This vulnerability allows remote attackers to initiate arbitrary server-side requests on affected installations of MLflow. Authentication is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.7. The following CVEs are assigned: CVE-2026-71211.
EPSS 0.00 CVSS 7.7 CVE-2026-71211 MLflow US
Classification: Critical, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: None, CVEs: , Summary: This security release features fixes for multiple issues. Because this is a security release, it is recommended that you update your sites immediately. As a courtesy, the security fixes were backported to all branches eligible to receive security fixes (currently through 4.7). As a reminder, only the most recent version of WordPress is actively supported. The backports are in…
WordPress FI
Classification: Low, Solution: Not Defined, Exploit Maturity: Not Defined, CVSSv3.1: None, CVEs: , Summary: On November 4, 2026, the Cisco Product Security Incident Response Team (PSIRT) will publish advisories to disclose security vulnerability information along with fixed software releases for the following Cisco products: Identity Services Engine (ISE) UCS Central Software Unified Communications Manager To remediate vulnerabilities to be disclosed on November 4, 2026, Cisco strongly…
Cisco FI
Classification: Critical, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: 9.6, CVEs: CVE-2026-118306, CVE-2026-118331, CVE-2026-118348, CVE-2026-118344, CVE-2026-118357, CVE-2026-118318, CVE-2026-118350, CVE-2026-118339, CVE-2026-118305, CVE-2026-118317, CVE-2026-118320, CVE-2026-118322, CVE-2026-118329, CVE-2026-118354, CVE-2026-118340, CVE-2026-118321, CVE-2026-118337, CVE-2026-118352, CVE-2026-118355, CVE-2026-118307 (+32 other associated CVEs), Summary: The Stable channel…
CVSS 9.6 Google FI
Classification: Critical, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv4.0: 9.1, CVEs: CVE-2026-108142, CVE-2026-108140, CVE-2026-108141, CVE-2026-105477, Summary: CVE-2026-108142 A vulnerability allowing an unauthenticated attacker to bypass authorization on the CDP Coordinator Service. Severity: Critical CVSS v4.0 Score: 9.1 Affected Deployment Type: Windows-based Veeam Backup & Replication | Veeam Software Appliance Affected Product Veeam Backup & Replication 13.1.1.18 and all…
EPSS 0.00 CVSS 9.1 CVE-2026-105477 CVE-2026-108140 CVE-2026-108141 CVE-2026-108142 Veeam FI
Classification: Critical, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: 9.9, CVEs: CVE-2026-48360, CVE-2026-104349, CVE-2026-104351, CVE-2026-104353, CVE-2026-105780, CVE-2026-105489, CVE-2026-105781, CVE-2026-104350, CVE-2026-104354, CVE-2026-105779, CVE-2026-48379, CVE-2026-48380, Summary: Adobe has released a priority 2 security update for Adobe Connect. This update resolves a vulnerability rated critical that could result in arbitrary code execution. Adobe has released a…
EPSS 0.01 CVSS 9.9 CVE-2026-104349 CVE-2026-104350 CVE-2026-104351 CVE-2026-104353 CVE-2026-104354 CVE-2026-105489 CVE-2026-105779 CVE-2026-105780 CVE-2026-105781 CVE-2026-48360 CVE-2026-48379 CVE-2026-48380 Adobe FI
Classification: Critical, Solution: Not Defined, Exploit Maturity: Not Defined, CVSSv3.1: None, CVEs: , Summary: On October 21, 2026, Node.js announced the availability of fixes for multiple vulnerabilities across the following supported release lines: 22.x, 24.x, and 26.x. These vulnerabilities impact critical operations such as the Brotli decoder, DNS resolution, and TLS certificate validation. The vulnerabilities pose risks for remote code execution and traffic interception. For more…
KEV ✓ EPSS 0.83 CVE-2026-105482 CVE-2026-105483 CVE-2026-106069 CVE-2026-111497 Node.js Cisco Splunk FI US IT
Classification: Severe, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: None, CVEs: , Summary: MFSA 2026-122: Security Vulnerabilities fixed in Thunderbird 153.6 MFSA 2026-121: Security Vulnerabilities fixed in Thunderbird 159 MFSA 2026-120: Security Vulnerabilities fixed in Firefox ESR 153.6 MFSA 2026-119: Security Vulnerabilities fixed in Firefox ESR 115.44 MFSA 2026-118: Security Vulnerabilities fixed in Firefox 159 See also: https://www.mozilla.org/en-US/security/advisories…
Mozilla FI
Classification: Critical, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: 9.5, CVEs: CVE-2026-97631, Summary: The vulnerability, with a severity rating of 9.5 out of 10, resides in the TianoCore EDK II, an open source codebase that hardware makers and cloud providers use to create the UEFI firmware that runs during the boot-up sequence. Last year, a representative of the UEFI Forum called EDK2 the “preeminent solution / implementation of the UEFI specifications.” Virtually all…
EPSS 0.01 CVSS 9.5 CVE-2026-97631 TianoCore Microsoft AMI Insyde FI IT
De multiples vulnérabilités ont été découvertes dans WordPress. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, un déni de service à distance et une atteinte à la confidentialité des données.
WordPress FR
De multiples vulnérabilités ont été découvertes dans Elastic Cloud Enterprise. Certaines d'entre elles permettent à un attaquant de provoquer une élévation de privilèges, une atteinte à la confidentialité des données et une atteinte à l'intégrité des données.
EPSS 0.00 CVE-2026-115706 CVE-2026-115707 CVE-2026-115708 CVE-2026-115709 CVE-2026-115711 CVE-2026-115712 CVE-2026-115713 Elastic FR
De multiples vulnérabilités ont été découvertes dans Foxit Online Services. Certaines d'entre elles permettent à un attaquant de provoquer une atteinte à la confidentialité des données, une atteinte à l'intégrité des données et une falsification de requêtes côté serveur (SSRF).
EPSS 0.00 CVE-2026-111417 CVE-2026-111418 CVE-2026-111419 Foxit FR
Une vulnérabilité a été découverte dans les produits Kaspersky. Elle permet à un attaquant de provoquer un déni de service.
EPSS 0.00 CVE-2026-88941 Kaspersky FR
De multiples vulnérabilités ont été découvertes dans Apache Kafka. Certaines d'entre elles permettent à un attaquant de provoquer un déni de service à distance, une atteinte à la confidentialité des données et une atteinte à l'intégrité des données.
EPSS 0.00 CVE-2026-110952 CVE-2026-110985 CVE-2026-111073 CVE-2026-111108 CVE-2026-111115 CVE-2026-111496 CVE-2026-111551 CVE-2026-112375 CVE-2026-114349 CVE-2026-115644 CVE-2026-116593 CVE-2026-83525 Apache FR
De multiples vulnérabilités ont été découvertes dans les produits Juniper Networks. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, une élévation de privilèges et un déni de service à distance.
EPSS 0.01 a dalších 1 CVE-2026-103391 CVE-2026-103392 CVE-2026-103393 CVE-2026-103394 CVE-2026-103400 CVE-2026-103401 CVE-2026-103402 CVE-2026-103403 CVE-2026-103404 CVE-2026-103405 CVE-2026-103406 CVE-2026-103407 CVE-2026-103408 CVE-2026-103409 CVE-2026-103410 CVE-2026-103411 CVE-2026-106079 Juniper Networks FR
De multiples vulnérabilités ont été découvertes dans PostgreSQL Anonymizer. Certaines d'entre elles permettent à un attaquant de provoquer un déni de service à distance, une atteinte à la confidentialité des données et un contournement de la politique de sécurité.
EPSS 0.00 CVE-2026-105612 CVE-2026-105613 CVE-2026-105614 CVE-2026-105615 CVE-2026-105616 CVE-2026-105617 CVE-2026-105618 CVE-2026-105619 CVE-2026-105620 CVE-2026-110181 CVE-2026-110182 CVE-2026-110183 PostgreSQL Anonymizer FR
De multiples vulnérabilités ont été découvertes dans Veeam Backup for Microsoft 365. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, une élévation de privilèges et une atteinte à la confidentialité des données.
EPSS 0.00 CVE-2025-64394 CVE-2026-106076 CVE-2026-106077 CVE-2026-106078 Veeam FR
Une vulnérabilité a été découverte dans les produits NetApp. Elle permet à un attaquant de provoquer une élévation de privilèges.
EPSS 0.00 CVE-2021-42554 NetApp FR
Serial number: AV26-1101 Date: October 28, 2026 As of October 28, 2026, Juniper Networks is affected by vulnerabilities in the following products: Session Smart Conductor Prior to 7.0.5 Prior to 7.1.7 Prior to 7.2.3 Session Smart Router Prior to 7.0.5 Prior to 7.1.7 Prior to 7.2.3 The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available. 2026-10 On-Demand Security Bulletin: Session Smart Router and Session…
Serial number: AV26-1100 Date: October 28, 2026 As of October 27, 2026, Mozilla is affected by vulnerabilities in the following products: Firefox Prior to 159 Firefox ESR Prior to 115.44 Prior to 153.6 Thunderbird Prior to 159 Prior to 153.6 The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available. Mozilla Foundation Security Advisory 2026-118 Mozilla Foundation Security Advisory 2026-119 Mozilla Foundation…
Mozilla CA
Serial number: AV26-1099 Date: October 28, 2026 As of October 26, 2026, Apple is affected by vulnerabilities in the following products: iOS and iPadOS Prior to 18.7.11 Prior to 26.7.2 Prior to 27.2 MacOS (Golden Gate/Tahoe/Sequoia) Prior to 27.2 Prior to 26.7.2 Prior to 15.8.2 visionOS Prior to 27.2 tvOS Prior to 27.2 watchOS Prior to 27.2 Safari Prior to 27.2 The Cyber Centre encourages users and administrators to review the provided web link and apply any necessary updates as they become…
Apple CA
Serial number: AV26-028 Date: October 28, 2026 Audience This Alert is intended for IT professionals and managers. Purpose An Alert is used to raise awareness of a recently identified cyber threat that may impact cyber information assets, and to provide additional detection and mitigation advice to recipients. The Canadian Centre for Cyber Security ("Cyber Centre") is also available to provide additional assistance regarding the content of this Alert to recipients as requested. Details The…
Serial number: AV26-1098 Date: October 28, 2026 As of October 28, 2026, Progress is affected by a vulnerability in the following product: Telerik Document Processing Libraries Prior to 2026.3.1027 The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available. Document Processing Libraries Uncontrolled Resource Consumption in Telerik Document Processing Libraries RadWordsProcessing (CVE-2026-118035) Progress Trust…
EPSS 0.00 CVE-2026-118035 Progress CA
On November 4, 2026, the Cisco Product Security Incident Response Team (PSIRT) will publish advisories to disclose security vulnerability information along with fixed software releases for the following Cisco products: Identity Services Engine (ISE) UCS Central Software Unified Communications Manager To remediate vulnerabilities to be disclosed on November 4, 2026, Cisco strongly recommends that customers upgrade to the fixed software indicated in the advisories. Important: The Cisco PSIRT does…
Cisco US
Serial number: AV26-1097 Date: October 28, 2026 As of October 27, 2026, Tanium is affected by vulnerabilities in the following products: Certificate Manager Prior to 1.17.417 Prior to 1.18.368 Prior to 1.22.119 Endpoint Configuration Toolset Solution Prior to 1.51.60 Prior to 1.59.50 Prior to 1.71.25 Enforce Prior to 2.10.778 Prior to 2.9.736 Prior to 3.0.373 Provision Prior to 1.17.150 Prior to 1.23.161 Prior to 1.24.199 Threat Response Prior to 4.12.349 Prior to 4.17.327 Prior to 4.9.476 end…
Tanium CA
Serial number: AV26-1096 Date: October 28, 2026 As of October 27, 2026, Veeam is affected by vulnerabilities in the following products: Veeam Agent for Linux Prior to 13.1.2 Veeam Backup and Replication Prior to 13.0.3 Prior to 13.1.2 Veeam Backup for Microsoft 365 Prior to or equal to 8.5.0.1014 Prior to or equal to 8.6.0.1102 Veeam ONE Prior to or equal to 13.1.0.7233 The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they…
Veeam CA
Serial number: AV26-1095 Date: October 28, 2026 As of October 27, 2026, Google is affected by vulnerabilities in the following product: Stable Channel Chrome for Desktop Versions prior to 156.0.8078.73/.74 (Windows/Mac), and 156.0.8078.73 (Linux) The Cyber Centre encourages users and administrators to review the provided web link and apply any necessary updates as they become available. Google Chrome Security Advisory
Google CA
Serial number: AV26-1094 Date: October 28, 2026 As of October 27, 2026, WatchGuard is affected by vulnerabilities in the following products: Fireware OS Multiple versions Mobile VPN with SSL Client Prior to 2026.4 Prior to 12.0 The Cyber Centre encourages users and administrators to review the provided web link and apply any necessary updates as they become available. WatchGuard Security Advisories
WatchGuard CA
Serial number: AV26-1093 Date: October 28, 2026 As of October 27, 2026, TeamViewer is affected by vulnerabilities in the following products: TeamViewer Full Client & Host (Windows) Prior to 15.83 TeamViewer Full Client & Host (Linux) Prior to 15.83 TeamViewer Full Client & Host (macOS) Prior to 15.83 TeamViewer Host (Windows, Linux, macOS) Prior to 15.83 TeamViewer Portable (Windows) Prior to 15.83 TeamViewer Remote Control App (Android) Prior to 15.8.3 The Cyber Centre encourages users and…
TeamViewer CA
Aggiornamenti di sicurezza Dell Technologies sanano molteplici vulnerabilità, di cui 7 con gravità "critica" e 18 con gravità "alta" che interessano i prodotti PowerProtect Data Domain, Data Domain Virtual Edition e Dell APEX Protection Storage, soluzioni di storage per backup e protezione dei dati basate sulla tecnologia Data Domain.
EPSS 0.03 a dalších 8 CVE-2026-86379 CVE-2026-86380 CVE-2026-86384 CVE-2026-86385 CVE-2026-86389 CVE-2026-86393 CVE-2026-86394 CVE-2026-86395 CVE-2026-86396 CVE-2026-86397 CVE-2026-86398 CVE-2026-86399 CVE-2026-86400 CVE-2026-90717 CVE-2026-90718 CVE-2026-94346 CVE-2026-94347 Dell IT
Serial number: AV26-1092 Date: October 28, 2026 As of October 27, 2026, Adobe is affected by vulnerabilities in the following products: Adobe Substance 3D Painter Prior to or equal to 12.1.5 Creative Cloud Desktop Application Prior to or equal to 6.10 Adobe Campaign Classic Prior to or equal to 7.4.4 build 9402 Adobe Connect Android Mobile App Prior to or equal to 4.4 Adobe Connect Desktop App Prior to or equal to 2026.8.51 (Win), 2026.08.45 (Mac Silicon), 2026.01.39 (Mac Intel) The Cyber…
Adobe CA
Arista heeft een kritieke kwetsbaarheid verholpen in VeloCloud Orchestrator (VCO) On-Prem. De kwetsbaarheid met kenmerk CVE-2026-114625 heeft een CVSS-score van 9.9 en betreft SQL-injectie. Een geauthenticeerde kwaadwillende kan de kwetsbaarheid op afstand misbruiken om verhoogde rechten te verkrijgen en zich voor te doen als een lokale 'superuser operator'. Hierdoor kan de kwaadwillende toegang krijgen tot interne beheerfunctionaliteiten en mogelijk de vertrouwelijkheid, integriteit en…
KEV ✓ EPSS 0.01 CVE-2026-114625 Arista Arista Networks NL CA IT US
Rilevate 11 vulnerabilità, di cui 3 con gravità “alta”, nei prodotti Acronis Cyber Protect 17 e Cyber Protect Cloud Agent. Tali vulnerabilità, qualora sfruttate, potrebbero consentire ad un utente malintenzionato di accedere ad informazioni sensibili e manipolarle, nonché di elevare i propri privilegi sui sistemi interessati.
EPSS 0.00 CVE-2025-30414 CVE-2026-87102 CVE-2026-87103 Acronis IT
On October 27, Google issued a new Stable channel update for Chrome. Most users are on Chrome’s Stable channel. The desktop update brings Chrome to versions 156.0.8078.73/.74 for Windows and Mac and 156.0.8078.73 for Linux. The update includes 52 security fixes, including four rated Critical. On the same day, Mozilla issued Security Advisory 2026-118, which fixes 167 vulnerabilities. Firefox 159 also introduces several new features. Both updates will roll out over the coming days and weeks. How…
Path Traversal vulnerability (CVE-2026-105420) has been found in Wing FTP Server software.
EPSS 0.01 CVE-2026-105420 Wing FTP Server PL
Google ha rilasciato un aggiornamento per il browser Chrome al fine di correggere 52 nuove vulnerabilità di sicurezza, di cui 4 con gravità “critica” e 46 con gravità “alta”.
Google IT
Cisco heeft kwetsbaarheden verholpen in Secure Firewall ASA, Threat Defense en Management Center softwareproducten. Cisco heeft de kwetsbaarheden gegroepeerd naar acht verschillende kwetsbaarheidsklassen (CWE's) en aan iedere groep één CVE-kenmerk toegekend. De kwetsbaarheden betreffen verschillende beveiligingsproblemen, waaronder onvoldoende toegangscontrole, onjuiste verwerking van invoergegevens, fouten in beveiligingsmechanismen en onjuiste afhandeling van uitzonderingssituaties. Vier van…
KEV ✓ · ransomware EPSS 0.89 CVE-2026-20079 CVE-2026-20316 CVE-2026-20329 CVE-2026-20330 CVE-2026-20331 CVE-2026-20332 Cisco NL
Background Network-connected surveillance cameras are now widespread in both home and enterprise environments, so securing them is essential to safeguarding physical spaces and sensitive assets. As these devices continue to gain new features and network connectivity capabilities, vulnerabilities in their implementation can have significant security implications. During our research, we discovered a denial-of-service vulnerability that affects Intelbras IP cameras systems. The flaw resides in a…
Intelbras RU
Veeam ha rilasciato aggiornamenti di sicurezza per risolvere 9 vulnerabilità, di cui 2 con gravità “critica” e 3 con gravità “alta”, nei prodotti Backup and Replication, ONE, Agent per Linux e Backup per Microsoft 365.
EPSS 0.00 CVE-2026-105477 CVE-2026-106076 CVE-2026-106077 CVE-2026-107671 CVE-2026-108142 Veeam IT
TeamViewer ha rilasciato aggiornamenti di sicurezza per sanare 9 vulnerabilità con gravità “alta” in vari prodotti. Tali vulnerabilità potrebbero consentire a un attaccante, in alcuni casi non autenticato, di elevare i propri privilegi o di eseguire codice arbitrario sui sistemi interessati.
EPSS 0.00 CVE-2026-111582 CVE-2026-111583 CVE-2026-111584 CVE-2026-111585 CVE-2026-92372 CVE-2026-92374 CVE-2026-92375 CVE-2026-92376 CVE-2026-92377 TeamViewer IT
Splunk heeft meerdere kwetsbaarheden verholpen in Splunk Enterprise. In Splunk Enterprise zijn verschillende kwetsbaarheden aanwezig in versies eerder dan 10.4.4 (en enkele andere specifieke versies). Deze omvatten onder andere: - onjuiste verificatie in de Data Management REST API waardoor gebruikers met bepaalde rollen toegang kunnen krijgen tot of verwijderen van SPL2 preview jobs en resultaten die zij niet bezitten - onvoldoende limieten in request-header parsing in de JavaScript logger…
Splunk NL
Aggiornamenti di sicurezza sanano una vulnerabilità con gravità "alta" in OAuthLib, libreria open source per Python ampiamente utilizzata per l'implementazione dei protocolli di autorizzazione OAuth 1.0 e OAuth 2.0. Tale vulnerabilità, qualora sfruttata, potrebbe consentire ad un utente malintenzionato di eludere i meccanismi di autenticazione sui sistemi interessati.
SQL injection (SQLi) in the user authentication module of Futurum Software Wed, 10/28/2026 - 09:52 Aviso Affected Resources User authentication module for the business management platform. Description INCIBE has coordinated the disclosure of a critical severity vulnerability affecting the user authentication module of Futurum Software, a cloud-based business management platform designed to create and manage multi-level marketing businesses. The vulnerability was discovered by Diego González…
EPSS 0.00 CVSS 9.1 CVE-2026-14571 Futurum Software ES
Multiple Vulnerabilities in Tactis' NoviGest Desktop App Wed, 10/28/2026 - 09:47 Aviso Affected Resources NoviGest Desktop App, version 7.4.4-292: Java RMI service and XML file import from the SAFT module. Description INCIBE has coordinated the disclosure of two vulnerabilities—one critical and one high severity—that affect NoviGest Desktop App by Tactis Serviços Informáticos, LDA, a clinical management software application. The vulnerabilities were discovered by Pablo Jordán Lucia and Marina…
EPSS 0.00 CVSS 9.4 CVE-2026-112197 CVE-2026-112198 Tactis zdravotnictví ES
WatchGuard ha rilasciato aggiornamenti di sicurezza per sanare molteplici vulnerabilità, di cui 7 con gravità “critica” e 7 con gravità “alta”, in Fireware OS, sistema operativo utilizzato nei dispositivi di sicurezza perimetrale e di protezione delle reti. Tali vulnerabilità potrebbero consentire a un utente malintenzionato, in determinate condizioni, di eseguire codice arbitrario, di eludere i meccanismi di autenticazione, di accedere a informazioni sensibili o di compromettere la disponibilit
EPSS 0.01 CVE-2026-103593 CVE-2026-103594 CVE-2026-111107 CVE-2026-112709 CVE-2026-112710 CVE-2026-90442 CVE-2026-90464 CVE-2026-90465 CVE-2026-93434 CVE-2026-93857 CVE-2026-93862 CVE-2026-93864 CVE-2026-93865 CVE-2026-93866 WatchGuard IT
Adobe ha rilasciato aggiornamenti di sicurezza per risolvere 12 vulnerabilità, di cui 9 con gravità “critica” e 2 con gravità “alta”, nei prodotti Substance 3D Painter, Connect Desktop, Connect Mobile, Campaign Classic, Creative Cloud Desktop Application.
EPSS 0.01 CVE-2026-104349 CVE-2026-104350 CVE-2026-104351 CVE-2026-104353 CVE-2026-104354 CVE-2026-105489 CVE-2026-105779 CVE-2026-105780 CVE-2026-105781 CVE-2026-48360 CVE-2026-48379 Adobe IT
Aggiornamenti di sicurezza sanano 180 vulnerabilità di sicurezza, di cui 3 con gravità “critica” e 113 con gravità “alta”, nei prodotti Firefox, Firefox ESR, Thunderbird.
Mozilla IT
Executive Summary Node.js has fixed CVE-2026-111497, a Brotli decoder flaw that can permit remote code execution, in 22.23.4, 24.22.1, and 26.12.1, but upgrading at scale is slow. In Qualys telemetry, only 42,000 of roughly 3 million Node.js installations have been patched, and 1.7 million run end-of-life lines that will never receive a fix. In the meantime, interim mitigations from the Qualys Threat Research Unit narrow the Brotli, DNS, TLS, and keep-alive attack paths, and WAF, IPS, and EDR…
KEV ✓ EPSS 0.83 CVE-2026-105481 CVE-2026-105482 CVE-2026-105483 CVE-2026-106069 CVE-2026-106071 CVE-2026-106072 CVE-2026-106073 CVE-2026-111497 Node.js US
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Apple Safari. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 8.8. The following CVEs are assigned: CVE-2026-86974.
EPSS 0.00 CVSS 8.8 CVE-2026-86974 Apple US
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Apple macOS. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 3.3. The following CVEs are assigned: CVE-2026-112656.
EPSS 0.00 CVSS 3.3 CVE-2026-112656 Apple US
This vulnerability allows local attackers to escalate privileges on affected installations of AVG Internet Security. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.3. The following CVEs are assigned: CVE-2026-6064.
EPSS 0.00 CVSS 7.3 CVE-2026-6064 AVG US
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Valkey. Authentication is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 8.8.
CVSS 8.8 Valkey US
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ultralytics. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-118613.
EPSS 0.00 CVSS 7.8 CVE-2026-118613 Ultralytics US
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ultralytics. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-118614.
EPSS 0.00 CVSS 7.8 CVE-2026-118614 Ultralytics US
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ultralytics. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-118615.
EPSS 0.00 CVSS 7.8 CVE-2026-118615 Ultralytics US
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ultralytics. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-118616.
EPSS 0.00 CVSS 7.8 CVE-2026-118616 Ultralytics US
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ultralytics. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-118617.
EPSS 0.00 CVSS 7.8 CVE-2026-118617 Ultralytics US
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ultralytics. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-118618.
EPSS 0.00 CVSS 7.8 CVE-2026-118618 Ultralytics US
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ultralytics. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 8.8. The following CVEs are assigned: CVE-2026-118619.
EPSS 0.01 CVSS 8.8 CVE-2026-118619 Ultralytics US
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Alpine iLX-F511 devices. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 6.3. The following CVEs are assigned: CVE-2026-118601.
EPSS 0.00 CVSS 6.3 CVE-2026-118601 Alpine US