoyi-vue-up-to-3-9-2-this-issue-affects-the-function-syspermissionservice-getmenupermission-of-the-file-sysper2026-11-04 https://bugrater.com/releases/cve-2026-122019-a-vulnerability-was-identified-in-6amtech-6valley-16-0-impacted-is-the-function-existingaccountcheck-of-the-file-api-v1-auth-existing-account-check-of-the-com2026-11-04 https://bugrater.com/releases/cve-2026-122020-a-security-flaw-has-been-discovered-in-nst-labs-tech-nstbrowser-up-to-1-2-1-the-affected-element-is-the-function-stopallbrowsers-of-the-file-api-agent-browser2026-11-04 https://bugrater.com/releases/cve-2026-54372-vitafit-android-application-com-vt-vitafit-before-2-8-1-0-contains-an-insecure-tls-ssl-certificate-validation-vulnerability-that-allows-network-based-attacker2026-11-04 https://bugrater.com/releases/cve-2026-54373-vitafit-android-application-com-vt-vitafit-before-2-8-1-0-contains-a-cleartext-traffic-vulnerability-that-allows-network-based-attackers-to-intercept-or-modif2026-11-04 https://bugrater.com/releases/cve-2026-54374-vitafit-android-application-com-vt-vitafit-before-2-8-1-0-contains-a-hardcoded-credentials-vulnerability-that-allows-attackers-to-extract-confidential-third-p2026-11-04 https://bugrater.com/releases/cve-2026-54375-vitafit-android-application-com-vt-vitafit-before-2-8-1-0-contains-an-insecure-session-management-vulnerability-that-allows-attackers-to-extract-or-intercept2026-11-04 https://bugrater.com/releases/cve-2026-54376-vitafit-android-application-com-vt-vitafit-before-2-8-1-0-contains-an-insecure-custom-uri-scheme-vulnerability-that-allows-a-malicious-application-to-intercep2026-11-04 https://bugrater.com/releases/cve-2026-54377-vitafit-cloud-api-before-2026-10-30-contained-an-insecure-direct-object-reference-vulnerability-that-allows-authenticated-attackers-to-access-another-user-s-dat2026-11-04 https://bugrater.com/releases/cve-2026-54378-vitafit-cloud-api-before-2026-10-30-contained-a-broken-access-control-vulnerability-that-allows-any-authenticated-user-to-obtain-temporary-aws-credentials-by-ca2026-11-04 https://bugrater.com/releases/cve-2026-54380-vitafit-cloud-api-before-2026-10-30-contained-a-stored-cross-site-scripting-vulnerability-that-allows-authenticated-attackers-to-upload-an-svg-image-containing2026-11-04 https://bugrater.com/releases/cve-2026-58128-alan-health-insurance-for-android-com-alanmobile-1-450-0-contains-a-path-traversal-vulnerability-that-allows-a-co-resident-malicious-application-to-write-att2026-11-04 https://bugrater.com/releases/cve-2026-122028-a-vulnerability-has-been-found-in-nst-labs-tech-nstbrowser-1-21-0-affected-by-this-vulnerability-is-an-unknown-functionality-of-the-file-agent-info-of-the-com2026-11-04 https://bugrater.com/releases/cve-2026-122038-a-vulnerability-was-identified-in-krupalshah-employeerecruitmentsystem-up-to-922ff6d208278282e7c8e36d70d9ae356adec9fe-affected-by-this-issue-is-the-function-my2026-11-04 https://bugrater.com/releases/cve-2026-122047-a-security-vulnerability-has-been-detected-in-campcodes-complete-advance-loan-management-system-1-0-this-affects-the-function-move-uploaded-file-of-the-file-l2026-11-04 https://bugrater.com/releases/cve-2026-122048-a-vulnerability-was-identified-in-campcodes-division-regional-athletic-meet-game-result-matrix-system-up-to-2-1-this-affects-an-unknown-function-of-the-file-d2026-11-04 https://bugrater.com/releases/cve-2026-122299-dulwich-before-1-2-20-contains-a-commit-object-parsing-vulnerability-where-the-read-path-in-parse-commit-resolves-a-duplicate-tree-header-to-the-last-occurrenc2026-11-04 https://bugrater.com/releases/cve-2026-54381-vitafit-cloud-api-before-2026-10-30-contained-a-misconfigured-cloud-storage-bucket-vulnerability-that-allows-unauthenticated-attackers-to-list-and-download-stor2026-11-04 https://bugrater.com/releases/cve-2026-54382-vitafit-cloud-api-before-2026-10-30-contained-an-improper-access-control-vulnerability-in-its-cognito-issued-aws-role-that-allows-authenticated-attackers-to-per2026-11-04 https://bugrater.com/releases/cve-2026-54383-vitafit-cloud-api-before-2026-10-30-contained-an-excessive-data-exposure-vulnerability-that-allows-any-authenticated-user-to-query-the-get-front-relation-searc2026-11-04 https://bugrater.com/releases/cve-2026-54384-vitafit-cloud-api-before-2026-10-30-contained-an-authentication-bypass-vulnerability-that-allows-remote-attackers-to-obtain-a-full-session-for-a-victim-s-accoun2026-11-04 https://bugrater.com/releases/htmlawed-moderately-critical-cross-site-scripting-sa-contrib-2026-3152026-11-05 https://bugrater.com/releases/htmlawed-moderately-critical-cross-site-scripting-sa-contrib-2026-3142026-11-05 https://bugrater.com/releases/islandora-moderately-critical-access-bypass-leading-to-arbitrary-file-overwrite-sa-contrib-2026-3132026-11-05 https://bugrater.com/releases/mime-mail-moderately-critical-information-disclosure-sa-contrib-2026-3122026-11-05 https://bugrater.com/releases/adobeanalytics-moderately-critical-cross-site-scripting-sa-contrib-2026-3112026-11-05 https://bugrater.com/releases/wordsonline-connector-moderately-critical-sql-injection-sa-contrib-2026-3102026-11-05 https://bugrater.com/releases/extended-html-filter-moderately-critical-cross-site-scripting-sa-contrib-2026-3092026-11-05 https://bugrater.com/releases/allowed-languages-less-critical-access-bypass-sa-contrib-2026-3082026-11-05 https://bugrater.com/releases/cve-2026-122049-a-flaw-has-been-found-in-campcodes-bitcoin-wallet-system-1-0-this-affects-the-function-random-int-of-the-file-core-app-http-controllers-auth-forgotpasswordcont2026-11-05 https://bugrater.com/releases/cve-2026-122050-a-vulnerability-was-found-in-campcodes-complete-sales-and-inventory-system-with-credit-management-1-0-this-issue-affects-some-unknown-processing-of-the-file-a2026-11-05 https://bugrater.com/releases/cve-2026-122051-a-flaw-has-been-found-in-edimax-br-6208ac-1-32-affected-by-this-vulnerability-is-an-unknown-functionality-of-the-file-goform-mp-executing-a-manipulation-can2026-11-05 https://bugrater.com/releases/cve-2026-122052-a-vulnerability-has-been-found-in-laspy-up-to-2-7-0-affected-by-this-issue-is-some-unknown-functionality-of-the-file-laspy-lasreader-py-of-the-component-las-fi2026-11-05 https://bugrater.com/releases/cve-2026-122144-a-security-flaw-has-been-discovered-in-nliautaud-pico-content-editor-up-to-02d5ad6c820c5050c542ab9505819b5e0a0ba1af-this-vulnerability-affects-unknown-code-th2026-11-05 https://bugrater.com/releases/cve-2026-122146-a-weakness-has-been-identified-in-101arrowz-fflate-up-to-0-8-3-this-issue-affects-the-function-unzipsync-of-the-file-esm-index-mjs-this-manipulation-causes-me2026-11-05 https://bugrater.com/releases/cve-2026-122151-a-security-vulnerability-has-been-detected-in-presenton-up-to-0-9-11-beta-impacted-is-the-function-json-parse-of-the-file-api-user-config-of-the-component-use2026-11-05 https://bugrater.com/releases/cve-2026-122154-a-vulnerability-was-found-in-purocean-yank-note-3-93-0-this-impacts-the-function-config-getall-of-the-file-src-main-server-index-ts-of-the-component-settings-e2026-11-05 https://bugrater.com/releases/cve-2026-122157-a-vulnerability-was-identified-in-purocean-yank-note-3-93-0-affected-by-this-vulnerability-is-the-function-checkpermission-of-the-file-src-main-server-index-ts2026-11-05 https://bugrater.com/releases/cve-2026-122158-a-security-flaw-has-been-discovered-in-invoiceshelf-up-to-2-4-3-3-0-0-alpha-3-affected-by-this-issue-is-the-function-memberservice-create-of-the-file-app-doma2026-11-05 https://bugrater.com/releases/cve-2026-122159-a-weakness-has-been-identified-in-edge0-ai-audio8-tts-up-to-1d64afcc2da56222b41ddcf53de7b8bc54be1fb6-this-affects-the-function-arkttsruntime-init-of-the-fi2026-11-05 https://bugrater.com/releases/cve-2026-122160-a-security-vulnerability-has-been-detected-in-myshell-ai-ailice-up-to-0-4-0-this-vulnerability-affects-the-function-loadmodel-peft-of-the-file-ailice-core-llm2026-11-05 https://bugrater.com/releases/cve-2026-122188-a-flaw-has-been-found-in-deepgraphlearning-knowledgegraphembedding-up-to-2e440e0f9c687314d5ff67ead68ce985dc446e3a-impacted-is-the-function-override-config-of-t2026-11-05 https://bugrater.com/releases/cve-2026-122189-a-vulnerability-has-been-found-in-openppl-ppl-nn-up-to-bb84dc9952809b3a5a0036858a3d9f68af1c83d5-the-affected-element-is-the-function-optgraph-initquantization2026-11-05 https://bugrater.com/releases/cve-2026-122302-kyverno-before-1-19-2-contains-a-privilege-escalation-vulnerability-that-allows-namespace-admins-to-create-resources-beyond-their-rbac-because-generate-rule-adm2026-11-05 https://bugrater.com/releases/cve-2026-122303-kyverno-from-1-17-0-before-1-19-2-contains-an-authorization-bypass-vulnerability-that-allows-namespace-tenants-to-overwrite-resources-in-other-namespaces-via-na2026-11-05 https://bugrater.com/releases/cve-2026-122304-kyverno-from-1-17-0-before-1-19-2-contains-an-authorization-bypass-vulnerability-that-allows-namespace-admins-to-escape-namespace-confinement-because-the-cleanu2026-11-05 https://bugrater.com/releases/cve-2026-122305-kyverno-before-1-19-2-contains-a-denial-of-service-vulnerability-in-substitutevariablesifany-that-allows-low-privileged-users-to-hang-the-admission-webhook-via2026-11-05 https://bugrater.com/releases/cve-2026-122306-kyverno-before-1-19-2-contains-a-denial-of-service-vulnerability-that-allows-namespaced-policy-authors-to-exhaust-admission-controller-cpu-by-submitting-patholo2026-11-05 https://bugrater.com/releases/cve-2026-122307-kyverno-before-1-19-2-contains-a-policy-bypass-vulnerability-in-the-admissionpolicygenerator-controller-which-folds-policyexceptions-into-generated-validatinga2026-11-05 https://bugrater.com/releases/cve-2026-122308-kyverno-before-1-19-2-contains-an-authorization-bypass-vulnerability-in-the-generation-handler-that-allows-users-with-create-update-permissions-to-trigger-synch2026-11-05 https://bugrater.com/releases/cve-2026-122309-kyverno-before-1-19-2-contains-a-denial-of-service-vulnerability-that-allows-namespace-scoped-policy-authors-to-exhaust-cpu-and-memory-by-submitting-cel-express2026-11-05 https://bugrater.com/releases/cve-2026-122310-kyverno-from-1-19-1-before-1-19-2-validates-a-policy-s-context-apicall-urlpath-after-cleaning-it-but-executes-the-raw-path-whose-fragment-or-query-the-kubernet2026-11-05 https://bugrater.com/releases/cve-2026-122311-kyverno-from-1-16-0-before-1-19-2-fails-to-validate-path-segments-in-the-resource-argument-of-resource-get-and-resource-post-allowing-namespaced-cel-polici2026-11-05 https://bugrater.com/releases/cve-2026-122312-kyverno-from-1-19-1-before-1-19-2-contains-a-namespace-isolation-bypass-in-apicall-fetch-in-pkg-engine-apicall-apicall-go-because-path-clean-treats-as-a-p2026-11-05 https://bugrater.com/releases/cve-2026-122313-kyverno-from-1-17-0-before-1-19-2-contains-a-privilege-escalation-vulnerability-that-allows-namespace-scoped-tenants-to-modify-resources-in-other-namespaces-thr2026-11-05 https://bugrater.com/releases/cve-2026-122314-kyverno-before-1-19-2-contains-an-unchecked-type-assertion-in-its-variable-substitution-engine-that-allows-users-who-can-submit-resources-to-crash-the-policy-en2026-11-05 https://bugrater.com/releases/cve-2026-122315-kyverno-before-1-19-2-contains-an-unchecked-type-assertion-in-buildstatementmap-that-allows-unauthenticated-attackers-to-crash-the-policy-engine-via-crafted-att2026-11-05 https://bugrater.com/releases/cve-2026-122316-kyverno-from-1-17-0-before-1-19-2-contains-a-missing-authorization-vulnerability-in-the-mutate-existing-background-processor-that-allows-namespaced-tenants-to-m2026-11-05 https://bugrater.com/releases/cve-2026-122318-kyverno-before-1-19-2-contains-an-authentication-bypass-in-matchcertificatedata-that-skips-verifyimages-subject-and-subjectregexp-checks-when-the-signing-certif2026-11-05 https://bugrater.com/releases/cve-2026-122319-kyverno-before-1-19-2-contains-a-denial-of-service-vulnerability-in-the-in-and-notin-operators-that-allows-attackers-to-crash-the-policy-engine-via-an-unchecked2026-11-05 https://bugrater.com/releases/cve-2026-122320-kyverno-before-1-19-2-contains-a-missing-authorization-vulnerability-that-allows-namespaced-policy-authors-to-read-resources-in-other-namespaces-by-templating-g2026-11-05 https://bugrater.com/releases/cve-2026-122321-kyverno-1-18-0-before-1-19-2-contains-a-signature-verification-bypass-in-verifyimages-because-cached-verification-results-are-keyed-by-the-image-reference-strin2026-11-05 https://bugrater.com/releases/cve-2026-122322-kyverno-from-1-11-0-before-1-19-2-contains-an-unbounded-decompression-vulnerability-in-extractstatement-that-allows-remote-attackers-to-exhaust-memory-by-supply2026-11-05 https://bugrater.com/releases/cve-2026-122323-kyverno-from-1-11-0-before-1-19-2-contains-an-unbounded-decompression-vulnerability-in-fetchsignatureblob-that-allows-attackers-to-exhaust-memory-by-supplying-h2026-11-05 https://bugrater.com/releases/cve-2026-122190-a-vulnerability-was-found-in-sourcecodester-online-food-ordering-system-1-0-the-impacted-element-is-an-unknown-function-of-the-file-admin-add-category-php-of-t2026-11-05 https://bugrater.com/releases/cve-2026-122191-a-vulnerability-was-determined-in-itsourcecode-airline-reservation-system-1-0-this-affects-an-unknown-function-of-the-file-admin-manage-booked-php-executing2026-11-05 https://bugrater.com/releases/cve-2026-122236-a-vulnerability-has-been-found-in-openhands-up-to-1-24-0-this-impacts-an-unknown-function-of-the-component-landing-page-such-manipulation-leads-to-missing-aut2026-11-05 https://bugrater.com/releases/msrc-cve-2026-1225182026-11-05 https://bugrater.com/releases/cve-2026-104812-the-redux-framework-plugin-for-wordpress-is-vulnerable-to-stored-cross-site-scripting-via-multi-media-field-array-key-in-all-versions-due-to-insufficient-inpu2026-11-05 https://bugrater.com/releases/cve-2026-116617-the-motors-car-dealership-classified-listings-plugin-plugin-for-wordpress-is-vulnerable-to-file-deletion-in-all-versions-up-to-and-including-1-4-128-the-v2026-11-05 https://bugrater.com/releases/cve-2026-118193-the-givewp-donation-plugin-and-fundraising-platform-plugin-for-wordpress-is-vulnerable-to-privilege-escalation-in-all-versions-up-to-and-including-4-19-1-vi2026-11-05 https://bugrater.com/releases/cve-2026-120533-the-redux-framework-plugin-for-wordpress-is-vulnerable-to-stored-cross-site-scripting-via-theme-opts-parameter-via-user-profile-in-all-versions-up-to-and-inclu2026-11-05 https://bugrater.com/releases/cve-2026-120553-the-customer-reviews-for-woocommerce-plugin-for-wordpress-is-vulnerable-to-stored-cross-site-scripting-via-the-slides-to-show-parameter-in-all-versions-up-to2026-11-05 https://bugrater.com/releases/cve-2026-93389-the-litespeed-cache-plugin-for-wordpress-is-vulnerable-to-unauthenticated-disclosure-of-sensitive-woocommerce-customer-data-in-all-versions-up-to-and-including2026-11-05 https://bugrater.com/releases/cve-2025-15701-the-easy-social-icons-wordpress-plugin-before-4-0-3-does-not-sanitise-and-escape-some-of-its-settings-before-outputting-them-on-front-end-pages-which-could-all2026-11-05 https://bugrater.com/releases/cve-2025-15702-the-cloud-blocks-wordpress-plugin-through-1-1-8-does-not-perform-any-authorisation-or-sanitisation-when-storing-block-asset-urls-allowing-unauthenticated-users2026-11-05 https://bugrater.com/releases/cve-2026-100144-the-ivpay-payments-wordpress-plugin-through-1-0-8-does-not-sanitise-a-value-from-its-payment-callback-before-using-it-in-a-sql-statement-and-treats-an-empty-ap2026-11-05 https://bugrater.com/releases/cve-2026-105259-the-easy-social-icons-wordpress-plugin-before-4-0-3-does-not-sanitise-svg-files-which-it-adds-to-the-list-of-file-types-that-may-be-uploaded-site-wide-allowin2026-11-05 https://bugrater.com/releases/cve-2026-105971-the-car-dealer-dealership-and-vehicle-sales-wordpress-plugin-through-4-73-does-not-restrict-its-unauthenticated-single-listing-ajax-action-to-published-conten2026-11-05 https://bugrater.com/releases/cve-2026-107773-the-dokan-ai-powered-woocommerce-multivendor-marketplace-solution-wordpress-plugin-before-5-3-3-does-not-correctly-verify-authorization-when-serving-a-single2026-11-05 https://bugrater.com/releases/cve-2026-107774-the-dokan-ai-powered-woocommerce-multivendor-marketplace-solution-wordpress-plugin-before-5-3-3-does-not-use-a-trusted-site-owned-sender-address-when-relaying2026-11-05 https://bugrater.com/releases/cve-2026-107775-the-dokan-ai-powered-woocommerce-multivendor-marketplace-solution-wordpress-plugin-before-5-3-3-does-not-verify-that-the-acting-administrator-is-authorized-to2026-11-05 https://bugrater.com/releases/cve-2026-107786-the-catfolders-wordpress-plugin-before-2-5-7-does-not-properly-sanitize-and-escape-a-user-controlled-sort-setting-before-using-it-in-a-sql-query-allowing-auth2026-11-05 https://bugrater.com/releases/cve-2026-107787-the-catfolders-wordpress-plugin-before-2-5-7-does-not-have-authorisation-checks-on-a-folder-maintenance-action-allowing-users-with-a-role-as-low-as-subscriber2026-11-05 https://bugrater.com/releases/cve-2026-109150-the-wp-pagenavi-style-wordpress-plugin-through-1-4-does-not-sanitise-and-escape-some-of-its-settings-and-has-no-csrf-check-when-they-are-saved-which-could-all2026-11-05 https://bugrater.com/releases/cve-2026-16304-the-wp-event-manager-wordpress-plugin-before-3-4-2-does-not-properly-validate-ownership-or-the-type-of-the-user-supplied-post-identifiers-processed-by-one-of-i2026-11-05 https://bugrater.com/releases/cve-2026-19256-the-all-in-one-login-wordpress-plugin-before-2-5-0-does-not-adequately-restrict-the-number-of-attempts-that-can-be-made-against-the-short-numeric-code-used-by-i2026-11-05 https://bugrater.com/releases/cve-2026-85346-the-fv-flowplayer-video-player-wordpress-plugin-before-7-5-56-7212-does-not-perform-authorization-or-csrf-checks-on-several-of-its-cloud-storage-media-browser-h2026-11-05 https://bugrater.com/releases/cve-2026-85347-the-fv-flowplayer-video-player-wordpress-plugin-before-7-5-56-7212-does-not-sanitize-and-escape-a-user-supplied-value-before-outputting-it-in-a-page-which-coul2026-11-05 https://bugrater.com/releases/cve-2026-85351-the-fv-flowplayer-video-player-wordpress-plugin-before-7-5-56-7212-does-not-validate-a-user-supplied-url-before-performing-a-server-side-fetch-whose-response-bo2026-11-05 https://bugrater.com/releases/cve-2026-85570-the-tutor-lms-wordpress-plugin-before-4-2-0-does-not-prevent-the-correct-answers-to-quiz-questions-from-being-included-in-the-page-it-serves-to-the-student-tak2026-11-05 https://bugrater.com/releases/cve-2026-86442-the-wp-event-manager-wordpress-plugin-before-3-4-2-does-not-verify-the-ownership-or-the-post-type-of-a-user-supplied-post-identifier-in-its-front-end-event-sub2026-11-05 https://bugrater.com/releases/cve-2026-86795-the-community-events-wordpress-plugin-before-1-6-0-does-not-have-authorisation-or-nonce-checks-in-one-of-its-ajax-actions-allowing-unauthenticated-users-to-ret2026-11-05 https://bugrater.com/releases/cve-2026-87856-the-subscriptions-for-woocommerce-wordpress-plugin-before-2-1-1-only-enforces-its-membership-content-restrictions-on-standard-front-end-page-views-allowing-una2026-11-05 https://bugrater.com/releases/cve-2026-88814-the-yith-woocommerce-gift-cards-wordpress-plugin-before-4-38-1-does-not-lock-or-atomically-update-a-gift-card-s-balance-when-it-is-redeemed-at-checkout-allowin2026-11-05 https://bugrater.com/releases/cve-2026-90963-the-essential-real-estate-wordpress-plugin-before-5-3-5-does-not-perform-any-authorization-or-publication-status-check-in-one-of-its-ajax-actions-allowing-unau2026-11-05 https://bugrater.com/releases/cve-2026-90964-the-essential-real-estate-wordpress-plugin-before-5-3-5-does-not-restrict-the-recipient-of-one-of-its-contact-email-actions-allowing-unauthenticated-users-to-s2026-11-05 https://bugrater.com/releases/cve-2026-90965-the-essential-real-estate-wordpress-plugin-before-5-3-5-does-not-perform-a-publication-status-or-authorization-check-in-two-of-its-ajax-actions-allowing-unauth2026-11-05 https://bugrater.com/releases/cve-2026-90966-the-essential-real-estate-wordpress-plugin-before-5-3-5-does-not-verify-in-one-of-its-ajax-actions-that-a-listing-package-selected-for-free-activation-is-genu2026-11-05 https://bugrater.com/releases/cve-2026-90967-the-essential-real-estate-wordpress-plugin-before-5-3-5-does-not-verify-ownership-of-an-invoice-before-rendering-it-in-one-of-its-ajax-actions-allowing-an-auth2026-11-05 https://bugrater.com/releases/cve-2026-91049-the-ewww-image-optimizer-wordpress-plugin-before-8-9-1-does-not-properly-sanitize-and-restrict-a-value-in-post-content-before-using-it-to-dynamically-load-and-e2026-11-05 https://bugrater.com/releases/cve-2026-123033-authentication-bypass-in-the-ha-heartbeat-origin-check-in-middlewared-in-truenas-scale-before-25-10-8-and-in-release-trains-before-their-respective-fixes-allo2026-11-05 https://bugrater.com/releases/cve-2026-100109-the-security-for-woocommerce-wordpress-plugin-from-1-0-10-to-1-0-16-does-not-perform-capability-checks-when-creating-users-through-an-action-available-to-unauth2026-11-05 https://bugrater.com/releases/cve-2026-107776-the-dokan-wordpress-plugin-before-5-3-3-does-not-reconcile-the-amount-credited-to-a-vendor-s-reverse-withdrawal-ledger-against-the-amount-actually-collected-for2026-11-05 https://bugrater.com/releases/cve-2026-109408-vault-java-driver-a-java-client-for-hashicorp-vault-silently-disables-tls-certificate-and-hostname-verification-in-three-states-where-the-caller-asked-for-ver2026-11-05 https://bugrater.com/releases/cve-2026-112072-vault-java-driver-a-java-client-for-hashicorp-vault-parses-vault-s-json-responses-with-a-vendored-minimal-json-parser-that-has-no-nesting-depth-limit-a-deepl2026-11-05 https://bugrater.com/releases/cve-2026-121489-improper-limitation-of-a-pathname-to-a-restricted-directory-path-traversal-vulnerability-in-apache-juneau-the-microservice-directoryresource-does-not-keep2026-11-05 https://bugrater.com/releases/cve-2026-123018-a-security-flaw-has-been-discovered-in-eosphoros-ai-db-gpt-up-to-0-8-2-this-issue-affects-the-function-execute-code-of-the-file-code-utils-py-of-the-component2026-11-05 https://bugrater.com/releases/cve-2026-123019-a-weakness-has-been-identified-in-eosphoros-ai-db-gpt-up-to-0-8-2-impacted-is-the-function-exec-module-of-the-file-hf-adapter-py-of-the-component-huggingface-a2026-11-05 https://bugrater.com/releases/cve-2026-73095-allocation-of-resources-without-limits-or-throttling-vulnerability-in-apache-juneau-the-messagepack-parser-which-the-rest-server-enables-by-default-sizes-bu2026-11-05 https://bugrater.com/releases/cve-2026-96677-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-vulnerability-in-apache-juneau-html-document-serialization-does-not-html2026-11-05 https://bugrater.com/releases/november-2026-early-security-updates2026-11-05 https://bugrater.com/releases/cve-2026-103863-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-vulnerability-in-apache-sling-engine-content-type-charset-and-redirect-c2026-11-05 https://bugrater.com/releases/cve-2026-103864-improper-output-neutralization-for-logs-in-apache-sling-engine-this-issue-affects-apache-sling-engine-before-3-0-4-users-are-recommended-to-upgrade-to2026-11-05 https://bugrater.com/releases/cve-2026-103866-inconsistent-interpretation-of-http-requests-http-request-response-smuggling-vulnerability-in-apache-sling-engine-the-engine-s-query-form-parser-accepts-no2026-11-05 https://bugrater.com/releases/cve-2026-123020-a-security-vulnerability-has-been-detected-in-eosphoros-ai-db-gpt-up-to-0-8-1-the-affected-element-is-the-function-filebasedskill-get-prompt-of-the-file-packag2026-11-05 https://bugrater.com/releases/cve-2026-123047-in-eclipse-basyx-helm-charts-versions-3-0-0-rc-1-to-3-12-1-of-the-basyx-chart-deployments-with-the-bundled-keycloak-enabled-store-the-passwords-of-the-keyclo2026-11-05 https://bugrater.com/releases/cve-2026-123119-the-symfony-httpclient-component-noprivatenetworkhttpclient-does-not-pin-the-checked-ip-address-of-cached-hosts-allowing-for-dns-rebinding-to-bypass-private-ne2026-11-05 https://bugrater.com/releases/cve-2026-95652-execution-with-unnecessary-privileges-vulnerability-in-t-b-tak-b-lgem-software-technologies-research-institute-pardus-usb-formatter-allows-privilege-abuse-thi2026-11-05 https://bugrater.com/releases/cve-2026-100168-direct-request-forced-browsing-in-the-content-manager-component-in-apache-ofbiz-24-09-07-on-all-platforms-allows-an-authenticated-user-holding-only-view-onl2026-11-05 https://bugrater.com/releases/cve-2026-100228-improper-input-validation-in-order-returns-in-apache-ofbiz-24-09-07-on-all-platforms-allows-an-authenticated-user-without-the-ordermgr-create-permission-to-pers2026-11-05 https://bugrater.com/releases/cve-2026-104720-improper-limitation-of-a-pathname-to-a-restricted-directory-path-traversal-vulnerability-in-kobikom-telecommunications-and-informatics-services-inc-kobikom2026-11-05 https://bugrater.com/releases/cve-2026-105321-improper-neutralization-of-special-elements-used-in-an-sql-command-sql-injection-vulnerability-in-kobikom-telecommunications-and-informatics-services-inc-k2026-11-05 https://bugrater.com/releases/cve-2026-105325-missing-check-for-accounting-update-accounting-create-in-accounting-in-allows-user-with-only-accounting-view-permission-to-update-create-paymentapplication2026-11-05 https://bugrater.com/releases/cve-2026-105330-use-of-hard-coded-cryptographic-key-in-jwt-token-authentication-in-apache-ofbiz-24-09-06-and-24-09-07-on-all-platforms-allows-an-unauthenticated-network-reacha2026-11-05 https://bugrater.com/releases/cve-2026-105461-missing-check-for-ordermgr-update-in-ordermgr-allows-user-with-only-ordermgr-view-permission-to-update-orders-affected-versions-before-24-09-08-users-are2026-11-05 https://bugrater.com/releases/cve-2026-109129-authorization-bypass-through-user-controlled-key-in-the-order-manager-component-in-apache-ofbiz-24-09-07-on-all-platforms-allows-an-authenticated-user-with-only2026-11-05 https://bugrater.com/releases/cve-2026-109837-authorization-bypass-through-user-controlled-key-in-order-returns-in-apache-ofbiz-24-09-before-24-09-08-on-all-platforms-allows-an-authenticated-user-with-low-p2026-11-05 https://bugrater.com/releases/cve-2026-109856-direct-request-forced-browsing-to-financial-account-services-in-apache-ofbiz-24-09-before-24-09-08-on-all-platforms-allows-an-authenticated-user-with-any-va2026-11-05 https://bugrater.com/releases/cve-2026-109928-incorrect-implementation-of-authentication-algorithm-in-the-password-reset-and-login-jwt-validation-in-apache-ofbiz-24-09-before-24-09-08-on-all-platforms-allow2026-11-05 https://bugrater.com/releases/cve-2026-114229-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-in-the-catalog-image-viewer-in-apache-ofbiz-24-09-before-24-09-08-on-all-pl2026-11-05 https://bugrater.com/releases/cve-2026-114233-incorrect-privilege-assignment-in-the-order-manager-in-apache-ofbiz-24-09-before-24-09-08-on-all-platforms-allows-an-authenticated-user-who-holds-only-order-vie2026-11-05 https://bugrater.com/releases/cve-2026-114235-direct-request-forced-browsing-in-the-order-component-in-apache-ofbiz-24-09-before-24-09-08-on-all-platforms-allows-an-authenticated-user-with-only-view-acc2026-11-05 https://bugrater.com/releases/cve-2026-114271-authorization-bypass-through-user-controlled-key-in-the-shopping-list-services-in-apache-ofbiz-24-09-before-24-09-08-on-all-platforms-allows-an-authenticated-lo2026-11-05 https://bugrater.com/releases/cve-2026-114272-authorization-bypass-through-user-controlled-key-in-the-content-viewing-component-in-apache-ofbiz-24-09-before-24-09-08-on-all-platforms-allows-an-authenticated2026-11-05 https://bugrater.com/releases/cve-2026-114277-authentication-bypass-by-assumed-immutable-data-vulnerability-in-apache-ofbiz-apache-ofbiz-s-optional-janrain-engage-social-login-integration-in-the-ecommerce2026-11-05 https://bugrater.com/releases/cve-2026-117691-a-flaw-was-found-in-the-saml-http-redirect-binding-implementation-of-keycloak-the-issue-occurs-because-the-server-processes-percent-encoded-parameter-names-li2026-11-05 https://bugrater.com/releases/cve-2026-123022-a-vulnerability-was-detected-in-agentscope-ai-agentscope-up-to-2-0-11-the-impacted-element-is-the-function-subprocess-popen-of-the-file-src-agentscope-mcp-con2026-11-05 https://bugrater.com/releases/cve-2026-123023-a-flaw-has-been-found-in-agentscope-ai-agentscope-up-to-2-0-8-this-affects-the-function-check-permissions-of-the-file-src-agentscope-tool-builtin-bash-py-of2026-11-05 https://bugrater.com/releases/cve-2026-123024-a-vulnerability-has-been-found-in-agentscope-ai-agentscope-up-to-2-0-11-this-impacts-the-function-get-current-user-id-of-the-file-src-agentscope-app-deps-py-of2026-11-05 https://bugrater.com/releases/cve-2026-123028-a-vulnerability-was-identified-in-itsourcecode-online-book-store-1-0-affected-by-this-issue-is-some-unknown-functionality-of-the-file-admin-edit-php-the-mani2026-11-05 https://bugrater.com/releases/cve-2026-123059-in-eclipse-basyx-helm-charts-version-2-2-0-of-the-aas-basyx-v2-full-chart-deployments-with-the-bundled-keycloak-enabled-store-the-client-secret-of-the-basyx2026-11-05 https://bugrater.com/releases/cve-2026-76563-improper-neutralization-of-script-related-html-tags-in-a-web-page-basic-xss-vulnerability-in-fileorbis-informatics-services-trade-inc-fileorbis-allows-using2026-11-05 https://bugrater.com/releases/cve-2026-82902-server-side-request-forgery-in-viewdatafile-in-apache-ofbiz-24-09-before-24-09-08-on-all-platforms-allows-a-remote-authenticated-attacker-holding-only-the-base2026-11-05 https://bugrater.com/releases/cve-2026-82904-uncontrolled-resource-consumption-in-servicemultieventhandler-in-apache-ofbiz-24-09-before-24-09-08-on-all-platforms-allows-a-remote-unauthenticated-attacker-to2026-11-05 https://bugrater.com/releases/cve-2026-82907-authentication-bypass-by-capture-replay-in-externalloginkeysmanager-in-apache-ofbiz-24-09-before-24-09-08-on-all-platforms-allows-a-remote-unauthenticated-attac2026-11-05 https://bugrater.com/releases/cve-2026-82910-improper-neutralization-of-special-elements-used-in-a-template-engine-server-side-template-injection-in-macroscreenrenderer-in-apache-ofbiz-24-09-before-242026-11-05 https://bugrater.com/releases/cve-2026-82912-improper-neutralization-of-special-elements-used-in-an-expression-language-statement-expression-language-injection-in-emailservices-in-apache-ofbiz-24-09-be2026-11-05 https://bugrater.com/releases/cve-2026-82916-missing-authorization-in-xmldsdump-in-apache-ofbiz-24-09-before-24-09-08-on-all-platforms-allows-a-remote-authenticated-attacker-holding-only-the-webtools-base2026-11-05 https://bugrater.com/releases/cve-2026-82960-improper-control-of-generation-of-code-code-injection-in-modelformfield-in-the-apache-ofbiz-cms-plugin-before-24-09-08-on-all-platforms-allows-a-remote-auth2026-11-05 https://bugrater.com/releases/cve-2026-83538-missing-authorization-in-apache-ofbiz-24-09-before-24-09-08-on-all-platforms-allows-a-remote-unauthenticated-attacker-to-disclose-internal-business-records-in2026-11-05 https://bugrater.com/releases/cve-2026-83542-improper-control-of-generation-of-code-code-injection-in-apache-ofbiz-24-09-before-24-09-08-on-all-platforms-allows-a-remote-unauthenticated-attacker-to-exe2026-11-05 https://bugrater.com/releases/cve-2026-84183-incorrect-authorization-in-the-updatelayout-simple-method-in-applications-content-minilang-layout-layoutevents-xml-in-apache-ofbiz-24-09-before-24-09-08-on-all2026-11-05 https://bugrater.com/releases/cve-2026-84728-incorrect-authorization-in-apache-ofbiz-24-09-before-24-09-08-on-all-platforms-when-documented-multitenancy-is-enabled-allows-a-remote-authenticated-attacke2026-11-05 https://bugrater.com/releases/cve-2026-85627-improper-neutralization-of-special-elements-used-in-a-template-engine-server-side-template-injection-in-apache-ofbiz-24-09-before-24-09-08-on-all-platforms2026-11-05 https://bugrater.com/releases/cve-2026-92887-incorrect-default-value-in-the-rest-api-framework-s-rest-xml-definition-parser-modelapireader-in-apache-ofbiz-through-24-09-07-on-all-platforms-allows-a-remo2026-11-05 https://bugrater.com/releases/cve-2026-97355-use-of-hard-coded-password-vulnerability-in-the-adminserver-component-in-apache-ofbiz-24-09-07-on-all-platforms-allows-an-attacker-able-to-reach-the-adminserver2026-11-05 https://bugrater.com/releases/cve-2026-97356-external-control-of-file-name-or-path-vulnerability-in-the-viewfile-component-of-label-manager-in-apache-ofbiz-24-09-07-on-all-platforms-allows-an-authenticated2026-11-05 https://bugrater.com/releases/cve-2026-119744-cendio-thinlinc-contains-an-improper-authentication-vulnerability-in-its-browser-based-web-client-tlwebaccess-that-allows-an-authenticated-attacker-to-imperso2026-11-05 https://bugrater.com/releases/cve-2026-123032-a-security-flaw-has-been-discovered-in-openbmb-internet-of-agents-up-to-9d78e88e47160eb42ee1ee8538c05e1c2c47877a-this-affects-the-function-connectionmanager-co2026-11-05 https://bugrater.com/releases/cve-2026-66903-authenticated-path-traversal-in-catalog-image-management-allows-writing-image-files-outside-the-intended-directory-in-apache-ofbiz-this-issue-affects-apache2026-11-05 https://bugrater.com/releases/cve-2026-68524-an-unauthenticated-attacker-can-exploit-temporary-file-handling-access-an-open-file-descriptor-and-inject-a-file-uri-to-cause-ofbiz-to-load-an-attacker-con2026-11-05 https://bugrater.com/releases/cve-2026-71901-improper-control-of-resource-identifiers-resource-injection-vulnerability-in-apache-ofbiz-an-authenticate-user-with-access-to-sfa-component-can-override2026-11-05 https://bugrater.com/releases/cve-2026-73577-incorrect-authorization-in-requesthandler-in-apache-ofbiz-24-09-before-24-09-08-on-all-platforms-allows-a-remote-unauthenticated-attacker-to-bypass-the-authenti2026-11-05 https://bugrater.com/releases/cve-2026-73578-missing-authorization-enforcement-in-requesthandler-renderview-in-apache-ofbiz-24-09-before-24-09-08-on-all-platforms-allows-a-remote-unauthenticated-attacker-t2026-11-05 https://bugrater.com/releases/cve-2026-73580-missing-authorization-check-in-the-gethrchild-service-in-apache-ofbiz-through-24-09-07-on-all-platforms-allows-a-remote-unauthenticated-attacker-to-recursively2026-11-05 https://bugrater.com/releases/cve-2026-74841-in-multitenant-deployments-contextfilter-and-loginworker-built-a-per-tenant-delegator-name-from-a-request-supplied-usertenantid-parameter-and-requested-a-deleg2026-11-05 https://bugrater.com/releases/cve-2026-76150-path-traversal-and-missing-authorization-check-in-the-replaceimagetoexistimage-service-in-apache-ofbiz-through-24-09-07-on-all-platforms-allows-a-remote-authent2026-11-05 https://bugrater.com/releases/cve-2026-76152-path-traversal-and-missing-authorization-check-in-the-imagecrop-and-imagerotate-services-in-apache-ofbiz-through-24-09-07-on-all-platforms-allows-a-remote-authe2026-11-05 https://bugrater.com/releases/cve-2026-81734-missing-authorization-in-productevents-in-apache-ofbiz-24-09-before-24-09-08-on-all-platforms-allows-a-remote-authenticated-attacker-holding-only-catalog-view-p2026-11-05 https://bugrater.com/releases/cve-2026-81744-incorrect-authorization-in-contentpermissionservices-in-apache-ofbiz-24-09-before-24-09-08-on-all-platforms-allows-a-remote-authenticated-attacker-holding-only2026-11-05 https://bugrater.com/releases/cve-2026-81808-missing-authorization-in-productsearchevents-in-apache-ofbiz-24-09-before-24-09-08-on-all-platforms-allows-a-remote-authenticated-attacker-holding-only-catalog2026-11-05 https://bugrater.com/releases/cve-2026-81815-sql-injection-in-the-entity-engine-s-generic-performfind-service-in-apache-ofbiz-24-09-before-24-09-08-on-mysql-mariadb-backed-deployments-allows-a-remote-unaut2026-11-05 https://bugrater.com/releases/cve-2026-81816-xml-external-entity-xxe-injection-in-contentworker-in-apache-ofbiz-24-09-before-24-09-08-on-all-platforms-allows-a-remote-authenticated-attacker-holding-conte2026-11-05 https://bugrater.com/releases/cve-2026-81828-server-side-request-forgery-in-surveywrapper-in-apache-ofbiz-24-09-before-24-09-08-on-all-platforms-allows-an-authenticated-back-office-user-holding-catalog-per2026-11-05 https://bugrater.com/releases/cve-2026-82894-improper-authorization-in-contentworker-in-apache-ofbiz-24-09-before-24-09-08-on-all-platforms-allows-a-remote-unauthenticated-attacker-to-trigger-arbitrary-ofb2026-11-05 https://bugrater.com/releases/cve-2026-102523-mariadb-server-is-a-community-developed-fork-of-mysql-server-from-10-11-1-until-10-11-19-11-4-13-11-8-9-12-3-3-and-13-0-2-alter-table-convert-part2026-11-05 https://bugrater.com/releases/cve-2026-119751-content-egg-plugin-for-wordpress-before-12-1-0-contains-a-broken-access-control-vulnerability-that-allows-unauthenticated-attackers-to-retrieve-content-egg-prod2026-11-05 https://bugrater.com/releases/cve-2026-121139-the-rapid7-metasploit-msf-ws-suffers-from-a-missing-authentication-vulnerability-whereby-the-rest-api-grants-an-unauthenticated-bootstrap-exemption-so-that-th2026-11-05 https://bugrater.com/releases/cve-2026-122317-splitpro-through-2-1-6-contains-an-authorization-bypass-vulnerability-that-allows-authenticated-users-to-retrieve-any-account-s-details-by-supplying-arbitrary-u2026-11-05 https://bugrater.com/releases/cve-2026-122324-splitpro-through-2-1-6-contains-an-authorization-bypass-vulnerability-that-allows-authenticated-users-to-read-other-users-expenses-by-supplying-arbitrary-expen2026-11-05 https://bugrater.com/releases/cve-2026-122325-fossasia-eventyay-exhibition-through-commit-f68888e-contains-an-authorization-bypass-vulnerability-in-the-exhibitor-lead-creation-api-that-allows-exhibitors-to2026-11-05 https://bugrater.com/releases/cve-2026-122326-chevereto-before-4-5-8-contains-an-authorization-bypass-vulnerability-in-the-get-album-contents-action-of-the-json-route-that-allows-unauthenticated-attackers2026-11-05 https://bugrater.com/releases/cve-2026-122327-meelo-through-3-13-1-contains-a-missing-authorization-vulnerability-that-allows-authenticated-non-admin-users-to-modify-shared-catalog-data-because-rolesguard-d2026-11-05 https://bugrater.com/releases/cve-2026-122328-sdl-mixer-3-1-2-through-3-2-4-contains-a-stack-based-buffer-overflow-vulnerability-in-fetchxlaw-of-src-decoder-wav-c-when-decoding-a-law-or-mu-law-wav-files2026-11-05 https://bugrater.com/releases/cve-2026-122329-sdl-mixer-3-1-2-through-3-2-4-contains-a-stack-based-buffer-overflow-in-fetchxlaw-in-src-decoder-aiff-c-due-to-miscalculated-output-offsets-when-expanding-a-l2026-11-05 https://bugrater.com/releases/cve-2026-122330-blosc-c-blosc2-before-3-5-0-contains-a-divide-by-zero-vulnerability-in-blosc2-schunk-get-slice-buffer-in-blosc-schunk-c-that-allows-attackers-to-crash-applica2026-11-05 https://bugrater.com/releases/cve-2026-123094-huginn-before-2026-11-05-contains-a-stored-cross-site-scripting-vulnerability-in-the-service-label-helper-that-marks-unescaped-oauth-service-display-names-as-ht2026-11-05 https://bugrater.com/releases/cve-2026-123095-mpv-0-29-0-before-0-42-0-contains-a-playlist-injection-vulnerability-in-the-bundled-ytdl-hook-script-that-allows-remote-attackers-to-add-unchecked-entries-by-em2026-11-05 https://bugrater.com/releases/cve-2026-123096-anacrolix-torrent-through-1-61-0-contains-a-memory-exhaustion-vulnerability-in-the-tracker-http-package-that-allows-malicious-trackers-to-crash-clients-by-retur2026-11-05 https://bugrater.com/releases/cve-2026-123125-the-symfony-validator-component-ipvalidator-incompletely-classifies-internal-addresses-in-the-filtered-modes-of-the-ip-constraint-so-some-internal-addresses-ar2026-11-05 https://bugrater.com/releases/cve-2026-107123-a-flaw-was-found-in-the-saml-xml-processing-component-of-keycloak-an-open-source-identity-and-access-management-solution-the-issue-occurs-when-the-server-pars2026-11-05 https://bugrater.com/releases/cve-2026-107602-a-flaw-was-found-in-the-saml-1-1-xml-parsing-logic-of-keycloak-an-open-source-identity-and-access-management-solution-the-issue-occurs-when-the-parser-encount2026-11-05 https://bugrater.com/releases/cve-2026-110931-a-flaw-was-found-in-the-saml-1-1-assertion-parser-of-keycloak-a-tool-used-for-identity-and-access-management-the-issue-occurs-when-the-parser-handles-a-specif2026-11-05 https://bugrater.com/releases/cve-2026-110932-a-flaw-was-found-in-the-theme-resource-endpoint-of-keycloak-an-open-source-identity-and-access-management-solution-the-issue-occurs-because-the-server-fails-t2026-11-05 https://bugrater.com/releases/cve-2026-111253-a-flaw-was-found-in-dnf5daemon-server-session-methods-on-dynamically-exported-d-bus-session-objects-do-not-verify-that-the-caller-is-the-unique-sender-that-cre2026-11-05 https://bugrater.com/releases/cve-2026-112208-a-flaw-was-found-in-the-organization-identity-first-login-flow-of-the-keycloak-authentication-server-keycloak-is-an-open-source-identity-and-access-management2026-11-05 https://bugrater.com/releases/cve-2026-114232-a-flaw-was-found-in-the-usermanagedpermissionservice-of-the-keycloak-authorization-server-the-uma-protection-api-which-manages-user-permissions-fails-to-vali2026-11-05 https://bugrater.com/releases/cve-2026-118517-the-symfony-htmlsanitizer-component-urlsanitizer-parses-urls-differently-from-browsers-allowing-the-allowlinkhosts-and-allowmediahosts-checks-to-be-bypasse2026-11-05 https://bugrater.com/releases/cve-2026-120499-h5io-before-0-2-6-contains-a-code-injection-vulnerability-in-read-hdf5-that-allows-attackers-to-execute-arbitrary-code-by-supplying-a-crafted-hdf5-file-attac2026-11-05 https://bugrater.com/releases/cve-2026-121994-a-stack-buffer-overflow-in-the-gdb-client-s-remote-protocol-handler-allows-an-attacker-controlled-debug-target-to-execute-arbitrary-code-in-the-gdb-process-the2026-11-05 https://bugrater.com/releases/cve-2026-121995-a-stack-buffer-overflow-in-the-gdb-client-s-tracepoint-upload-handler-allows-an-attacker-controlled-debug-stub-to-corrupt-stack-memory-automatically-during-conn2026-11-05 https://bugrater.com/releases/cve-2026-121996-a-length-validation-flaw-in-gdbserver-s-agent-expression-parser-allows-an-unauthenticated-remote-attacker-to-read-uninitialized-heap-memory-from-the-gdbserver-p2026-11-05 https://bugrater.com/releases/cve-2026-121997-a-heap-buffer-overflow-in-gdbserver-s-qtdpsrc-packet-handler-allows-an-unauthenticated-remote-attacker-to-achieve-native-code-execution-in-the-gdbserver-process2026-11-05 https://bugrater.com/releases/cve-2026-123151-a-flaw-was-found-in-the-gnu-debugger-gdb-when-gdb-connects-to-a-remote-debug-target-a-malicious-target-can-cause-gdb-to-overflow-a-buffer-on-the-stack-while2026-11-05 https://bugrater.com/releases/cve-2026-112109-a-local-privilege-escalation-vulnerability-in-thales-safenet-authentication-client-sac-sacsrv-can-allow-an-authenticated-non-administrator-local-user-to-trig2026-11-05 https://bugrater.com/releases/cve-2026-112110-a-time-of-check-to-time-of-use-race-condition-in-the-safenet-authentication-client-sac-sacsrv-log-cleanup-function-can-allow-an-authenticated-non-administrat2026-11-05 https://bugrater.com/releases/cve-2026-120859-pymodaq-before-4-4-13-and-pymodaq-data-pymodaq-gui-and-pymodaq-utils-before-5-1-15-5-2-x-before-5-2-14-and-5-3-x-before-5-3-10-contain-deserialization-of2026-11-05 https://bugrater.com/releases/cve-2026-121949-the-symfony-htmlsanitizer-component-does-not-apply-the-media-url-policy-to-the-srcset-and-imagesrcset-attributes-allowing-values-that-point-to-hosts-or-schemes2026-11-05 https://bugrater.com/releases/cve-2026-123184-an-incorrect-authorization-vulnerability-exists-in-the-altium-365-git-service-the-permission-check-performed-when-a-user-pushes-to-a-project-repository-did-not2026-11-05 https://bugrater.com/releases/cve-2026-92855-a-flaw-was-found-in-the-saml-identity-broker-component-of-keycloak-which-is-used-to-delegate-authentication-to-external-identity-providers-the-issue-occurs-be2026-11-05 https://bugrater.com/releases/cve-2026-92857-keycloak-provides-a-dynamic-client-registration-feature-that-allows-users-with-specific-tokens-to-register-their-own-applications-a-flaw-in-how-keycloak-valida2026-11-05 https://bugrater.com/releases/cve-2026-93998-a-flaw-was-found-in-the-saml-adapter-component-of-keycloak-which-is-used-to-secure-applications-with-saml-based-authentication-the-adapter-fails-to-verify-tha2026-11-05 https://bugrater.com/releases/cve-2026-96453-a-flaw-was-found-in-the-keycloak-admin-cli-kcadm-tool-which-is-used-by-administrators-to-manage-keycloak-servers-from-the-command-line-when-a-custom-truststor2026-11-05 https://bugrater.com/releases/cve-2026-97174-a-flaw-was-found-in-the-client-initiated-backchannel-authentication-ciba-implementation-of-keycloak-the-ciba-endpoint-fails-to-properly-validate-the-sub-para2026-11-05 https://bugrater.com/releases/cve-2026-97175-a-flaw-was-found-in-the-idp-auto-link-authenticator-of-the-keycloak-services-component-which-handles-user-identity-federation-the-issue-occurs-when-keycloak-a2026-11-05 https://bugrater.com/releases/cve-2026-115451-joomla-extension-tassos-gr-file-deletion-through-improper-access-control-in-advanced-custom-fields-extension-2-8-13-2-8-15-3-1-4-3-1-8-and-smile-pack-1-2-72026-11-05 https://bugrater.com/releases/cve-2026-116472-a-security-issue-was-discovered-in-ingress-nginx-where-a-user-with-permission-to-create-an-ingress-may-be-able-to-cause-denial-of-service-of-the-ingress-nginx-d2026-11-05 https://bugrater.com/releases/cve-2026-123135-a-vulnerability-was-found-in-langgenius-dify-up-to-1-18-0-2-0-0-beta-2-affected-by-this-vulnerability-is-an-unknown-functionality-of-the-file-api-configs-featu2026-11-05 https://bugrater.com/releases/cve-2026-123196-authorizer-before-2-4-2-contains-a-password-reset-poisoning-vulnerability-that-allows-unauthenticated-attackers-to-control-emailed-link-hosts-by-supplying-x-aut2026-11-05 https://bugrater.com/releases/cve-2026-123197-wppconnect-server-through-2-10-76-contains-a-missing-authentication-vulnerability-that-allows-unauthenticated-attackers-to-read-decrypted-sticker-media-through2026-11-05 https://bugrater.com/releases/cve-2026-123198-lmfdb-before-commit-01829bd-contains-a-server-side-template-injection-vulnerability-in-the-render-knowl-function-that-allows-unauthenticated-attackers-to-inject2026-11-05 https://bugrater.com/releases/cve-2026-123199-ebook-speaker-6-1-0-through-6-2-0-contains-a-stack-buffer-overflow-vulnerability-in-get-attributes-in-src-common-c-caused-by-an-unbounded-strcpy-of-an-element2026-11-05 https://bugrater.com/releases/cve-2026-123200-vrpn-through-07-36-contains-an-out-of-bounds-stack-write-vulnerability-in-vrpn-endpoint-handle-sender-message-and-handle-type-message-that-allows-unauthent2026-11-05 https://bugrater.com/releases/cve-2026-123201-buku-bukuserver-through-5-1-1-contains-an-unauthenticated-server-side-request-forgery-vulnerability-that-allows-remote-attackers-to-make-the-server-request-in2026-11-05 https://bugrater.com/releases/cve-2026-123202-libnxml-before-0-18-6-contains-a-stack-based-buffer-overflow-vulnerability-in-src-nxml-parser-c-that-allows-remote-attackers-to-write-past-a-1024-byte-stack-buf2026-11-05 https://bugrater.com/releases/cve-2026-123203-neuron-coreneuron-through-9-0-2-contains-a-stack-buffer-overflow-vulnerability-that-allows-attackers-to-corrupt-stack-memory-by-supplying-over-long-tokens-in2026-11-05 https://bugrater.com/releases/cve-2026-123204-posta-before-v0-18-0-contains-a-server-side-request-forgery-vulnerability-that-allows-authenticated-users-with-edit-rights-to-make-the-backend-send-post-request2026-11-05 https://bugrater.com/releases/cve-2026-123205-accel-ppp-before-1-15-0-contains-a-heap-buffer-overflow-vulnerability-in-the-tcp-syslog-and-pgsql-log-targets-that-allows-unauthenticated-remote-peers-to-overf2026-11-05 https://bugrater.com/releases/cve-2026-123206-edgechat-before-2-20-3-contains-a-missing-authentication-vulnerability-in-the-get-files-key-route-that-allows-unauthenticated-or-banned-users-to-download-decr2026-11-05 https://bugrater.com/releases/cve-2026-123207-libretv-before-v2-21-2-contains-a-server-side-request-forgery-vulnerability-that-allows-authenticated-users-to-bypass-checkupstreamallowed-by-exploiting-unpin2026-11-05 https://bugrater.com/releases/cve-2026-123208-noname-electron-desktop-build-v1-11-2-through-v1-11-6-1-contains-an-unauthenticated-local-file-server-with-wildcard-cors-that-allows-malicious-websites-to-read2026-11-05 https://bugrater.com/releases/cve-2026-123271-chatcli-before-v1-215-2-contains-an-improper-validation-vulnerability-in-the-mcp-oauth-login-flow-that-uses-server-supplied-protected-resource-metadata-as-the-r2026-11-05 https://bugrater.com/releases/cve-2026-123272-mark3labs-mcp-go-before-v1-2-1-contains-an-improper-validation-vulnerability-in-oauthhandler-fetchservermetadata-that-allows-malicious-mcp-servers-to-obtain-tok2026-11-05 https://bugrater.com/releases/cve-2026-123273-imagemagick-before-7-1-2-35-and-6-9-13-60-contains-an-infinite-loop-vulnerability-in-the-svg-decoder-because-queueauthenticpixelcachenexus-in-magickcore-cache-c2026-11-05 https://bugrater.com/releases/cve-2026-94395-a-stack-based-buffer-overflow-in-thales-safenet-authentication-client-sac-sis-token-engine-processing-can-be-triggered-by-a-malicious-physical-or-software-emu2026-11-05 https://bugrater.com/releases/cve-2026-110930-codex-desktop-for-windows-does-not-correctly-check-quotation-marks-in-project-paths-from-windows-explorer-if-a-user-selects-open-project-in-chatgpt-for-an-at2026-11-05 https://bugrater.com/releases/cve-2026-1339-an-open-redirect-vulnerability-has-been-identified-in-opentext-universal-discovery-and-cmdb-the-vulnerability-can-be-exploited-only-if-an-attacker-sends-a-spe2026-11-05 https://bugrater.com/releases/cve-2026-76181-libreoffice-includes-a-dbase-database-driver-which-reads-dbase-tables-and-their-ndx-index-files-when-a-folder-of-dbase-files-is-used-as-a-data-source-a-heap2026-11-05 https://bugrater.com/releases/cve-2026-119434-improper-handling-of-highly-compressed-data-data-amplification-vulnerability-in-silviucpp-ezstd-allows-an-attacker-who-supplies-a-zstd-frame-to-ezstd-decompre2026-11-05 https://bugrater.com/releases/cve-2026-111489-a-static-credential-embedded-in-the-mobile-app-has-been-reported-to-return-the-autorizado-token-on-the-matchpoint-platform-the-report-states-that-this-token2026-11-05 https://bugrater.com/releases/cve-2026-111490-insecure-direct-object-reference-idor-vulnerability-in-the-matchpoint-api-which-relies-on-the-actingasuser-http-header-without-verifying-the-requester-s-au2026-11-05 https://bugrater.com/releases/cve-2026-111491-credentials-are-stored-in-plain-text-in-an-sqlite-database-and-in-the-matchpoint-android-app-s-sharedpreferences-an-attacker-with-access-to-the-device-s-local2026-11-05 https://bugrater.com/releases/cve-2026-111492-sql-injection-in-the-push-notification-handler-of-the-matchpoint-android-app-which-processes-messages-from-firebase-cloud-messaging-and-constructs-queries-by-c2026-11-05 https://bugrater.com/releases/cve-2026-111493-lack-of-authentication-and-authorization-in-the-images-ashx-endpoint-in-matchpoint-which-allows-profile-photos-to-be-downloaded-using-predictable-identifiers2026-11-05 https://bugrater.com/releases/cve-2026-111494-incorrect-validation-of-tls-certificates-in-the-matchpoint-android-app-due-to-a-trustmanager-that-accepts-any-certificate-and-a-permissive-hostname-validator-a2026-11-05 https://bugrater.com/releases/cve-2026-111495-api-keys-credentials-and-configuration-parameters-embedded-in-the-matchpoint-apk-which-can-be-extracted-through-reverse-engineering-the-vendor-distinguishes2026-11-05 https://bugrater.com/releases/cve-2026-119757-btcpay-server-before-2-4-2-including-2-4-2-release-candidates-contains-an-information-disclosure-vulnerability-that-allows-unauthenticated-remote-attackers-to2026-11-05 https://bugrater.com/releases/cve-2026-122267-minio-signature-v4-verification-before-release-2026-09-22t19-25-18z-accepts-unsigned-x-amz-headers-letting-a-presigned-put-url-be-escalated-into-a-cross-buck2026-11-05 https://bugrater.com/releases/password-separate-form-moderately-critical-access-bypass-sa-contrib-2026-3072026-11-06 https://bugrater.com/releases/scheduler-moderately-critical-access-bypass-sa-contrib-2026-3062026-11-06 https://bugrater.com/releases/reset-password-email-sms-otp-critical-access-bypass-sa-contrib-2026-3052026-11-06 https://bugrater.com/releases/name-field-moderately-critical-cross-site-scripting-sa-contrib-2026-3042026-11-06 https://bugrater.com/releases/forum-access-moderately-critical-access-bypass-sa-contrib-2026-3032026-11-06 https://bugrater.com/releases/commerce-escrow-moderately-critical-access-bypass-sa-contrib-2026-3022026-11-06 https://bugrater.com/releases/commerce-product-alternative-critical-access-bypass-sa-contrib-2026-3012026-11-06 https://bugrater.com/releases/alternativecommerce-paypal-checkout-moderately-critical-access-bypass-sa-contrib-2026-3002026-11-06 https://bugrater.com/releases/security-vulnerabilities-fixed-in-firefox-1562026-11-06 https://bugrater.com/releases/security-vulnerabilities-fixed-in-firefox-for-ios-155-12026-11-06 https://bugrater.com/releases/security-vulnerabilities-fixed-in-thunderbird-153-22026-11-06 https://bugrater.com/releases/cve-2025-71458-fts3-web-monitoring-fts-monitoring-versions-3-12-0-through-3-13-2-and-3-14-0-contain-an-unauthenticated-sql-injection-vulnerability-in-the-linkinfo-endpoint2026-11-06 https://bugrater.com/releases/cve-2026-123268-a-security-vulnerability-has-been-detected-in-libyal-libvmdk-up-to-3fdd7839758e9f44ef95e1dfccde8552b860a4fc-affected-is-the-function-libvmdk-extent-table-get-e2026-11-06 https://bugrater.com/releases/cve-2026-123269-a-vulnerability-was-detected-in-libyal-libvmdk-affected-by-this-vulnerability-is-the-function-libvmdk-descriptor-file-read-header-of-the-file-libvmdk-libvmdk-d2026-11-06 https://bugrater.com/releases/cve-2026-63017-incorrect-authorization-in-powersystem-center-allows-a-low-privileged-authenticated-user-to-access-resources-normally-limited-to-administrators2026-11-06 https://bugrater.com/releases/cve-2026-63774-insufficient-input-validation-in-the-powersystem-center-report-designer-allows-an-authenticated-user-to-execute-unauthorized-sql-commands2026-11-06 https://bugrater.com/releases/cve-2026-89142-in-the-wi-fi-npu-fw-there-is-a-possible-out-of-bounds-write-due-to-an-incorrect-bounds-check-this-could-lead-to-local-denial-of-service-with-user-execution-pr2026-11-06 https://bugrater.com/releases/cve-2026-119431-a-server-side-request-forgery-ssrf-vulnerability-exists-in-foxit-workspace-s-file-upload-functionality-insufficient-validation-of-user-supplied-links-may-all2026-11-06 https://bugrater.com/releases/cve-2026-119432-a-stored-cross-site-scripting-xss-vulnerability-exists-in-the-foxit-workspace-s-file-share-preview-functionality-an-attacker-could-upload-a-crafted-file-and2026-11-06 https://bugrater.com/releases/cve-2026-119433-a-server-side-request-forgery-ssrf-vulnerability-exists-in-an-undocumented-api-endpoint-of-foxit-workspace-due-to-insufficient-validation-of-user-supplied-url2026-11-06 https://bugrater.com/releases/cve-2026-107124-a-flaw-was-found-in-the-oidc-logout-endpoint-of-the-keycloak-services-component-which-handles-user-session-termination-in-red-hat-build-of-keycloak-the-issue2026-11-06 https://bugrater.com/releases/cve-2026-110525-the-mcb-wordpress-plugin-through-1-0-0-does-not-sanitise-or-escape-request-header-values-before-storing-them-and-later-rendering-them-in-the-administrator-stat2026-11-06 https://bugrater.com/releases/cve-2026-110532-the-mail-mage-wordpress-plugin-through-0-0-25-does-not-properly-sanitise-and-escape-a-user-supplied-value-before-using-it-in-a-sql-statement-allowing-unauthent2026-11-06 https://bugrater.com/releases/cve-2026-110813-the-advanced-custom-fields-acf-wordpress-plugin-before-6-8-11-does-not-properly-sanitize-a-stored-field-definition-that-can-be-modified-through-its-comment-h2026-11-06 https://bugrater.com/releases/cve-2026-110955-the-wurdey-wordpress-plugin-through-1-0-0-does-not-verify-a-request-signature-before-logging-a-user-in-allowing-unauthenticated-attackers-to-authenticate-as-an2026-11-06 https://bugrater.com/releases/cve-2026-113584-the-placester-wordpress-plugin-through-1-4-3-does-not-perform-any-capability-nonce-or-ownership-check-on-an-ajax-action-that-updates-account-details-allowing2026-11-06 https://bugrater.com/releases/cve-2026-113615-the-gs-jwt-authentication-for-wp-rest-api-wordpress-plugin-through-1-0-0-does-not-sanitize-or-parameterize-a-request-value-before-using-it-in-sql-queries-on-sev2026-11-06 https://bugrater.com/releases/cve-2026-114427-the-gutenkit-wordpress-plugin-before-2-5-5-does-not-properly-sanitize-custom-css-saved-against-a-post-before-printing-it-inside-an-inline-style-block-on-the-pu2026-11-06 https://bugrater.com/releases/cve-2026-115230-the-whizz-wordpress-plugin-through-1-1-8-does-not-validate-the-password-reset-key-before-updating-a-user-s-password-relying-only-on-a-nonce-that-is-exposed-to2026-11-06 https://bugrater.com/releases/cve-2026-115673-the-anti-spam-spam-firewall-by-cleantalk-wordpress-plugin-before-6-91-does-not-escape-a-commenter-supplied-value-before-outputting-it-on-an-administrative-spam2026-11-06 https://bugrater.com/releases/cve-2026-116533-the-static-snapshot-wordpress-plugin-through-0-2-1-does-not-sanitise-shell-metacharacters-in-a-user-supplied-value-before-concatenating-it-into-operating-system2026-11-06 https://bugrater.com/releases/cve-2026-118045-the-ever-accounting-wordpress-plugin-before-2-3-3-does-not-restrict-the-file-path-supplied-to-its-csv-import-routine-to-an-allowed-directory-allowing-users-wi2026-11-06 https://bugrater.com/releases/cve-2026-118167-the-mc4wp-mailchimp-for-wordpress-plugin-before-4-15-0-does-not-validate-that-the-mailchimp-audience-a-sign-up-form-or-bundled-integration-subscribes-a-visitor2026-11-06 https://bugrater.com/releases/cve-2026-118186-the-publishpress-revisions-duplicate-posts-submit-approve-and-schedule-content-changes-wordpress-plugin-before-4-3-1-does-not-correctly-restrict-who-may-publ2026-11-06 https://bugrater.com/releases/cve-2026-118187-the-publishpress-revisions-duplicate-posts-submit-approve-and-schedule-content-changes-wordpress-plugin-before-4-3-1-does-not-verify-that-a-user-requesting-t2026-11-06 https://bugrater.com/releases/cve-2026-118188-the-publishpress-revisions-duplicate-posts-submit-approve-and-schedule-content-changes-wordpress-plugin-before-4-3-1-does-not-verify-that-a-user-is-permitted2026-11-06 https://bugrater.com/releases/cve-2026-118239-the-automatorwp-wordpress-plugin-before-6-0-7-does-not-check-that-the-user-completing-its-zoom-and-aweber-integration-connections-is-allowed-to-do-so-allowing2026-11-06 https://bugrater.com/releases/cve-2026-118639-the-surfer-wordpress-plugin-before-1-8-1-759-discloses-a-sensitive-api-credential-to-low-privileged-users-through-the-post-editor-page-and-relies-on-that-same2026-11-06 https://bugrater.com/releases/cve-2026-119259-the-all-in-one-video-gallery-wordpress-plugin-before-5-1-0-does-not-check-the-type-status-or-ownership-of-the-target-post-before-writing-its-view-count-and-du2026-11-06 https://bugrater.com/releases/cve-2026-120408-the-all-in-one-video-gallery-wordpress-plugin-before-5-1-0-does-not-escape-a-video-s-stored-thumbnail-url-before-outputting-it-in-the-admin-video-list-and-doe2026-11-06 https://bugrater.com/releases/cve-2026-121837-a-flaw-was-found-in-the-rest-data-panache-component-of-quarkus-when-a-security-constraint-is-applied-to-an-entity-property-using-the-securefield-annotation-on2026-11-06 https://bugrater.com/releases/cve-2026-12967-the-wcfm-membership-wordpress-plugin-before-2-12-1-does-not-verify-that-payment-was-made-before-completing-a-paid-membership-allowing-any-authenticated-subscr2026-11-06 https://bugrater.com/releases/cve-2026-19688-a-flaw-was-found-in-the-admin-rest-api-of-keycloak-an-identity-and-access-management-solution-the-admin-api-fails-to-verify-the-intended-audience-of-bearer-to2026-11-06 https://bugrater.com/releases/cve-2026-86606-the-iubenda-all-in-one-compliance-for-gdpr-ccpa-cookie-consent-more-wordpress-plugin-before-3-13-7-does-not-properly-escape-content-it-re-emits-through-it2026-11-06 https://bugrater.com/releases/cve-2026-87784-the-cool-media-filter-wordpress-plugin-through-1-0-1-does-not-perform-any-capability-or-nonce-check-when-updating-the-capabilities-of-a-role-allowing-any-authe2026-11-06 https://bugrater.com/releases/cve-2026-92396-the-shopengine-gutenberg-woocommerce-builder-blocks-addon-wordpress-plugin-before-2-4-4-does-not-validate-the-user-s-capabilities-or-the-ownership-of-the-targe2026-11-06 https://bugrater.com/releases/cve-2026-92856-a-flaw-was-found-in-the-saml-brokering-component-of-keycloak-an-identity-and-access-management-solution-the-issue-occurs-when-keycloak-acts-as-an-intermediary2026-11-06 https://bugrater.com/releases/cve-2026-96447-a-flaw-was-found-in-the-tokenmanager-component-of-keycloak-an-open-source-identity-and-access-management-solution-the-issue-occurs-during-the-validation-of-st2026-11-06 https://bugrater.com/releases/cve-2026-96460-a-flaw-was-found-in-the-token-exchange-mechanism-of-keycloak-when-using-standard-token-exchange-v2-the-system-issues-new-tokens-with-a-fresh-lifetime-based-on2026-11-06 https://bugrater.com/releases/cve-2026-97848-a-flaw-was-found-in-the-token-sanitization-logic-of-keycloak-an-open-source-identity-and-access-management-solution-the-issue-occurs-when-a-protocol-mapper-is2026-11-06 https://bugrater.com/releases/cve-2026-120749-a-flaw-was-found-in-d-bus-with-a-privileged-monitoring-client-attached-for-example-dbus-monitor-or-busctl-monitor-an-unprivileged-local-user-can-cause-dbus2026-11-06 https://bugrater.com/releases/cve-2026-73471-a-flaw-was-found-in-gstreamer-gst-plugins-good-avidemux-in-the-nikon-metadata-tag-parser-a-pointer-can-be-dereferenced-without-verifying-that-data-remains-i2026-11-06 https://bugrater.com/releases/cve-2026-73472-a-flaw-was-found-in-gstreamer-gst-plugins-good-avidemux-in-the-superindex-and-subindex-parsers-integer-overflow-can-bypass-bounds-checks-and-cause-out-of-bo2026-11-06 https://bugrater.com/releases/cve-2026-73473-a-flaw-was-found-in-gstreamer-gst-plugins-good-avidemux-in-the-subindex-parser-missing-validation-of-the-entry-count-can-cause-excessive-memory-allocation-a2026-11-06 https://bugrater.com/releases/cve-2026-9797-a-flaw-was-found-in-keycloak-s-administrative-services-org-keycloak-services-resources-admin-a-highly-privileged-attacker-authenticated-with-a-manage-clien2026-11-06 https://bugrater.com/releases/cve-2026-118166-the-mc4wp-mailchimp-for-wordpress-wordpress-plugin-before-4-15-0-does-not-prevent-request-derived-values-in-its-dynamic-content-tags-from-being-processed-as-sh2026-11-06 https://bugrater.com/releases/cve-2026-118423-the-wp-libre-form-wordpress-plugin-1-5-0-1-does-not-validate-the-type-of-files-uploaded-through-its-form-submissions-allowing-unauthenticated-attackers-to-uplo2026-11-06 https://bugrater.com/releases/cve-2026-119472-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-vulnerability-in-david-anderson-redux-framework-redux-framework-allows-stor2026-11-06 https://bugrater.com/releases/cve-2026-119488-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-vulnerability-in-shamim-rajani-pie-register-pie-register-allows-stored-xss2026-11-06 https://bugrater.com/releases/cve-2026-119499-insertion-of-sensitive-information-into-sent-data-vulnerability-in-bakkbone-australia-floristpress-bakkbone-florist-companion-allows-retrieve-embedded-sensitive2026-11-06 https://bugrater.com/releases/cve-2026-119516-deserialization-of-untrusted-data-vulnerability-in-mamunur-rashid-radius-booking-booking-calendar-for-appointments-amp-services-radius-booking-allows-object2026-11-06 https://bugrater.com/releases/cve-2026-120844-incorrect-privilege-assignment-vulnerability-in-miniorange-oauth-single-sign-on-sso-oauth-client-miniorange-login-with-eve-online-google-facebook-allows-pri2026-11-06 https://bugrater.com/releases/cve-2026-121633-the-order-tracking-wordpress-plugin-before-3-6-0-does-not-verify-that-a-paypal-payment-notification-was-sent-to-the-merchant-s-account-or-that-its-amount-match2026-11-06 https://bugrater.com/releases/cve-2026-121636-the-quick-event-manager-wordpress-plugin-before-9-19-does-not-verify-the-authenticity-of-paypal-payment-notifications-before-marking-event-registrations-as-paid2026-11-06 https://bugrater.com/releases/cve-2026-39744-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-vulnerability-in-wc-lovers-wcfm-membership-wc-multivendor-membership-allows2026-11-06 https://bugrater.com/releases/cve-2026-110291-the-graphina-charts-and-graphs-for-elementor-plugin-for-wordpress-is-vulnerable-to-stored-cross-site-scripting-via-the-iq-tree-chart-node-font-family-and-an2026-11-06 https://bugrater.com/releases/cve-2026-118189-the-posts-table-with-search-sort-plugin-for-wordpress-is-vulnerable-to-stored-cross-site-scripting-via-the-date-format-parameter-in-all-versions-up-to-and2026-11-06 https://bugrater.com/releases/cve-2026-120671-the-userswp-front-end-login-form-user-registration-user-profile-members-directory-plugin-for-wp-plugin-for-wordpress-is-vulnerable-to-stored-cross-site-sc2026-11-06 https://bugrater.com/releases/cve-2026-121794-the-travelly-tour-travel-booking-manager-for-woocommerce-plugin-for-wordpress-is-vulnerable-to-authorization-bypass-in-all-versions-up-to-and-including-22026-11-06 https://bugrater.com/releases/cve-2026-122222-the-permalink-manager-lite-plugin-for-wordpress-is-vulnerable-to-stored-cross-site-scripting-via-the-slug-parameter-in-all-versions-up-to-and-including-2-62026-11-06 https://bugrater.com/releases/cve-2026-123660-in-vulnerability-lookup-5-5-1-up-to-but-not-including-6-4-1-a-signed-in-user-could-make-the-server-allocate-memory-far-out-of-proportion-to-their-input-through2026-11-06 https://bugrater.com/releases/cve-2026-19876-a-reflected-cross-site-scripting-xss-vulnerability-in-the-login-sso-error-page-of-infinitt-ulite-5-0-2-1-bn48-20260528-and-earlier-allows-an-unauthenticated-r2026-11-06 https://bugrater.com/releases/cve-2026-19877-infinitt-ulite-5-0-2-1-bn48-20260528-and-earlier-protects-image-share-links-with-a-low-entropy-password-and-does-not-restrict-repeated-password-attempts-allowi2026-11-06 https://bugrater.com/releases/cve-2026-109977-the-yaysmtp-wp-mail-smtp-with-email-logs-tracking-reports-plugin-for-wordpress-is-vulnerable-to-time-based-sql-injection-via-the-params-searchkey-parame2026-11-06 https://bugrater.com/releases/cve-2026-109994-the-eventin-events-calendar-tickets-registration-booking-woocommerce-plugin-for-wordpress-is-vulnerable-to-sensitive-information-exposure-in-all-versions2026-11-06 https://bugrater.com/releases/cve-2026-110776-the-mdtf-meta-data-and-taxonomies-filter-plugin-for-wordpress-is-vulnerable-to-stored-cross-site-scripting-via-the-vars-parameter-in-all-versions-up-to-and2026-11-06 https://bugrater.com/releases/cve-2026-115831-the-vod-infomaniak-plugin-for-wordpress-is-vulnerable-to-authorization-bypass-in-all-versions-up-to-and-including-1-5-15-this-is-due-to-the-plugin-not-proper2026-11-06 https://bugrater.com/releases/cve-2026-116592-undici-is-an-http-client-for-node-js-in-versions-7-30-1-and-8-12-2-through-8-12-3-when-an-originless-agent-composes-the-redirect-and-shared-cache-interceptors2026-11-06 https://bugrater.com/releases/cve-2026-120222-undici-is-an-http-client-for-node-js-in-versions-7-0-0-through-7-30-1-and-8-0-0-through-8-12-3-when-the-cache-interceptor-is-composed-with-a-downstream-handle2026-11-06 https://bugrater.com/releases/cve-2026-120415-undici-is-an-http-client-for-node-js-in-versions-7-0-0-through-7-30-1-and-8-0-0-through-8-12-3-the-redirect-interceptor-strips-sensitive-headers-such-as-autho2026-11-06 https://bugrater.com/releases/cve-2026-120423-undici-is-an-http-client-for-node-js-in-versions-7-15-0-through-7-30-1-and-8-0-0-through-8-12-3-fetch-verifies-subresource-integrity-metadata-by-splitting-the2026-11-06 https://bugrater.com/releases/cve-2026-120474-undici-is-an-http-client-for-node-js-in-versions-7-0-0-through-7-30-1-and-8-0-0-through-8-12-3-when-the-redirect-interceptor-and-a-shared-response-cache-are-u2026-11-06 https://bugrater.com/releases/cve-2026-120550-the-wp-user-manager-registration-form-login-form-user-profile-builder-member-directory-plugin-for-wordpress-is-vulnerable-to-stored-cross-site-scripting-v2026-11-06 https://bugrater.com/releases/cve-2026-120659-the-redirection-for-contact-form-7-plugin-for-wordpress-is-vulnerable-to-authorization-bypass-in-all-versions-up-to-and-including-3-2-14-this-is-due-to-the-pl2026-11-06 https://bugrater.com/releases/cve-2026-123087-sql-injection-vulnerability-in-atmira-s-sirec-the-server-retrieves-the-value-of-a-field-from-a-json-object-containing-user-supplied-information-and-concatenate2026-11-06 https://bugrater.com/releases/cve-2026-33379-a-user-with-any-role-including-viewer-or-a-service-account-with-no-permissions-can-create-externally-publish-and-delete-dashboard-snapshots-missing-authori2026-11-06 https://bugrater.com/releases/cve-2026-87964-the-product-feed-manager-for-woocommerce-ctx-feed-support-220-shopping-ai-social-channels-plugin-for-wordpress-is-vulnerable-to-php-code-injection-in-al2026-11-06 https://bugrater.com/releases/cve-2026-97642-the-wp-parsidate-plugin-for-wordpress-is-vulnerable-to-stored-cross-site-scripting-via-the-calendar-gutenberg-block-s-theme-attribute-in-versions-up-to-and-i2026-11-06 https://bugrater.com/releases/cve-2026-113431-allocation-of-resources-without-limits-or-throttling-vulnerability-in-ninenines-cowlib-allows-an-unauthenticated-remote-peer-to-exhaust-the-memory-of-an-http-22026-11-06 https://bugrater.com/releases/cve-2026-115701-allocation-of-resources-without-limits-or-throttling-vulnerability-in-ninenines-cowboy-allows-an-unauthenticated-remote-attacker-to-exhaust-connection-process-m2026-11-06 https://bugrater.com/releases/cve-2026-116630-undici-is-an-http-client-for-node-js-in-versions-7-0-0-through-7-30-1-and-8-0-0-through-8-12-3-when-an-agent-composes-the-redirect-and-shared-cache-intercepto2026-11-06 https://bugrater.com/releases/cve-2026-66293-xml-injection-in-the-encoder-of-saxy-saxy-encoder-does-not-neutralize-the-sequence-in-xml-comment-content-escape-comment-2-returns-the-comment-binary-uncha2026-11-06 https://bugrater.com/releases/cve-2026-66294-xml-injection-in-the-saxy-xml-encoder-saxy-encoder-cdata-1-serializes-a-cdata-characters-node-by-wrapping-the-supplied-characters-between-cdata-and2026-11-06 https://bugrater.com/releases/cve-2026-66295-saxy-s-xml-encoder-writes-the-target-and-the-content-of-a-processing-instruction-into-the-output-document-verbatim-without-validation-or-escaping-the-encoder2026-11-06 https://bugrater.com/releases/cve-2026-84161-when-an-operator-enables-store-analysis-statistics-dir-a-network-client-with-product-store-permission-for-a-product-can-call-that-product-s-storeanalysisstatis2026-11-06 https://bugrater.com/releases/cve-2026-84164-the-html-report-that-plist-to-html-codechecker-parse-export-html-and-codechecker-cmd-diff-output-html-generate-puts-the-report-message-the-checker-name-an2026-11-06 https://bugrater.com/releases/cve-2025-66621-apache-james-sasl-oauthbearer-xoauth2-prior-versions-3-9-1-fails-to-validate-correctly-aud-claim-of-jwt-payloads-when-introspection-is-not-configured-this-all2026-11-06 https://bugrater.com/releases/cve-2026-103479-the-pubjet-plugin-for-wordpress-is-vulnerable-to-privilege-escalation-in-all-versions-up-to-and-including-5-4-8-this-is-due-to-the-checktoken-aj2026-11-06 https://bugrater.com/releases/cve-2026-103908-the-the-amp-for-wp-accelerated-mobile-pages-plugin-for-wordpress-is-vulnerable-to-arbitrary-shortcode-execution-in-all-versions-up-to-and-including-1-1-182026-11-06 https://bugrater.com/releases/cve-2026-104010-the-wpsyncsheets-for-contact-form-7-cf7-google-sheets-connector-save-to-database-plugin-for-wordpress-is-vulnerable-to-remote-code-execution-in-all-versions2026-11-06 https://bugrater.com/releases/cve-2026-107622-the-buddyforms-plugin-for-wordpress-is-vulnerable-to-privilege-escalation-in-all-versions-up-to-and-including-2-10-5-via-a-form-type-confusion-attack-through2026-11-06 https://bugrater.com/releases/cve-2026-107658-the-buddyforms-plugin-for-wordpress-is-vulnerable-to-stored-cross-site-scripting-via-the-bf-post-type-and-buddyforms-form-content-parameter-in-all-versions2026-11-06 https://bugrater.com/releases/cve-2026-114630-the-elex-wordpress-helpdesk-customer-ticketing-system-plugin-for-wordpress-is-vulnerable-to-arbitrary-file-deletion-due-to-insufficient-file-path-validation-i2026-11-06 https://bugrater.com/releases/cve-2026-116545-the-all-in-one-video-gallery-video-player-galleries-for-youtube-vimeo-self-hosted-videos-plugin-for-wordpress-is-vulnerable-to-stored-dom-based-cross-sit2026-11-06 https://bugrater.com/releases/cve-2026-116551-the-wp-customer-area-plugin-for-wordpress-is-vulnerable-to-stored-cross-site-scripting-via-the-display-name-parameter-in-all-versions-up-to-and-including-82026-11-06 https://bugrater.com/releases/cve-2026-116624-the-advanced-members-for-acf-plugin-for-wordpress-is-vulnerable-to-privilege-escalation-in-all-versions-up-to-and-including-1-3-0-via-the-acf-amem-local-use2026-11-06 https://bugrater.com/releases/cve-2026-119178-the-smart-cookie-kit-plugin-for-wordpress-is-vulnerable-to-stored-cross-site-scripting-via-the-comment-parameter-in-all-versions-up-to-and-including-2-3-2-d2026-11-06 https://bugrater.com/releases/cve-2026-119211-the-aaa-autoload-optimizer-plugin-for-wordpress-is-vulnerable-to-stored-cross-site-scripting-via-the-option-page-parameter-in-all-versions-up-to-and-includin2026-11-06 https://bugrater.com/releases/cve-2026-120035-the-rss-aggregator-by-feedzy-feed-to-post-autoblogging-news-youtube-video-feeds-aggregator-plugin-for-wordpress-is-vulnerable-to-stored-cross-site-scripti2026-11-06 https://bugrater.com/releases/cve-2026-49939-in-apache-james-server-prior-version-3-9-1-improper-access-control-list-processing-is-exposed-by-the-jmap-protocol-which-do-not-account-for-negative-rules-posit2026-11-06 https://bugrater.com/releases/cve-2026-74756-some-docker-compose-shipped-by-the-project-exposes-by-default-webadmin-rest-api-publically-without-proper-authentication-setup-version-3-9-1-onward-sets-a-rand2026-11-06 https://bugrater.com/releases/cve-2026-76168-in-apache-james-server-prior-version-3-9-1-relying-on-the-sievefilerepository-incorect-validation-of-file-paths-can-result-in-path-transversal-allowing-to-set2026-11-06 https://bugrater.com/releases/cve-2026-76171-in-apache-james-server-prior-version-3-9-1-improper-validation-in-jmap-webpush-ssrf-validation-did-lead-to-the-possibility-to-reach-internal-addresses-users-ar2026-11-06 https://bugrater.com/releases/cve-2026-85108-allocation-of-resources-without-limits-or-throttling-in-apache-james-mime4j-library-prior-version-0-8-15-allows-denial-of-service-upon-parsing-mime-messages-us2026-11-06 https://bugrater.com/releases/cve-2026-85111-allocation-of-resources-without-limits-or-throttling-in-apache-james-mime4j-library-prior-version-0-8-15-allows-denial-of-service-upon-parsing-mime-messages-us2026-11-06 https://bugrater.com/releases/cve-2026-89101-the-everest-forms-contact-form-payment-form-quiz-survey-custom-form-builder-with-ai-plugin-for-wordpress-is-vulnerable-to-insecure-direct-object-referenc2026-11-06 https://bugrater.com/releases/cve-2026-92895-the-live2dwebcanvas-plugin-for-wordpress-is-vulnerable-to-arbitrary-file-upload-in-all-versions-up-to-and-including-2-2-1-via-the-download-one-file-function2026-11-06 https://bugrater.com/releases/cve-2026-105422-improper-limitation-of-a-pathname-to-a-restricted-directory-path-traversal-vulnerability-in-t-b-tak-b-lgem-software-technologies-research-institute-pardus-b2026-11-06 https://bugrater.com/releases/cve-2026-109883-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-vulnerability-in-elementor-elementor-website-builder-elementor-allows-code2026-11-06 https://bugrater.com/releases/cve-2026-109884-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-vulnerability-in-elementor-elementor-website-builder-elementor-allows-refle2026-11-06 https://bugrater.com/releases/cve-2026-115431-missing-authorization-vulnerability-in-wp-swings-upsell-order-bump-offer-for-woocommerce-upsell-order-bump-offer-for-woocommerce-allows-exploiting-incorrectly-c2026-11-06 https://bugrater.com/releases/cve-2026-115952-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-vulnerability-in-wpmu-dev-forminator-forminator-allows-stored-xss-this-issu2026-11-06 https://bugrater.com/releases/cve-2026-123746-the-symfony-security-http-component-authenticatormanager-authenticateuser-does-not-run-the-firewall-user-checker-s-checkpostauth-method-when-a-user-is-auth2026-11-06 https://bugrater.com/releases/cve-2026-92080-improper-limitation-of-a-pathname-to-a-restricted-directory-path-traversal-vulnerability-in-t-b-tak-b-lgem-software-technologies-research-institute-pardus-b2026-11-06 https://bugrater.com/releases/cve-2026-123653-a-security-vulnerability-has-been-detected-in-esengine-deepseek-reasonix-up-to-2-52-0-affected-is-the-function-discoverdocs-of-the-file-internal-memory-doc-go2026-11-06 https://bugrater.com/releases/cve-2026-106019-insertion-of-sensitive-information-into-log-file-vulnerability-in-johnson-controls-c-cure-9000-victor-allows-use-of-known-operating-system-credentials-this-i2026-11-06 https://bugrater.com/releases/cve-2026-106020-improper-neutralization-of-input-used-for-llm-prompting-vulnerability-in-johnson-controls-easyio-neo-io-manager-and-tools-installer-allows-search-order-hijackin2026-11-06 https://bugrater.com/releases/cve-2026-106022-cleartext-storage-of-sensitive-information-in-memory-vulnerability-in-johnson-controls-easyio-neo-iomanager-and-tools-installer-allows-retrieve-embedded-sensiti2026-11-06 https://bugrater.com/releases/cve-2026-112334-wazuh-from-1-0-0-before-4-14-9-contains-an-out-of-bounds-write-vulnerability-in-wazuh-execd-that-allows-privileged-manager-configuration-attackers-to-corrupt-ro2026-11-06 https://bugrater.com/releases/cve-2026-112335-wazuh-agent-from-1-0-0-before-4-14-9-contains-a-stack-based-buffer-overflow-in-the-logcollector-snort-full-log-reader-that-miscalculates-remaining-buffer-space2026-11-06 https://bugrater.com/releases/cve-2026-112336-wazuh-manager-from-3-0-0-before-4-14-9-contains-a-memory-leak-vulnerability-in-the-generic-json-decoder-that-allows-remote-attackers-to-exhaust-wazuh-analysisd2026-11-06 https://bugrater.com/releases/cve-2026-112337-wazuh-from-3-7-0-before-4-14-9-contains-a-server-side-request-forgery-vulnerability-in-the-azure-wodle-get-graph-events-function-that-follows-odata-nextlink2026-11-06 https://bugrater.com/releases/cve-2026-112338-wazuh-from-4-3-0-before-4-14-9-contains-a-server-side-request-forgery-vulnerability-in-the-github-module-wm-github-c-that-trusts-unvalidated-link-rel-next-p2026-11-06 https://bugrater.com/releases/cve-2026-112339-wazuh-from-3-9-0-before-4-14-9-contains-a-missing-tls-hostname-verification-vulnerability-in-the-fluent-forward-module-s-wm-fluent-ssl-ctx-that-allows-network2026-11-06 https://bugrater.com/releases/cve-2026-112340-wazuh-dashboard-plugins-from-4-9-0-before-4-14-9-contain-an-authorization-bypass-vulnerability-that-allows-authenticated-dashboard-users-to-override-the-manager2026-11-06 https://bugrater.com/releases/cve-2026-112341-wazuh-versions-from-4-0-0-before-4-14-9-contain-a-sql-injection-vulnerability-in-wazuhdbbackend-substitute-params-due-to-sequential-regex-placeholder-cross-con2026-11-06 https://bugrater.com/releases/cve-2026-113618-the-zsirep-client-library-zsirep-client-dll-is-vulnerable-to-improper-server-certificate-validation-it-registers-a-process-wide-net-callback-that-accepts-an2026-11-06 https://bugrater.com/releases/cve-2026-118514-in-symfony-http-foundation-prior-to-versions-5-4-56-6-4-50-7-4-23-and-8-1-11-symfony-component-httpfoundation-requestmatcher-and-requestmatcher-methodreque2026-11-06 https://bugrater.com/releases/cve-2026-119170-there-was-a-regression-in-how-fips-algorithms-were-enforced-for-the-hashlib-module-only-users-that-are-using-openssl-in-fips-mode-are-affected-only-python-3-12026-11-06 https://bugrater.com/releases/cve-2026-123339-improper-trust-of-forwarded-headers-in-routerlistener-onkernelfinishrequest-in-symfony-httpkernel-versions-prior-to-5-4-56-6-x-prior-to-6-4-50-7-x-prior-to2026-11-06 https://bugrater.com/releases/cve-2026-123485-ground-station-from-0-6-0-before-0-8-20-does-not-restrict-the-get-orbital-sources-socket-io-handler-also-exposed-as-get-tle-sources-to-administrators-althoug2026-11-06 https://bugrater.com/releases/cve-2026-123486-wwbn-avideo-29-0-through-29-4-0-contains-a-race-condition-vulnerability-in-plugin-paypalypt-ipn-php-that-allows-attackers-to-bypass-ipn-replay-protection-due-to2026-11-06 https://bugrater.com/releases/cve-2026-123487-parse-server-before-8-6-115-and-9-0-0-before-9-10-7-alpha-1-validates-user-email-address-format-with-a-regular-expression-whose-run-time-grows-quadratically-wit2026-11-06 https://bugrater.com/releases/cve-2026-123489-craft-cms-4-0-0-before-4-18-9-and-5-0-0-before-5-11-2-contains-a-blind-sql-injection-vulnerability-because-the-sandbox-exposed-getnext-and-getprev-methods-p2026-11-06 https://bugrater.com/releases/cve-2026-123490-craft-cms-from-5-8-17-before-5-11-2-contains-a-privilege-escalation-vulnerability-because-getowners-applies-caller-criteria-without-cleansing-the-query-config2026-11-06 https://bugrater.com/releases/cve-2026-123491-craft-cms-4-0-0-before-4-18-9-and-5-0-0-before-5-11-2-contains-an-sql-injection-vulnerability-in-graphql-eager-loading-arguments-on-eager-loadable-nodes-absent2026-11-06 https://bugrater.com/releases/cve-2026-123492-siyuan-before-3-8-9-contains-a-nil-pointer-dereference-vulnerability-in-privatecachemiddleware-that-allows-authenticated-attackers-to-crash-the-kernel-by-readin2026-11-06 https://bugrater.com/releases/cve-2026-123617-openwhyd-before-1-65-1-contains-a-nosql-injection-vulnerability-that-allows-unauthenticated-attackers-to-manipulate-user-lookups-by-passing-json-objects-in-the2026-11-06 https://bugrater.com/releases/cve-2026-123618-abp-framework-before-10-7-1-contains-an-authentication-bypass-vulnerability-that-skips-account-state-and-two-factor-checks-when-password-login-succeeds-through2026-11-06 https://bugrater.com/releases/cve-2026-123619-lektor-through-3-3-14-and-3-4-0b15-contains-an-absolute-path-traversal-vulnerability-in-the-admin-api-on-windows-that-allows-attackers-to-escape-the-project-dir2026-11-06 https://bugrater.com/releases/cve-2026-123620-usermin-through-2-570-contains-an-os-command-injection-vulnerability-in-the-read-mail-module-that-allows-authenticated-users-to-execute-commands-through-unsanit2026-11-06 https://bugrater.com/releases/cve-2026-123621-usermin-through-2-570-contains-a-path-traversal-vulnerability-in-mailbox-detachall-cgi-that-allows-remote-unauthenticated-attackers-to-write-files-outside-the-t2026-11-06 https://bugrater.com/releases/cve-2026-123622-usermin-through-2-570-contains-a-cross-site-scripting-vulnerability-in-mailbox-detach-cgi-that-allows-remote-attackers-to-execute-script-by-supplying-an-arbitra2026-11-06 https://bugrater.com/releases/cve-2026-123624-chatwiki-before-2-10-0-contains-an-insecure-direct-object-reference-vulnerability-that-allows-authenticated-users-to-modify-other-tenants-fast-commands-by-supp2026-11-06 https://bugrater.com/releases/cve-2026-123664-a-security-flaw-has-been-discovered-in-nasa-gcn-gcn-nasa-gov-up-to-b299b562af665878964b981a459f0a9c04b11adf-this-issue-affects-some-unknown-processing-of-the-f2026-11-06 https://bugrater.com/releases/cve-2026-123665-a-weakness-has-been-identified-in-kubescape-up-to-4-0-15-impacted-is-the-function-getwriter-of-the-file-core-pkg-resultshandling-printer-printresults-go-of-the2026-11-06 https://bugrater.com/releases/cve-2026-123782-chatwiki-before-2-10-0-contains-an-insecure-direct-object-reference-vulnerability-in-saveformfield-and-updateformrequired-that-allows-authenticated-users-to-mod2026-11-06 https://bugrater.com/releases/cve-2026-123783-skyvern-through-1-0-56-contains-a-sandbox-bypass-vulnerability-that-allows-authenticated-users-to-execute-code-by-reconstructing-functions-from-raw-bytecode-wit2026-11-06 https://bugrater.com/releases/cve-2026-123784-fluxbox-through-1-3-7-contains-an-os-command-injection-vulnerability-in-roottheme-reconfigtheme-that-allows-attackers-to-execute-commands-via-crafted-style-b2026-11-06 https://bugrater.com/releases/cve-2026-123785-fluxbox-through-1-3-7-contains-an-infinite-loop-vulnerability-in-menu-updatemenu-in-src-fbtk-menu-cc-that-allows-attackers-to-hang-the-window-manager-via-cra2026-11-06 https://bugrater.com/releases/cve-2026-123786-agenta-before-0-122-5-contains-a-server-side-request-forgery-vulnerability-that-allows-workspace-members-with-workflow-edit-rights-to-redirect-workflow-invocati2026-11-06 https://bugrater.com/releases/cve-2026-53980-charmbracelet-wish-before-2-0-5-contains-a-path-traversal-vulnerability-in-the-git-middleware-charm-land-wish-v2-that-allows-authenticated-ssh-users-to-escape2026-11-06 https://bugrater.com/releases/cve-2026-59105-jumis-formerly-tildes-jumis-creates-and-uses-a-microsoft-sql-server-login-named-tilde-jumisadmin-whose-password-is-derived-deterministically-from-a-single2026-11-06 https://bugrater.com/releases/cve-2026-64894-inclusion-of-functionality-from-untrusted-control-sphere-vulnerability-in-johnson-controls-easyio-neo-iomanager-and-tools-installer-allows-malicious-software-up2026-11-06 https://bugrater.com/releases/cve-2026-111573-incorrect-permissions-on-the-checkmk-windows-agent-s-data-directory-caused-by-a-race-condition-that-discards-the-permission-changes-during-service-start-in-ch2026-11-06 https://bugrater.com/releases/cve-2026-121623-the-symfony-serializer-component-dataurinormalizer-denormalize-matches-the-data-scheme-with-a-case-sensitive-regular-expression-allowing-a-value-with-an-up2026-11-06 https://bugrater.com/releases/cve-2026-121880-authorization-bypass-through-user-controlled-key-in-the-localhost-port-proxy-p-token-in-posit-software-pbc-rstudio-server-and-posit-workbench-before-20262026-11-06 https://bugrater.com/releases/cve-2026-121881-sql-injection-vulnerability-in-the-get-last-seen-code-server-session-state-rpc-in-posit-software-pbc-posit-workbench-before-2026-08-0-allows-authenticated-user2026-11-06 https://bugrater.com/releases/cve-2026-123623-grida-through-0-0-24-contains-a-missing-authorization-vulnerability-in-the-forms-file-preview-api-routes-that-allows-unauthenticated-attackers-to-read-other-org2026-11-06 https://bugrater.com/releases/cve-2026-123675-a-flaw-has-been-found-in-openbmb-internet-of-agents-up-to-9d78e88e47160eb42ee1ee8538c05e1c2c47877a-this-affects-the-function-execute-code-of-the-file-im-client2026-11-06 https://bugrater.com/releases/cve-2026-123676-a-vulnerability-has-been-found-in-xxyopen-201206030-novel-up-to-3-5-0-this-impacts-the-function-bookserviceimpl-getbookcontentabout-of-the-file-src-main-java-i2026-11-06 https://bugrater.com/releases/cve-2026-123677-a-vulnerability-was-found-in-xxyopen-201206030-novel-up-to-3-5-0-affected-is-the-function-getbookchapter-of-the-file-src-main-java-io-github-xxyopen-novel-serv2026-11-06 https://bugrater.com/releases/cve-2026-123792-the-symfony-yaml-components-inline-and-parser-parse-some-yaml-documents-inefficiently-so-that-a-small-crafted-document-can-take-disproportionately-long-to-pro2026-11-06 https://bugrater.com/releases/cve-2026-12067-missing-exception-handlers-in-avastsvc-native-message-dispatcher-ashserv-dll-on-windows-allow-a-local-unprivileged-attacker-to-crash-the-service-by-sending-s2026-11-06 https://bugrater.com/releases/cve-2026-58141-dify-before-1-15-0-contains-a-server-side-request-forgery-vulnerability-that-allows-any-authenticated-console-user-to-bypass-ssrf-protections-and-issue-arbitrar2026-11-06 https://bugrater.com/releases/cve-2026-80301-improper-isolation-in-the-avast-sandbox-on-windows-allows-a-local-low-privileged-attacker-executing-inside-the-sandbox-to-access-com-interfaces-to-the-task-sch2026-11-06 https://bugrater.com/releases/cve-2026-80302-insufficient-isolation-in-the-avast-sandbox-file-virtualization-layer-on-windows-allows-a-local-low-privileged-attacker-executing-inside-the-sandbox-to-write-a2026-11-06 https://bugrater.com/releases/cve-2026-80303-an-integer-underflow-vulnerability-in-the-avast-windows-filtering-platform-wfp-stream-parser-on-windows-allows-denial-of-service-by-causing-a-system-crash2026-11-06 https://bugrater.com/releases/cve-2026-90436-unsupported-when-assigned-deserialization-of-an-inbound-soap-fault-in-apache-axis-1-x-allows-unauthenticated-remote-class-instantiation-when-a-soap-faul2026-11-06 https://bugrater.com/releases/cve-2026-104656-improper-neutralization-of-input-in-the-sessions-grid-in-progress-telerik-fiddler-everywhere-8-3-0-and-earlier-allows-an-attacker-to-execute-backend-ipc-command2026-11-06 https://bugrater.com/releases/cve-2026-104657-missing-integrity-verification-in-the-progress-software-fiddler-download-and-setup-skill-on-linux-macos-and-windows-which-allows-an-attacker-to-compromise-or2026-11-06 https://bugrater.com/releases/cve-2026-106127-prototype-pollution-in-the-setter-utility-progress-kendo-react-common-in-progress-software-kendoreact-versions-3-5-0-through-16-0-0-allows-a-high-privileged2026-11-06 https://bugrater.com/releases/cve-2026-106128-prototype-pollution-in-progress-kendo-vue-common-in-progress-software-kendo-ui-for-vue-versions-0-4-0-through-9-2-0-allows-a-high-privileged-attacker-who-can-c2026-11-06 https://bugrater.com/releases/cve-2026-106134-cross-site-scripting-xss-in-the-menu-component-progress-kendo-react-layout-in-progress-software-kendoreact-versions-1-3-0-through-16-1-0-allows-a-low-privi2026-11-06 https://bugrater.com/releases/cve-2026-106135-cross-site-scripting-xss-in-the-chat-component-progress-kendo-angular-conversational-ui-in-progress-software-kendo-ui-for-angular-versions-prior-to-25-3-02026-11-06 https://bugrater.com/releases/cve-2026-106136-cross-site-scripting-xss-in-the-chat-component-progress-kendo-react-conversational-ui-in-progress-software-kendoreact-versions-0-6-0-through-16-1-0-allows2026-11-06 https://bugrater.com/releases/cve-2026-106141-cross-site-scripting-xss-in-the-editor-component-progress-kendo-angular-editor-in-progress-software-kendo-ui-for-angular-versions-prior-to-25-3-0-allows-a2026-11-06 https://bugrater.com/releases/cve-2026-106142-cross-site-scripting-xss-in-the-editor-component-progress-kendo-react-editor-in-progress-software-kendoreact-versions-2-7-0-through-16-1-0-allows-a-low-pri2026-11-06 https://bugrater.com/releases/cve-2026-106143-cross-site-scripting-xss-in-the-editor-component-progress-kendo-vue-editor-in-progress-software-kendo-ui-for-vue-versions-2-7-1-through-10-0-0-allows-a-low2026-11-06 https://bugrater.com/releases/cve-2026-106144-prototype-pollution-in-the-scheduler-component-progress-kendo-angular-scheduler-and-progress-kendo-angular-common-in-progress-software-kendo-ui-for-angular2026-11-06 https://bugrater.com/releases/cve-2026-118515-the-symfony-serializer-component-dataurinormalizer-handles-only-the-exact-types-splfileinfo-splfileobject-and-file-so-for-a-property-typed-with-a-subclass-su2026-11-06 https://bugrater.com/releases/cve-2026-122053-the-symfony-serializer-component-objectnormalizer-treats-any-attribute-name-containing-and-from-symfony-6-4-as-a-writable-property-path-allowing-untrus2026-11-06 https://bugrater.com/releases/cve-2026-123859-when-identifier-escaping-is-disabled-through-a-non-default-configuration-the-write-pandas-data-loading-functionality-in-the-snowflake-connector-for-python-an2026-11-06 https://bugrater.com/releases/cve-2026-49951-ragflow-before-0-27-0-contains-a-server-side-request-forgery-vulnerability-that-allows-authenticated-attackers-to-force-the-server-to-issue-requests-to-arbitrar2026-11-06 https://bugrater.com/releases/cve-2026-119758-erpnext-ocr-app-for-frappe-erpnext-through-1-1-1-contains-a-missing-authorization-and-path-traversal-vulnerability-that-allows-any-authenticated-user-to-read-ar2026-11-06 https://bugrater.com/releases/cve-2026-123748-a-security-flaw-has-been-discovered-in-chenyme-grok2api-up-to-3-1-6-affected-by-this-vulnerability-is-the-function-proxyvoicewebsocket-of-the-file-backend-inte2026-11-06 https://bugrater.com/releases/cve-2026-123824-the-symfony-config-component-xmlutils-parse-enables-dtd-validation-before-rejecting-documents-that-carry-a-doctype-allowing-xml-external-entity-xxe-inject2026-11-06 https://bugrater.com/releases/cve-2026-123876-a-flaw-was-found-in-the-default-seccomp-profile-used-by-podman-via-containers-common-deny-rules-for-af-vsock-and-netlink-audit-compared-socket-arguments-with-u2026-11-06 https://bugrater.com/releases/cve-2026-123976-edfbrowser-before-2-16-contains-an-out-of-bounds-write-vulnerability-in-check-edf-file-that-allows-attackers-to-overflow-the-256-element-annot-ch-array-by-sup2026-11-06 https://bugrater.com/releases/cve-2026-89017-skyline-dataminer-brokergateway-contains-an-embedded-api-key-vulnerability-that-allows-unauthenticated-attackers-to-retrieve-the-installation-specific-brokergat2026-11-06 https://bugrater.com/releases/cve-2026-123993-hisense-vidaa-smart-tv-firmware-v0000-01-00a-p0220-contains-an-unauthenticated-access-vulnerability-where-a-qa-build-of-the-google-cobalt-browser-engine-exposes2026-11-06 https://bugrater.com/releases/cve-2026-123994-hisense-vidaa-smart-tv-firmware-v0000-01-00a-p0220-contains-an-unauthenticated-access-vulnerability-in-the-dial-discovery-and-launch-service-on-tcp-port-567892026-11-06 https://bugrater.com/releases/cve-2026-123995-hisense-vidaa-smart-tv-firmware-v0000-01-00a-p0220-contains-an-input-validation-vulnerability-in-the-upnp-dlna-avtransport-soap-service-that-allows-a-lan-adjace2026-11-06 https://bugrater.com/releases/cve-2026-123996-hisense-vidaa-smart-tv-firmware-v0000-01-00a-p0220-contains-a-missing-authentication-vulnerability-in-the-upnp-dlna-renderingcontrol-service-on-tcp-port-38400-t2026-11-06 https://bugrater.com/releases/cve-2026-123997-hisense-vidaa-smart-tv-firmware-v0000-01-00a-p0220-contains-an-unauthenticated-denial-of-service-vulnerability-in-the-upnp-dlna-avtransport-soap-service-that-al2026-11-06 https://bugrater.com/releases/cve-2026-123998-hisense-vidaa-smart-tv-firmware-v0000-01-00a-p0220-contains-an-authentication-bypass-vulnerability-in-its-remote-control-mqtt-broker-on-tcp-port-36669-which-ac2026-11-06 https://bugrater.com/releases/cve-2026-19703-a-weak-password-hashing-vulnerability-has-been-identified-on-sonicos-virtual-appliances-which-in-specific-conditions-could-potentially-enable-an-attacker-with2026-11-06 https://bugrater.com/releases/cve-2026-77708-a-pre-authentication-stack-based-buffer-overflow-vulnerability-has-been-identified-in-the-sonicos-tacacs-authentication-client-which-in-specific-conditions-co2026-11-06 https://bugrater.com/releases/cve-2026-77709-a-pre-authentication-heap-based-buffer-overflow-vulnerability-has-been-identified-in-the-sonicos-tacacs-authentication-client-which-in-specific-conditions-cou2026-11-06 https://bugrater.com/releases/cve-2026-82308-a-pre-authentication-heap-based-buffer-overflow-vulnerability-has-been-identified-in-the-sonicos-ssl-vpn-service-which-could-potentially-enable-a-remote-unauth2026-11-06 https://bugrater.com/releases/cve-2026-109683-a-newline-injection-vulnerability-exists-in-the-upnp-service-of-archer-be805-v1-such-that-an-adjacent-attacker-can-supply-newline-characters-in-a-upnp-port-mapp2026-11-06 https://bugrater.com/releases/cve-2026-123974-in-all-versions-of-pytorch-s-torchserve-a-predictable-extraction-directory-in-tmp-lets-a-local-user-swap-the-model-handler-and-run-code-as-the-torchserve-serv2026-11-06 https://bugrater.com/releases/cve-2026-124025-faveo-helpdesk-through-2-0-3-contains-a-broken-access-control-vulnerability-in-ticketcontroller-ticket-print-and-the-pdfthread-endpoint-that-fails-to-verify-ti2026-11-06 https://bugrater.com/releases/cve-2026-124026-bar-assistant-6-0-0-rc1-before-6-11-0-contains-an-incorrect-authorization-vulnerability-in-cocktailcontroller-copy-that-allows-registered-users-to-bypass-sourc2026-11-06 https://bugrater.com/releases/cve-2026-124027-chatwiki-before-2-10-0-contains-a-missing-authentication-vulnerability-in-the-get-manage-getlibrawfileonepage-route-that-allows-unauthenticated-attackers-to-re2026-11-06 https://bugrater.com/releases/cve-2026-124028-mistral-rs-before-0-9-5-contains-a-delimiter-injection-vulnerability-in-mistralrs-core-that-allows-attackers-to-inject-tool-calls-by-placing-delimiter-strings-i2026-11-06 https://bugrater.com/releases/cve-2026-124029-kopia-through-0-23-1-contains-a-path-traversal-vulnerability-in-copydirectorycontent-that-allows-users-with-repository-write-access-to-escape-the-restore-direct2026-11-06 https://bugrater.com/releases/cve-2026-124030-gpac-through-26-07-0-contains-a-type-confusion-vulnerability-in-gf-sg-command-apply-in-src-scenegraph-commands-c-that-fails-to-verify-bifs-field-replace-comma2026-11-06 https://bugrater.com/releases/cve-2026-124031-gpac-through-26-07-0-contains-a-type-confusion-vulnerability-in-drawable-get-aspect-2d-mpeg4-and-traverseshape-that-casts-a-shape-s-appearance-node-to-m-app2026-11-06 https://bugrater.com/releases/cve-2026-124039-gitleaks-through-8-30-1-contains-an-incorrect-permission-assignment-vulnerability-that-allows-local-users-to-read-scan-reports-because-cmd-root-go-creates-the2026-11-06 https://bugrater.com/releases/cve-2026-124040-civetweb-through-1-16-when-built-with-use-http2-and-enable-http2-on-contains-a-use-after-free-vulnerability-in-handle-http2-that-retains-freed-method-and2026-11-06 https://bugrater.com/releases/cve-2026-123787-a-weakness-has-been-identified-in-nexmoe-vidbee-up-to-1-3-13-2-0-2-the-affected-element-is-an-unknown-function-of-the-file-apps-desktop-src-main-local-api-ts-o2026-11-06 https://bugrater.com/releases/cve-2026-124078-plist-js-npm-package-plist-before-5-0-1-contains-an-uncontrolled-resource-consumption-vulnerability-in-the-binary-property-list-parser-parsebinary-that-al2026-11-06 https://bugrater.com/releases/cve-2026-71397-allocation-of-resources-without-limits-or-throttling-vulnerability-in-elixir-grpc-grpc-server-allows-unauthenticated-attackers-to-exhaust-memory-and-crash-the-n2026-11-06 https://bugrater.com/releases/cve-2026-123788-a-security-vulnerability-has-been-detected-in-chenyme-grok2api-up-to-3-1-6-the-impacted-element-is-an-unknown-function-of-the-file-backend-internal-transport-h2026-11-06 https://bugrater.com/releases/cve-2026-123791-a-vulnerability-was-detected-in-openbmb-internet-of-agents-up-to-9d78e88e47160eb42ee1ee8538c05e1c2c47877a-this-affects-the-function-primary-field-query-of-the2026-11-06 https://bugrater.com/releases/cve-2026-50240-a-flaw-was-found-in-openshift-pipelines-as-code-pac-pac-does-not-verify-whether-the-creator-of-a-repository-custom-resource-has-permission-to-create-pipeline2026-11-06 https://bugrater.com/releases/cve-2026-59104-ugcs-server-before-6-2-contains-an-authentication-bypass-in-the-hci-protocol-login-handler-loginhandler-exposed-on-tcp-port-3334-when-the-user-database-conta2026-11-06 https://bugrater.com/releases/cve-2026-118785-improper-handling-of-non-secure-world-input-in-nsc-veneer-functions-of-nxp-mcuxpresso-sdk-trustzone-m-examples-trustzone-examples-affecting-versions-through2026-11-06 https://bugrater.com/releases/cve-2026-118786-improper-input-validation-in-non-secure-callable-nsc-veneer-functions-of-the-nxp-mcuxpresso-sdk-rpmsg-lite-multicore-example-multicore-examples-rpmsg-lite-pi2026-11-06 https://bugrater.com/releases/cve-2026-119519-missing-authorization-vulnerability-in-wproyal-royal-elementor-addons-royal-elementor-addons-allows-exploiting-incorrectly-configured-access-control-security-le2026-11-06 https://bugrater.com/releases/cve-2026-120845-improper-neutralization-of-input-during-web-page-generation-cross-site-scripting-vulnerability-in-wpmu-dev-smush-image-compression-and-optimization-wp-smush2026-11-06 https://bugrater.com/releases/cve-2026-120851-missing-authorization-vulnerability-in-publishpress-publishpress-revisions-revisionary-allows-exploiting-incorrectly-configured-access-control-security-levels-t2026-11-06 https://bugrater.com/releases/cve-2026-122670-missing-authorization-vulnerability-in-wp-syntex-polylang-polylang-allows-exploiting-incorrectly-configured-access-control-security-levels-this-issue-affects-po2026-11-06 https://bugrater.com/releases/cve-2026-123471-improper-neutralization-of-script-related-html-tags-in-a-web-page-basic-xss-vulnerability-in-mycred-mycred-mycred-allows-code-injection-this-issue-affects-myc2026-11-06 https://bugrater.com/releases/cve-2026-27356-missing-authorization-vulnerability-in-ibericode-mc4wp-mailchimp-for-wp-allows-exploiting-incorrectly-configured-access-control-security-levels-this-issue-affec2026-11-06 https://bugrater.com/releases/highlight-js-syntax-highlighter-critical-cross-site-scripting-sa-contrib-2026-2992026-11-07 https://bugrater.com/releases/rest-json-api-authentication-for-drupal-critical-access-bypass-sa-contrib-2026-2982026-11-07 https://bugrater.com/releases/workflow-notifications-critical-access-bypass-sa-contrib-2026-2972026-11-07 https://bugrater.com/releases/simple-oauth-oauth2-openid-connect-critical-access-bypass-sa-contrib-2026-2962026-11-07 https://bugrater.com/releases/s3-file-system-cors-upload-critical-access-bypass-sa-contrib-2026-2952026-11-07 https://bugrater.com/releases/content-synchronizer-moderately-critical-cross-site-scripting-sa-contrib-2026-2942026-11-07 https://bugrater.com/releases/content-synchronizer-critical-remote-code-execution-sa-contrib-2026-2932026-11-07 https://bugrater.com/releases/cve-2026-104913-the-interactive-real-estate-floor-plan-building-visualizer-plugin-for-wordpress-is-vulnerable-to-arbitrary-file-upload-in-all-versions-up-to-and-including2026-11-07 https://bugrater.com/releases/cve-2026-115816-the-kubio-ai-page-builder-plugin-for-wordpress-is-vulnerable-to-stored-cross-site-scripting-via-the-comment-review-body-parameter-in-all-versions-up-to-and2026-11-07 https://bugrater.com/releases/cve-2026-116562-the-motors-car-dealership-classified-listings-plugin-plugin-for-wordpress-is-vulnerable-to-stored-cross-site-scripting-via-the-stm-f-s-make-parameter-in2026-11-07 https://bugrater.com/releases/cve-2026-118046-the-js-help-desk-ai-powered-support-ticketing-system-plugin-for-wordpress-is-vulnerable-to-stored-dom-based-cross-site-scripting-via-the-jsticket-message2026-11-07 https://bugrater.com/releases/cve-2026-118054-the-learnpress-course-review-plugin-for-wordpress-is-vulnerable-to-stored-dom-based-cross-site-scripting-via-the-review-title-inside-data-args-review-title2026-11-07 https://bugrater.com/releases/cve-2026-118067-the-form-maker-by-10web-mobile-friendly-drag-drop-contact-form-builder-plugin-for-wordpress-is-vulnerable-to-stored-cross-site-scripting-via-the-wdform-fi2026-11-07