CVE ID :CVE-2026-108335 Published : Oct. 14, 2026, 9:39 p.m. | 8 minutes ago Description :When the password reset functionality is enabled, and email is configured, an attacker could take over any account using a brute-force attack. There is no rate limiting…
CVE ID :CVE-2026-71854 Published : Oct. 14, 2026, 9:17 p.m. | 30 minutes ago Description :OpenAEV is an open source platform allowing organizations to plan, schedule and conduct cyber adversary simulation campaign and tests. Prior to version 2.260622.0, on a default…
CVE ID :CVE-2026-57489 Published : Oct. 14, 2026, 9:17 p.m. | 30 minutes ago Description :FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.16.0, FileRise deployments with AUTH_BYPASS enabled trust the configured reverse-proxy…
CVE ID :CVE-2026-57490 Published : Oct. 14, 2026, 9:17 p.m. | 30 minutes ago Description :FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.16.0, when an administrator has enabled WebDAV, FileRise WebDAV Basic…
CVE ID :CVE-2026-61843 Published : Oct. 14, 2026, 9:17 p.m. | 30 minutes ago Description :FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.18.0, FileRise upload-enabled shared-folder and upload-only links do not reject…
Attackers are exploiting a critical flaw in Cisco Secure Email Gateway that lets a sender with no login write files to the appliance’s operating system, Cisco said in an advisory on Wednesday. The attacker sends an email with a crafted attachment through…
CVE ID :CVE-2026-92154 Published : Oct. 14, 2026, 6:19 p.m. | 25 minutes ago Description :F´ (F Prime) is a framework that enables development and deployment of spaceflight and other embedded software applications. Prior to 4.2.0, Svc::FileUplink handleDataPacket offset and size…
CVE ID :CVE-2026-92152 Published : Oct. 14, 2026, 6:19 p.m. | 25 minutes ago Description :F´ (F Prime) is a framework that enables development and deployment of spaceflight and other embedded software applications. From 4.1.0 until 4.2.0, Svc::GenericHub output-port dispatch is…
CVE ID :CVE-2026-88164 Published : Oct. 14, 2026, 6:19 p.m. | 25 minutes ago Description :Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network. Severity: 8.8 | HIGH Visit the link for more details,…
CVE ID :CVE-2026-86848 Published : Oct. 14, 2026, 6:19 p.m. | 25 minutes ago Description :A flaw was found in DPDK lib/vhost vhost-crypto. The indirect-descriptor snapshot double-fetches a guest descriptor next index, allowing a malicious guest to cause an out-of-bounds access…