Automated cyber signal feeds.
CVE ID :CVE-2026-76788 Published : Oct. 19, 2026, 8:39 p.m. | 41 minutes ago Description :The OSDP Control Panel reply parser cp_decode_response() in subsys decodes replies from a Peripheral Device into a stack-allocated struct osdp_event. For the REPLY_KEYPPAD and REPLY_RAW reply…
CVE ID :CVE-2026-82166 Published : Oct. 19, 2026, 8:20 p.m. | 1 hour ago Description :Dell Application Store, versions prior to 26.05.0.7, contain a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this…
CVE ID :CVE-2026-112779 Published : Oct. 19, 2026, 8:17 p.m. | 1 hour, 2 minutes ago Description :Grav API plugin (grav-plugin-api) 1.0.40 before 1.0.42 caches a full translation dictionary for every well-formed language code sent to the unauthenticated GET /api/v1/translations/{lang} endpoint, and…
CVE ID :CVE-2026-112780 Published : Oct. 19, 2026, 8:17 p.m. | 1 hour, 2 minutes ago Description :Grav from 2.0.15 before 2.2.2 contains an allowlist bypass vulnerability that allows page editors to call arbitrary public static methods by renaming Flex form fields…
CVE ID :CVE-2026-112781 Published : Oct. 19, 2026, 8:17 p.m. | 1 hour, 2 minutes ago Description :Grav from 2.0.0 before 2.2.2 contains an information disclosure vulnerability that allows page editors to read protected configuration by adding config-*@ directives to page frontmatter…
CVE ID :CVE-2026-109437 Published : Oct. 19, 2026, 6:22 p.m. | 57 minutes ago Description :Cognition before 0.13.0 contains an unauthenticated remote code execution vulnerability due to defaulting its agent sandbox backend to local execution and shipping no authentication on its…
CVE ID :CVE-2026-112377 Published : Oct. 19, 2026, 6:17 p.m. | 1 hour, 3 minutes ago Description :CCC Attestation SIG attested-tls-poc through commit 731ca82 fails to bind early attestation Evidence to the TLS connection, allowing attackers to relay valid Evidence from a…
CVE ID :CVE-2026-111755 Published : Oct. 19, 2026, 6:17 p.m. | 1 hour, 3 minutes ago Description :follow-redirects is a Node.js HTTP and HTTPS client wrapper that automatically follows redirects. From 1.16.0 until 1.16.1, escapeRegex leaves valid header-name metacharacters unescaped in sensitiveHeaders.…
CVE ID :CVE-2026-105810 Published : Oct. 19, 2026, 6:16 p.m. | 1 hour, 3 minutes ago Description :Tapo C320WS V2.0 contains an authenticated stack-based buffer overflow in the local onboarding Wi-Fi configuration path. An authenticated attacker on the adjacent network can submit…
Threat actors have begun to exploit a chain of vulnerabilities in Plex Media Server to deploy cryptocurrency miners and reverse proxy software, a day after a proof-of-concept (PoC) went public. According to a researcher who goes by the online alias…