CVE-2026-108454 Microsoft Office PowerPoint Information Disclosure Vulnerability
Buffer over-read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.
EPSS 0.01 CVSS 6.5 CVE-2026-108454 Microsoft US
Výsledky hledání
· zachyceno
· zachyceno
CVE-2026-108453 Microsoft Office PowerPoint Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.
EPSS 0.01 CVSS 6.5 CVE-2026-108453 Microsoft US
· zachyceno
CVE-2026-108452 Microsoft Office SharePoint Remote Code Execution Vulnerability
Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
EPSS 0.01 CVSS 8.8 CVE-2026-108452 Microsoft US
· zachyceno
CVE-2026-108451 Microsoft Office Word Remote Code Execution Vulnerability
Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVSS 8.8 CVE-2026-108451 Microsoft US
· zachyceno
CVE-2026-108450 Microsoft Office Word Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVSS 8.8 CVE-2026-108450 Microsoft US
· zachyceno
CVE-2026-108449 Microsoft Office Word Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVSS 8.8 CVE-2026-108449 Microsoft US
· zachyceno
CVE-2026-108448 Microsoft Office Outlook Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
EPSS < 0.01 CVSS 7.5 CVE-2026-108448 Microsoft US
· zachyceno
CVE-2026-108447 Microsoft Office Word Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVSS 8.8 CVE-2026-108447 Microsoft US
· zachyceno
CVE-2026-108446 Microsoft Office Excel Remote Code Execution Vulnerability
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVSS 8.8 CVE-2026-108446 Microsoft US
· zachyceno
CVE-2026-108445 Microsoft Office Word Remote Code Execution Vulnerability
Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVSS 8.8 CVE-2026-108445 Microsoft US
· zachyceno
CVE-2026-108444 Microsoft Office Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVSS 8.8 CVE-2026-108444 Microsoft US
· zachyceno
CVE-2026-108443 Microsoft Office Word Remote Code Execution Vulnerability
Off-by-one error in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVSS 8.8 CVE-2026-108443 Microsoft US
· zachyceno
CVE-2026-108442 Microsoft Office Word Remote Code Execution Vulnerability
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVSS 8.8 CVE-2026-108442 Microsoft US
· zachyceno
CVE-2026-108441 Microsoft Office Word Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVSS 8.8 CVE-2026-108441 Microsoft US
· zachyceno
CVE-2026-108440 Microsoft Office Word Remote Code Execution Vulnerability
Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVSS 8.8 CVE-2026-108440 Microsoft US
· zachyceno
CVE-2026-108439 Microsoft Office Word Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVSS 8.8 CVE-2026-108439 Microsoft US
· zachyceno
CVE-2026-108438 Microsoft Office Word Information Disclosure Vulnerability
Use after free in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
EPSS 0.01 CVSS 6.5 CVE-2026-108438 Microsoft US
· zachyceno
CVE-2026-108437 Microsoft Office Word Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVSS 8.8 CVE-2026-108437 Microsoft US
· zachyceno
CVE-2026-108436 Microsoft Office Word Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
EPSS 0.01 CVSS 6.5 CVE-2026-108436 Microsoft US
· zachyceno
CVE-2026-108435 Microsoft Office Word Information Disclosure Vulnerability
Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
EPSS 0.01 CVSS 6.5 CVE-2026-108435 Microsoft US
· zachyceno
CVE-2026-108434 Microsoft Office Word Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
EPSS 0.01 CVSS 6.5 CVE-2026-108434 Microsoft US
· zachyceno
CVE-2026-108433 Microsoft Office Word Security Feature Bypass Vulnerability
Reliance on untrusted inputs in a security decision in Microsoft Office Word allows an unauthorized attacker to bypass a security feature locally.
EPSS < 0.01 CVSS 7.8 CVE-2026-108433 Microsoft US
· zachyceno
CVE-2026-108432 Microsoft Office Word Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVSS 8.8 CVE-2026-108432 Microsoft US
· zachyceno
CVE-2026-108431 Microsoft Office Word Remote Code Execution Vulnerability
Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVSS 8.8 CVE-2026-108431 Microsoft US
· zachyceno
CVE-2026-108430 Microsoft Office Word Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVSS 8.8 CVE-2026-108430 Microsoft US
· zachyceno
CVE-2026-108429 Microsoft Office Word Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVSS 8.8 CVE-2026-108429 Microsoft US
· zachyceno
CVE-2026-108428 Microsoft Office Word Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVSS 8.8 CVE-2026-108428 Microsoft US
· zachyceno
CVE-2026-108427 Microsoft Office Word Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVSS 8.8 CVE-2026-108427 Microsoft US
· zachyceno
CVE-2026-108426 Microsoft Office Word Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVSS 8.8 CVE-2026-108426 Microsoft US
Juniper Networks security advisory (AV26-1043)
Serial number: AV26-1043 Date: October 15, 2026 As of October 14, 2026, Juniper Networks is affected by vulnerabilities in the following products: Junos OS Versions prior to 23.2R2-S7.7 Version 23.4 prior to 23.4R2-S8.13 Version 24.2 prior to 24.2R2-S5.5 Version 24.4 prior to 24.4R2-S5 Version 25.2 prior to 25.2R2-S2 Version 25.4 prior to 25.4R1-S3 Version 26.2 prior to 26.2R1-S2 Junos OS Evolved Versions prior to 23.2R2-S7.7-EVO Version 23.4 prior to 23.4R2-S8.11-EVO Version 24.2 prior to 24…
Risolte vulnerabilità in prodotti TP-Link Omada
Risolte tre vulnerabilità di sicurezza, di cui due con gravità “alta”, nel prodotto Omada Controller di TP-Link. Tali vulnerabilità potrebbero consentire a un utente malintenzionato autenticato di eludere i meccanismi di autorizzazione ed eseguire operazioni non autorizzate sui sistemi interessati.
EPSS < 0.01 CVE-2026-102298 CVE-2026-107795 TP-Link IT
Rilevate vulnerabilità in Erlang/OTP
Rilevate due nuove vulnerabilità, di cui una con gravità "alta", in Erlang/OTP, piattaforma open source basata sul linguaggio Erlang e sul relativo set di librerie OTP, utilizzata per lo sviluppo di sistemi distribuiti ad alta disponibilità. Tale vulnerabilità, qualora sfruttata, potrebbe consentire ad un utente malintenzionato di compromettere la disponibilità del servizio sui sistemi interessati.
EPSS < 0.01 CVE-2026-94200 Erlang/OTP IT
Rilevate vulnerabilità in n8n
Rilasciati aggiornamenti di sicurezza per sanare molteplici vulnerabilità, di cui 10 con gravità “alta”, che interessano la piattaforma open-source per l'automazione dei workflow n8n.
EPSS 0.01 CVE-2026-110840 CVE-2026-110842 CVE-2026-110843 CVE-2026-110844 CVE-2026-110845 CVE-2026-110846 CVE-2026-110847 CVE-2026-110849 CVE-2026-110850 CVE-2026-110853 n8n IT
Juniper Networks: risolte vulnerabilità in Junos OS e Junos OS Evolved
Juniper Networks ha rilasciato aggiornamenti per risolvere numerose vulnerabilità, di cui 23 con gravità "critica" e 119 con gravità “alta”, nei sistemi operativi Junos OS e Junos OS Evolved.
Risolte vulnerabilità in OpenVPN
Aggiornamenti di sicurezza risolvono quattro vulnerabilità, di cui tre con gravità “alta”, in OpenVPN, software open-source per la creazione di reti private virtuali (VPN). Tali vulnerabilità potrebbero consentire a un utente malintenzionato di impersonare utenti o servizi legittimi, accedere a informazioni sensibili o compromettere da disponibilità del servizio.
EPSS < 0.01 CVE-2026-84471 CVE-2026-84790 CVE-2026-88964 OpenVPN IT
· zachyceno
J4Care dcm4che
View CSAF Summary Successful exploitation of these vulnerabilities could allow an attacker to delete stored medical images, disclose patient information, inject forged studies, reassign patient records, overwrite files, and cause a denial-of-service condition. The following versions of J4Care dcm4che are affected: dcm4chee-arc-light 5.35.1 (CVE-2026-97851, CVE-2026-107621, CVE-2026-105273, CVE-2026-101021, CVE-2026-105279, CVE-2026-105667) CVSS Vendor Equipment v3 9.1 J4Care dcm4chee-arc-light…
EPSS < 0.01 CVE-2026-101021 CVE-2026-105273 CVE-2026-105279 CVE-2026-105667 CVE-2026-107621 CVE-2026-97851 J4Care zdravotnictví US
· zachyceno
Thermo Fisher Torrent Suite Software
View CSAF Summary Successful exploitation of this vulnerability could allow an attacker to read arbitrary files on the Torrent Server. The following versions of Thermo Fisher Torrent Suite Software are affected: Torrent Suite Software <=5.18 (CVE-2026-107777) CVSS Vendor Equipment v3 6.5 Thermo Fisher Torrent Suite Software 1 Vulnerability Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Background Critical Infrastructure Sectors: Healthcare and Public Health…
EPSS < 0.01 CVE-2026-107777 Thermo Fisher zdravotnictví US
F5: risolte vulnerabilità nei prodotti NGINX
F5 ha rilasciato aggiornamenti di sicurezza che sanano alcune vulnerabilità, di cui 3 con gravità "critica" e 6 con gravità "alta", in prodotti NGINX, noto software per la gestione del traffico e degli applicativi web.
EPSS 0.01 CVE-2026-101019 CVE-2026-104939 CVE-2026-15176 CVE-2026-91184 CVE-2026-93479 CVE-2026-94197 CVE-2026-96615 CVE-2026-97205 CVE-2026-97629 F5 IT
SPOJENO PŘES CVE Risolte vulnerabilità in Progress MOVEit Transfer
Progress ha rilasciato aggiornamenti di sicurezza per sanare 12 vulnerabilità con gravità “alta” nel prodotto MOVEit Transfer. Tali vulnerabilità potrebbero consentire a un utente malintenzionato di eludere i meccanismi di autenticazione e di autorizzazione, di accedere a informazioni sensibili o compromettere la disponibilità del servizio dei sistemi interessati.
EPSS 0.01 CVSS 8.8 CVE-2026-87093 CVE-2026-89067 CVE-2026-89068 CVE-2026-89069 CVE-2026-89070 CVE-2026-89071 CVE-2026-89072 CVE-2026-89073 CVE-2026-89074 CVE-2026-89075 CVE-2026-89076 CVE-2026-89077 Progress MOVEit IT FI
Risolte vulnerabilità in Gitea
Rilasciati aggiornamenti di sicurezza per sanare 36 vulnerabilità, di cui una con gravità “critica” e due con gravità “alta”, in Gitea, piattaforma collaborativa open source per la gestione del codice sorgente e lo sviluppo di applicazioni software. Tali vulnerabilità, qualora sfruttate, potrebbero consentire a utenti malintenzionati di aggirare le restrizioni di sicurezza, leggere file arbitrari o eseguire codice arbitrario sui sistemi interessati.
EPSS 0.28 CVE-2026-59774 CVE-2026-66877 CVE-2026-71184 Gitea IT
2026-017: Critical Vulnerability in Cisco Secure Email Gateway
On 14 October 2026, Cisco published a security advisory addressing a critical vulnerability affecting the Advanced Malware Protection (AMP) feature of Cisco Secure Email Gateway. This vulnerability could allow an unauthenticated, remote attacker to write arbitrary files and execute commands with root privileges on the underlying operating system. The Cisco PSIRT is aware of active exploitation of this vulnerability. CERT-EU strongly recommends updating the Content Scanner Tools package or…
Cisco EU
SPOJENO PŘES CVE Kritische Sicherheitslücke in Cisco Secure Email Gateway - aktiv ausgenutzt - Updates verfügbar - CVE-2026-76519
15. Oktober 2026 Beschreibung In der Funktion Advanced Malware Protection (AMP) von Cisco Secure Email Gateway existiert eine kritische Sicherheitslücke. Die Schwachstelle beruht auf einer fehlerhaften Verarbeitung von E-Mail-Anhängen, wenn der File-Reputation-Dienst aktiviert ist. Laut Cisco wird die Sicherheitslücke bereits aktiv ausgenutzt. CVE-Nummer(n): CVE-2026-76519 CVSS Base Score: 9.8 Auswirkungen Nicht authentifizierte Angreifer:innen können aus der Ferne durch das Versenden einer E…
KEV ✓ EPSS 0.02 CVSS 9.8 CVE-2026-76519 Cisco AT IT FI FR CA US
SPOJENO PŘES CVE Risolta vulnerabilità in cURL
Rilasciati aggiornamenti di sicurezza per sanare una vulnerabilità con gravità "alta" in cURL, noto tool a linea di comando e libreria per il trasferimento dati. Tale vulnerabilità potrebbe consentire a un utente malintenzionato di eseguire codice arbitrario sui sistemi interessati.
EPSS 0.01 CVE-2026-92392 curl IT FI
Vulnerabilities in Slican telephone exchanges
CERT Polska has received a report about 3 vulnerabilities (CVE-2026-35088, CVE-2026-63314 and CVE-2026-63315) found in Slican telephone exchanges.
EPSS < 0.01 CVE-2026-35088 CVE-2026-63314 CVE-2026-63315 Slican telekomunikace PL
D-Link: disponibile PoC per lo sfruttamento della CVE-2026-110536
Disponibile un Proof of Concept (PoC) per lo sfruttamento della CVE-2026-110536, presente in dispositivi DIR-868L non più supportati. Tale vulnerabilità potrebbe consentire a un utente malintenzionato remoto non autenticato di eseguire codice arbitrario sui sistemi interessati.
EPSS 0.03 CVE-2026-110536 D-Link IT
Omisión de autenticación en Stela de Diaple Networking
Authentication bypass in Stela by Diaple Networking Thu, 10/15/2026 - 10:10 Aviso Affected Resources Stela, versions prior to 1.60.1. Description INCIBE has coordinated the publication of a critical severity vulnerability affecting Stela by Diaple Networking, an event and institutional management software product. The vulnerability was discovered by Xavi Márquez Gonzalez. The CVSS v4.0 base score, vector and CWE weakness type are as follows: CVE-2026-101287: CVSS v4.0: 9.3 | CVSS:4.0/AV:N/AC:L…
EPSS < 0.01 CVSS 9.3 CVE-2026-101287 Diaple Networking ES
SPOJENO PŘES CVE Palo Alto Networks: rilevato sfruttamento in rete della CVE-2026-0322 relativa a PAN-OS
Palo Alto Networks ha rilasciato aggiornamenti di sicurezza per sanare molteplici vulnerabilità, di cui una con gravità “alta” relativa a PAN-OS per la quale è stato rilevato lo sfruttamento attivo in rete.
KEV ✓ EPSS 0.02 CVSS 8.6 CVE-2026-0322 Palo Alto Networks IT FI US CA
· zachyceno
ZDI-26-777: Adobe Photoshop AdobePDFL PDF JPEG Parsing Integer Overflow Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Photoshop. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-83661.
EPSS < 0.01 CVSS 7.8 CVE-2026-83661 Adobe US
· zachyceno
ZDI-26-778: Adobe Photoshop DCM Pixel Data Parsing Integer Overflow Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Adobe Photoshop. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-95636.
EPSS < 0.01 CVSS 7.8 CVE-2026-95636 Adobe US
· zachyceno
ZDI-26-768: X.Org Server XInput ProcXIPassiveUngrabDevice Heap-based Buffer Overflow Privilege Escalation Vulnerability
This vulnerability allows local attackers to escalate privileges on affected installations of X.Org Server. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-93523.
EPSS < 0.01 CVSS 7.8 CVE-2026-93523 X.Org US
· zachyceno
ZDI-26-769: X.Org Server XKB XkbSetMap Request Out-Of-Bounds Read Information Disclosure Vulnerability
This vulnerability allows local attackers to disclose sensitive information on affected installations of X.Org Server. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 6.1. The following CVEs are assigned: CVE-2026-93524.
EPSS < 0.01 CVSS 6.1 CVE-2026-93524 X.Org US
· zachyceno
ZDI-26-770: SonicWall Secure Mobile Access unzip Directory Traversal Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of SonicWall Secure Mobile Access. Authentication is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.2. The following CVEs are assigned: CVE-2026-102257.
EPSS 0.01 CVSS 7.2 CVE-2026-102257 SonicWall US
· zachyceno
SPOJENO PŘES CVE ZDI-26-771: Fortinet FortiSandbox login_user_profile Hard-Coded Credentials Authentication Bypass Vulnerability
This vulnerability allows remote attackers to bypass authentication on affected installations of Fortinet FortiSandbox. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.3. The following CVEs are assigned: CVE-2026-107656.
EPSS 0.01 CVSS 9.6 CVE-2026-107656 Fortinet US FI
· zachyceno
ZDI-26-772: Fortinet FortiSandbox Admin Profile Improper Handling of Exceptional Conditions Denial-of-Service Vulnerability
This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Fortinet FortiSandbox. Authentication is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 4.9. The following CVEs are assigned: CVE-2026-106170.
EPSS < 0.01 CVSS 4.9 CVE-2026-106170 Fortinet US
· zachyceno
ZDI-26-773: NoMachine Named Pipe Incorrect Permission Assignment Local Privilege Escalation Vulnerability
This vulnerability allows local attackers to escalate privileges on affected installations of NoMachine. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-111184.
EPSS < 0.01 CVSS 7.8 CVE-2026-111184 NoMachine US
· zachyceno
ZDI-26-774: NoMachine Uncontrolled Search Path Element Local Privilege Escalation Vulnerability
This vulnerability allows local attackers to escalate privileges on affected installations of NoMachine. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-111185.
CVSS 7.8 CVE-2026-111185 NoMachine US
· zachyceno
ZDI-26-775: GStreamer rtpL16depay Heap-based Buffer Overflow Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The ZDI has assigned a CVSS rating of 9.8. The following CVEs are assigned: CVE-2026-111183.
EPSS 0.01 CVSS 9.8 CVE-2026-111183 GStreamer US
· zachyceno
ZDI-26-776: QNAP TS-453E syslog log_message Format String Remote Code Execution Vulnerability
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of QNAP TS-453E devices. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.5. The following CVEs are assigned: CVE-2018-10388, CVE-2018-10389.
EPSS 0.04 CVSS 7.5 CVE-2018-10388 CVE-2018-10389 QNAP US
· zachyceno
ZDI-26-758: Docker Buildx Filesystem Entitlements Protection Mechanism Failure Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Docker Buildx. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-93325.
CVSS 7.8 CVE-2026-93325 Docker US
· zachyceno
ZDI-26-759: X.Org Server XKB TextDoodad Double Free Privilege Escalation Vulnerability
This vulnerability allows local attackers to escalate privileges on affected installations of X.Org Server. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-88812.
EPSS < 0.01 CVSS 7.8 CVE-2026-88812 X.Org US