Latest Security Vulnerabilities

Tuesday October 20, 2026

Apple macOS

CVE-2026-86981 macOS OOB Write in Sequoia/Tahoe (before 15.8/26.7)
CVE-2026-65379 macOS Secure Input State RCE, fixed in 27, 15.8, 26.7
CVE-2026-65372 macOS Race Condition Bypasses Privacy Prefs (Fixed in 27, 15.8, 26.7)
CVE-2026-86932 Authorization Issue in macOS Golden Gate 27 Allows App Access to Sensitive Data
CVE-2026-86907 macOS Entitlement Check Bypass: Admin App Alters System Keychain 15.7/26.6
CVE-2026-84579 macOS Network Share File Exec (pre- Golden Gate 27/Sequoia 15.8/Tahoe 26.7)
CVE-2026-84547 Memory Corruption CVE-2026-84547 in macOS GoldG<27 Sequoia<15.8 Tahoe<26.7
CVE-2026-86979 macOS Golden Gate 27 Privacy Flaw: App Access to Sensitive Data
CVE-2026-86940 macOS Kernel Mem Disclosure (CVE202686940)
And others...

Apple Ios And Ipados

CVE-2026-86976 Apple iOS 27 App Data Leakage via Improper State Mngmt
CVE-2026-86975 Apple OS Image Decoder OOB Read CVE-2026-86975
CVE-2026-86962 Apple OS Double Free Vulnerability (iOS 26.7+, macOS Sequoia 15.8+)
CVE-2026-86957 Apple OS OOB Read Fixed in iOS 26.7, iPadOS 26.7, macOS Sequoia 15.8
CVE-2026-86961 Apple iOS/iPadOS/macOS 27 Sandbox Breakout Race Condition
CVE-2026-86944 Apple macOS Sequoia 15.8 OOB Write CVE-2026-86944
CVE-2026-86921 iOS 26.7/27 Permissions Flaw: Local Attacker Can Overwrite Files
CVE-2026-86918 Apple OS Image Parser OOB Write Causing App Crash (CVE-2026-86918)
CVE-2026-84613 Out-of-Bounds Write in Apple OS (iOS/iPadOS/macOS/tvOS) Fixed in 26.7-27
And others...

Apple Xcode

CVE-2026-86948 Apple Xcode 27: Library Validation Failure Enables Sandbox Breakout
CVE-2026-86874 CVE-2026-86874: Xcode 27 OOB Read in Binary Parser Causes Tool Crash
CVE-2026-86949 Apple Xcode 27 Sandbox Escape via Library Validation Bypass
CVE-2026-86875 Apple Xcode 27 Input Validation CVE-2026-86875

Google

CVE-2026-85267 CVE-2026-85267: Unauthenticated WebSocket Hijack in Google Cloud Shell

Apple Safari

CVE-2026-86922 Safari Type Confusion Vulnerability Arbitrary Code Execution
CVE-2026-86872 Logic Flaw in Safari Web Rendering Allows Unexpected Behavior

Apache AirFlow

CVE-2026-86467 Apache Airflow Amazon Provider <=9.37 SAML Login-CSRF Bystander Auto-Login

Asus Router

CVE-2026-17518 ASUS Router Buffer Copy (No Size Check) Enables Adjacent Authenticated DoS
CVE-2026-75753 CVE-2026-75753: Missing Auth for Critical HTTP Func in ASUS Routers

Apple visionOS

CVE-2026-28850 visionOS Auth Bypass for Sensitive Data Access

Apache

CVE-2026-92287 Apache Arrow Parquet/PyArrow KMS URL Pass-through (v4.0.0-25.0.1)

Unclassified

CVE-2026-93300 EventON - Subscriber WP Plugin SQLi (1.4.5)
CVE-2026-93878 DiviGear Carousel <=5.2.0 Stored XSS via update_license AJAX Action
CVE-2026-96902 Easy Property Listings <3.5.28 REST API Disclosure of Sensitive Listing Data
CVE-2026-96903 Easy Property Listings <3.5.27 AuthZ Bypass in AJAX CRM Actions
CVE-2026-14933 Unblu Spark XSS in co-browsing (v7.0-7.57.7/v8.0-8.39.2)
CVE-2026-9589 Auth bypass in Unblu Spark 7.0-8.36.1: unauthorized config read/write
CVE-2026-18205 Ticimax E-Commerce Platform: Reflected XSS via Input Neutralization
CVE-2026-77926 Aix-DB 1.2.4 RCE via ChatBI deepagents execute (auth non-admin)
CVE-2026-97627 Atsumi DVR admin can exec arbitrary OS commands
And others...

Nokia

CVE-2026-34485 Nokia 1830 GX CLI ACL Bypass via SSH Isolation Exploit
CVE-2026-34484 Nokia 1830 GX Local PrivEsc via Admin Shell

Advantech

CVE-2026-43843 Integer Overflow in License Manager Service Allow Crash (CVE-2026-43843)
CVE-2026-43853 Service Crash via Assertion Fault (CVE-2026-43853)
CVE-2026-43852 Authenticated File Write Vulnerability (CVE-2026-43852)
CVE-2026-43851 Path Traversal Allowing Authenticated File Read in Unknown System
CVE-2026-43850 Command Injection Enables Root-Level Execution
CVE-2026-43846 Stack-based Buffer Overflow in Unknown Software Leading to Code Exec
CVE-2026-43845 Auth Bypass via Password Reset Flaw
CVE-2026-43841 NULL Pointer Deref in License Manager Service (rpc_rx_fsm)
CVE-2026-43840 Null Pointer Deref in License Manager Service Crash via on_disconnected
And others...

Wso2 Enterprise Integrator

CVE-2024-2323 WSO2 IS RemoteUserStoreManagerService Password History Bypass Allows Brute-Force
CVE-2024-4412 WSO2 Identity Server EL Injection via Unvalidated Input

Coze Studio

CVE-2026-77934 Coze Studio <0.5.0: Untrusted Python subprocess in workflow code nodes
CVE-2026-77935 Insecure Direct Obj Ref in Coze Studio <=0.5.1 Workflow Mgmt Allows Data Leakage

Zyxel

CVE-2026-12489 Zyxel EX3501T0 firmware <=5.44: DAL Auth flaw enables PrivEsc

Facturascripts

CVE-2026-11959 Stored XSS in FacturaScripts 2025.61 ListAlmacen city/province fields
CVE-2026-11960 Unauthenticated Username Enumeration Vulnerability in FacturaScripts 2025.61

Chatchat Space Langchain Chatchat

CVE-2026-75128 Langchain-Chatchat <0.3.1.3: Auth Bypass RCE via tools/call

Dbgpt Db Gpt

CVE-2026-77932 DB-GPT 0.8.2 RCE via /api/v1/chat/react-agent (admin bypass)
CVE-2026-77933 DB-GPT 0.8.2 Hardcoded MYSQL_ROOT_PASSWORD in docker-compose.yml Exposes Port 3306

Letta

CVE-2026-77936 Letta 0.16.8 Unauthenticated API & Default PostgreSQL Credentials Exposed
CVE-2026-77937 Letta 0.16.8 Auth Bypass via user_id Header
CVE-2026-77938 Letta <=0.16.8 LocalSandbox env leak via tools/run

Monday October 19, 2026

IBM Storage Ts4500 Library

CVE-2025-36061 Denial of Service via SMTP in IBM Storage TS4500 Lib 1.1.1.61.12.0.3
CVE-2026-19178 IBM Storage TS4500 Library 1.1.1.6-1.12.0.3 Race Condition Remote Auth Priv Esc
CVE-2025-36252 IBM TS4500 Tape Lib 1.1.1.6-1.12.0.3 Session Invalidation Bypass
CVE-2025-36069 IBM TS4500 Library 1.1.1.6-1.12.0.3 Session Invalidation Allows Impersonation

IBM Mq Operator

CVE-2026-12148 IBM MQ Operator Unrestricted Java Deserialization (CVE-2026-12148)
CVE-2026-10574 IBM MQ Heap Buffer Overflow in MQPUT1 Leading to Arbitrary Code Execution
CVE-2026-12727 IBM MQ Off-by-One Buffer Overflow Allows Authenticated Process Instability
CVE-2026-10572 IBM MQ Heap Overflow via MQPUT may allow DoS or code execution
CVE-2026-11828 IBM MQ: Improper Queue Name Length Validation Client DS
CVE-2026-11829 IBM MQ DoS via Improper Offset Validation in MQOPEN
CVE-2026-11831 IBM MQ: Authenticated Bof Causes DoS & Info Leak via OOB Read in Client Request
CVE-2026-12343 IBM MQ RFH2 Header Validation DoS in Queued Pub/Sub
CVE-2026-12350 IBM MQ Authenticated DoS via Crafted Async Consume Request
And others...

Apache Camel

CVE-2026-83531 Apache Camel 4.22.1 Code Injection via Dynamic Router Control
CVE-2026-85314 Apache Camel Mail CVE-2026-85314 Implicit Input Validation (4.0.0-4.22.1)
CVE-2026-85296 Apache Camel AS2 Component: Cross-Partner Key Confusion pre-4.18.5/4.22.1
CVE-2026-85257 Apache Camel CXF: Sensitive Error Leak via SOAP Fault (pre 4.18.5/4.22.1)
CVE-2026-85250 Apache Camel XPath XEE (InputSource) <4.18.5, <4.22.1 hardening bypass
CVE-2026-84176 Apache Camel HTTP Vertx CORS Credential Bypass (4.18.5 & 4.22.1)
CVE-2026-91858 Apache Camel Fop: External Entity Exp. via JAXP TransformerFactory on 4.14.x
CVE-2026-78163 Apache Camel Docling SSRF/PathTraversal (4.18.5/4.22.1)
CVE-2026-78165 Camel Spring Redis: Untrusted Data Deserialization (4.18.5, 4.22.1)
And others...

FFmpeg

CVE-2025-52290 FFmpeg NPE DoS in avpriv_h264_has_num_reorder_frames

IBM Concert

CVE-2026-1510 IBM Concert 1.0-3.0.0 Info Disclosure via Heap Inspection
CVE-2026-3303 IBM Concert 1.0-3.0.0 CORS Misconfiguration Enables Privileged Actions
CVE-2026-3628 IBM Concert < 3.0.0 Info Disclosure via Schema Suggestions
CVE-2026-4405 IBM Concert 1.0-3.0.0 Local Cache Leakage to Other Users
CVE-2026-15661 Log Injection in IBM Concert 1.0-3.0.0 Log Messages

IBM Cloud Pak System

CVE-2026-4418 IBM Cloud Pak Sys 2.3.6.0 HTML Injection (remote auth)
CVE-2026-3295 IBM Cloud Pak System 2.3.6.x Stored XSS via Unsanitized User Input
CVE-2023-38375 IBM Cloud Pak System 2.3.6.01 XSS in Web UI
CVE-2026-3161 IBM Cloud Pak System 2.3.6.0/1 Weak Crypto Decrypt Sensitive Data

Qt

CVE-2026-8168 QtSvg Uncontrolled Recursion in SVG Parser Causing DoS

Apache Answer

CVE-2026-64944 Apache Answer 2.0.2 Stored XSS via Importer
CVE-2026-79633 Apache Answer <2.0.3 Unauth Access to Non-Public Content
CVE-2026-86589 Apache Answer 2.0.2 Auth Algorithm Flaw Bypasses Account Suspension

Hpe

CVE-2026-76740 HPE Compute Scale-up Server RMC RCE CVE-2026-76740
CVE-2026-76739 Remote RMC Filesystem Modification in HPE Compute Scaleup & Superdome Flex

Red Hat Enterprise Linux (RHEL)

CVE-2026-16460 bootc/ostree: Bypass Image Signature Validation on Reboot
CVE-2026-16487 Bootc SigPolicy Flaw Enables Unsigned Image Exec as Root

Unclassified

Dell

CVE-2026-86375 Dell App Installer pre-26.09.0.1: Missing Encryption of Sensitive Data
CVE-2026-82166 Dell Application Store < 26.05.0.7: Missing Auth for Critical Function
CVE-2026-71170 Dell Application Store < 26.05.0.7 Uncontrolled Path Element EoP Vulnerability