CVE ID :CVE-2026-109575 Published : Oct. 12, 2026, 8:17 p.m. | 14 minutes ago Description :In HAProxy Data Plane API 2.2.0 through 3.4.3 (and corresponding Enterprise Edition releases), Server.ConfigureAPI() has process-global authentication logic that improperly drops security controls across multiple transport…
CVE ID :CVE-2026-109422 Published : Oct. 12, 2026, 8:17 p.m. | 14 minutes ago Description :NetEase Cloud Music client for Windows (cloudmusic.exe) versions 3.1.38 and 3.1.39.205426 contains a remote code execution vulnerability in the renderer-process IPC bridge os.navigateExternal, which passes caller-supplied…
CVE ID :CVE-2026-109423 Published : Oct. 12, 2026, 8:17 p.m. | 14 minutes ago Description :NetEase Cloud Music client for Windows (cloudmusic.exe) versions 3.1.38 and 3.1.39.205426 contains a TLS certificate validation vulnerability that allows a network-adjacent attacker to intercept and decrypt…
CVE ID :CVE-2026-77366 Published : Oct. 12, 2026, 6:17 p.m. | 14 minutes ago Description :obsidian-tc is a governed, agent-ready Model Context Protocol server for Obsidian vaults. Prior to 1.3.1, tool dispatch does not compare the caller-controlled input.vault value with the…
CVE ID :CVE-2026-77363 Published : Oct. 12, 2026, 6:17 p.m. | 14 minutes ago Description :obsidian-tc is a governed, agent-ready Model Context Protocol server for Obsidian vaults. Prior to 1.3.1, the Streamable HTTP transport does not validate the Host or Origin…
CVE ID :CVE-2026-108917 Published : Oct. 12, 2026, 6:17 p.m. | 14 minutes ago Description :A vulnerability was determined in Edimax BR-6208AC 1.32. This issue affects some unknown processing of the file Executing a manipulation of the argument tftpsIP can…
CVE ID :CVE-2026-108918 Published : Oct. 12, 2026, 6:17 p.m. | 14 minutes ago Description :A vulnerability was identified in Edimax BR-6208AC 1.32. Impacted is an unknown function of the file The manipulation of the argument readE2P leads to command…
CVE ID :CVE-2026-108916 Published : Oct. 12, 2026, 6:17 p.m. | 14 minutes ago Description :A vulnerability was found in Edimax BR-6208AC 1.32. This vulnerability affects unknown code of the file Performing a manipulation of the argument submit-url results in…
CVE ID :CVE-2026-108963 Published : Oct. 11, 2026, 7:38 p.m. | 46 minutes ago Description :databasement before 1.8.2 allows remote code execution because it runs certain commands (e.g., mariadb-dump) with a database name that can be specified by any authenticated user.…
CVE ID :CVE-2026-108905 Published : Oct. 11, 2026, 3:16 p.m. | 3 hours, 7 minutes ago Description :pH7Builder (pH7 Social Dating CMS) before 18.6.0 contains a hard-coded API key vulnerability in Tool.class.php that allows unauthenticated attackers to bypass API access checks by…