{"schema_version":"1.0","report_date":"2026-10-22","generated_at":"2026-10-22T15:11:23.434409+09:00","quality":"OK","source_count":13,"observed_total":5541,"catalog_total":250,"filtered_total":44,"page":1,"limit":20,"has_next":true,"items":[{"cves":[],"epss":null,"id":"GHSA-332p-7hrc-92wf","known_exploited":false,"published_date":"2026-10-22","resoarc_impact":"NOT_CONFIRMED","resoarc_response":"UNREVIEWED","response_difficulty":"unknown","severity":"CRITICAL","source":"GitHub Advisory","sources":["GitHub Advisory"],"summary":"``` ============================================================================ Heap buffer overflow in _tiffWriteProc when saving TIFF to BytesIO Location: src/libImaging/TiffDecode.c:94 in _tiffWriteProc() Commit: a707c6b21c313880d0771e54965d142dd42358b6 ==========================================","technologies":[{"group":"runtime","id":"python","label":"Python"}],"title":"Pillow: Heap buffer overflow in _tiffWriteProc when saving TIFF to BytesIO","url":"https://github.com/advisories/GHSA-332p-7hrc-92wf"},{"cves":[],"epss":null,"id":"GHSA-f2ph-cmg5-wxc8","known_exploited":false,"published_date":"2026-10-22","resoarc_impact":"NOT_CONFIRMED","resoarc_response":"UNREVIEWED","response_difficulty":"unknown","severity":"CRITICAL","source":"GitHub Advisory","sources":["GitHub Advisory"],"summary":"**Summary:** A malicious website may be able to cause unauthorized file changes in a developer’s project while an affected Storybook development server is running. Under additional conditions, a changed file could be executed by a local runtime with the developer’s privileges. We are not aware of ex","technologies":[],"title":"Storybook: Missing origin validation in Storybook preview allows code injection from malicious websites","url":"https://github.com/advisories/GHSA-f2ph-cmg5-wxc8"},{"cves":[],"epss":null,"id":"GHSA-w889-685w-c8fh","known_exploited":false,"published_date":"2026-10-22","resoarc_impact":"NOT_CONFIRMED","resoarc_response":"UNREVIEWED","response_difficulty":"unknown","severity":"CRITICAL","source":"GitHub Advisory","sources":["GitHub Advisory"],"summary":"### Summary `PIL.EpsImagePlugin.Ghostscript()` builds the Ghostscript command line using the input file path (`fp.name`) **without sanitization**, placing it at `-f <infile>`. A filename beginning with `-` is interpreted by Ghostscript as an option, giving command-line argument injection; chainable","technologies":[{"group":"runtime","id":"python","label":"Python"}],"title":"Pillow: Argument Injection in Ghostscript call, potentially leading into RCE","url":"https://github.com/advisories/GHSA-w889-685w-c8fh"},{"cves":[],"epss":null,"id":"CVE-2026-110264","known_exploited":false,"published_date":"2026-10-22","resoarc_impact":"NOT_CONFIRMED","resoarc_response":"UNREVIEWED","response_difficulty":"unknown","severity":"CRITICAL","source":"NVD","sources":["NVD"],"summary":"An issue has been discovered in GitLab CE/EE affecting all versions from 7.0 before 18.11.13, 19.0 before 19.0.10, 19.1 before 19.1.9, 19.2 before 19.2.9, 19.3 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that, under certain conditions, could have allowed an unauthenticated user to exec","technologies":[{"group":"devops","id":"gitlab","label":"GitLab"}],"title":"An issue has been discovered in GitLab CE/EE affecting all versions from 7.0 before 18.11.13, 19.0 before 19.0.10, 19.1 before 19.1.9, 19.2 before 19.2.9,","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-110264"},{"cves":[],"epss":null,"id":"CVE-2026-114575","known_exploited":false,"published_date":"2026-10-22","resoarc_impact":"NOT_CONFIRMED","resoarc_response":"UNREVIEWED","response_difficulty":"unknown","severity":"CRITICAL","source":"NVD","sources":["NVD"],"summary":"A flaw has been found in TOTOLINK A950RG 4.1.2cu.5268_B20221104. Affected by this issue is the function UploadCustomModule of the file lib/cste_modules/product.so. Executing a manipulation of the argument FileMd5 can lead to command injection. The attack can be launched remotely. The exploit has bee","technologies":[],"title":"A flaw has been found in TOTOLINK A950RG 4.1.2cu.5268_B20221104. Affected by this issue is the function UploadCustomModule of the file lib/cste_modules/pro","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-114575"},{"cves":[],"epss":null,"id":"CVE-2026-114661","known_exploited":false,"published_date":"2026-10-22","resoarc_impact":"NOT_CONFIRMED","resoarc_response":"UNREVIEWED","response_difficulty":"unknown","severity":"CRITICAL","source":"NVD","sources":["NVD"],"summary":"OpenRemote 1.2.0 before 1.31.0 contains a missing authorization vulnerability in GatewayServiceResource that allows any authenticated user to start, stop and query gateway tunnels without an administrative role. Attackers can send POST or DELETE requests to the gateway tunnel endpoint to open persis","technologies":[],"title":"OpenRemote 1.2.0 before 1.31.0 contains a missing authorization vulnerability in GatewayServiceResource that allows any authenticated user to start, stop a","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-114661"},{"cves":[],"epss":null,"id":"CVE-2026-109618","known_exploited":false,"published_date":"2026-10-21","resoarc_impact":"NOT_CONFIRMED","resoarc_response":"UNREVIEWED","response_difficulty":"unknown","severity":"CRITICAL","source":"PHP","sources":["PHP","NVD"],"summary":"21 Oct 2026 PHP 8.2.35 Released! The PHP development team announces the immediate availability of PHP 8.2.35. This is a security release fixing two critical vulnerabilities (CVE-2026-109618, CVE-2026-109619) that can allow unauthenticated remote code execution. All PHP 8.2 users are strongly encoura","technologies":[{"group":"runtime","id":"php","label":"PHP"}],"title":"PHP 8.2.35 Released!","url":"https://www.php.net/archive/2026.php"},{"cves":[],"epss":null,"id":"CVE-2026-109619","known_exploited":false,"published_date":"2026-10-21","resoarc_impact":"NOT_CONFIRMED","resoarc_response":"UNREVIEWED","response_difficulty":"unknown","severity":"CRITICAL","source":"PHP","sources":["PHP","NVD"],"summary":"21 Oct 2026 PHP 8.2.35 Released! The PHP development team announces the immediate availability of PHP 8.2.35. This is a security release fixing two critical vulnerabilities (CVE-2026-109618, CVE-2026-109619) that can allow unauthenticated remote code execution. All PHP 8.2 users are strongly encoura","technologies":[{"group":"runtime","id":"php","label":"PHP"}],"title":"PHP 8.2.35 Released!","url":"https://www.php.net/archive/2026.php"},{"cves":[],"epss":null,"id":"GHSA-6q48-6c7w-9gw2","known_exploited":false,"published_date":"2026-10-21","resoarc_impact":"NOT_CONFIRMED","resoarc_response":"UNREVIEWED","response_difficulty":"unknown","severity":"CRITICAL","source":"GitHub Advisory","sources":["GitHub Advisory"],"summary":"Certifi versions before 2026.10.18 include the `emSign ECC Root CA - G3` root certificate in their bundled CA store. Eight eMudhra intermediate CA certificates that chain to this root have compromised private keys and the CA has revoked them. An attacker with one of the compromised keys can issue va","technologies":[],"title":"certifi bundles emSign root CAs with compromised intermediate CA keys","url":"https://github.com/advisories/GHSA-6q48-6c7w-9gw2"},{"cves":[],"epss":null,"id":"GHSA-8g5g-8vmr-9782","known_exploited":false,"published_date":"2026-10-21","resoarc_impact":"NOT_CONFIRMED","resoarc_response":"UNREVIEWED","response_difficulty":"unknown","severity":"CRITICAL","source":"GitHub Advisory","sources":["GitHub Advisory"],"summary":"## Summary `JpegImageFile.draft()` — which `Image.thumbnail()` calls automatically — requests 1/2, 1/4 or 1/8 scaled JPEG output and shrinks `self._size` and the tile extents to match, so `_setimage()` allocates a single-row decode buffer of `ceil(W/s)` samples. `ImagingJpegDecode()` sets `cinfo.sca","technologies":[{"group":"runtime","id":"python","label":"Python"}],"title":"Pillow: Heap buffer overflow in ImagingJpegDecode","url":"https://github.com/advisories/GHSA-8g5g-8vmr-9782"},{"cves":[],"epss":null,"id":"GHSA-hq85-5cpj-mr62","known_exploited":false,"published_date":"2026-10-21","resoarc_impact":"NOT_CONFIRMED","resoarc_response":"UNREVIEWED","response_difficulty":"unknown","severity":"CRITICAL","source":"GitHub Advisory","sources":["GitHub Advisory"],"summary":"By default, uv verifies TLS connections against a vendored copy of the `webpki-root-certs` bundle. Versions before 0.13.4 include the `emSign ECC Root CA - G3` root. Eight eMudhra intermediate CA certificates that chain to that root have compromised private keys, and the CA has revoked them. An atta","technologies":[],"title":"uv's bundled CA store trusts an emSign root whose intermediate CA keys are compromised","url":"https://github.com/advisories/GHSA-hq85-5cpj-mr62"},{"cves":[],"epss":0.00462,"id":"CVE-2026-114053","known_exploited":false,"published_date":"2026-10-21","resoarc_impact":"NOT_CONFIRMED","resoarc_response":"UNREVIEWED","response_difficulty":"unknown","severity":"CRITICAL","source":"NVD","sources":["NVD"],"summary":"vLLM from 0.7.3 before 0.31.0 forwards the request-supplied mm_processor_kwargs.code_revision to Transformers AutoProcessor.from_pretrained, letting clients select which revision of a model's dynamic processor code is imported when trust_remote_code is enabled. An attacker controlling a revision in ","technologies":[],"title":"vLLM from 0.7.3 before 0.31.0 forwards the request-supplied mm_processor_kwargs.code_revision to Transformers AutoProcessor.from_pretrained, letting client","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-114053"},{"cves":[],"epss":0.00346,"id":"CVE-2026-114087","known_exploited":false,"published_date":"2026-10-21","resoarc_impact":"NOT_CONFIRMED","resoarc_response":"UNREVIEWED","response_difficulty":"unknown","severity":"CRITICAL","source":"NVD","sources":["NVD"],"summary":"Trigger.dev before 4.5.6 self-hosted Docker Compose deployments using the default secrets from hosting/docker/.env.example allow authentication bypass because the hardcoded MAGIC_LINK_SECRET lets anyone forge valid magic link tokens. Unauthenticated attackers can log in as any email address, then re","technologies":[{"group":"infra","id":"docker","label":"Docker"}],"title":"Trigger.dev before 4.5.6 self-hosted Docker Compose deployments using the default secrets from hosting/docker/.env.example allow authentication bypass beca","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-114087"},{"cves":[],"epss":0.00357,"id":"CVE-2026-114108","known_exploited":false,"published_date":"2026-10-21","resoarc_impact":"NOT_CONFIRMED","resoarc_response":"UNREVIEWED","response_difficulty":"unknown","severity":"CRITICAL","source":"NVD","sources":["NVD"],"summary":"HKUDS Vibe-Trading from 0.1.0 before 0.1.7 contains a missing authentication vulnerability that allows unauthenticated attackers to access the FastAPI surface because require_auth() returns early when API_AUTH_KEY is unset. Attackers can post messages to /sessions/{id}/messages to trigger root shell","technologies":[],"title":"HKUDS Vibe-Trading from 0.1.0 before 0.1.7 contains a missing authentication vulnerability that allows unauthenticated attackers to access the FastAPI surf","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-114108"},{"cves":[],"epss":0.00428,"id":"CVE-2026-114119","known_exploited":false,"published_date":"2026-10-21","resoarc_impact":"NOT_CONFIRMED","resoarc_response":"UNREVIEWED","response_difficulty":"unknown","severity":"CRITICAL","source":"NVD","sources":["NVD"],"summary":"Best Practice Software Bp Premier before 1.14.1.1128 uses a hardcoded Microsoft SQL Server administrative password that is shared across all installations and cannot be changed without breaking the application. Attackers with network access to the database instance can authenticate as sysadmin, bypa","technologies":[{"group":"database","id":"sqlserver","label":"SQL Server"}],"title":"Best Practice Software Bp Premier before 1.14.1.1128 uses a hardcoded Microsoft SQL Server administrative password that is shared across all installations","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-114119"},{"cves":[],"epss":0.00622,"id":"CVE-2026-113744","known_exploited":false,"published_date":"2026-10-21","resoarc_impact":"NOT_CONFIRMED","resoarc_response":"UNREVIEWED","response_difficulty":"unknown","severity":"CRITICAL","source":"NVD","sources":["NVD"],"summary":"A security vulnerability has been detected in Tenda AC19 16.03.10.07. The impacted element is the function formSetFirewallCfg of the file /goform/SetFirewallCfg of the component httpd Web Management Service. Such manipulation of the argument firewallEn leads to stack-based buffer overflow. The attac","technologies":[],"title":"A security vulnerability has been detected in Tenda AC19 16.03.10.07. The impacted element is the function formSetFirewallCfg of the file /goform/SetFirewa","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-113744"},{"cves":[],"epss":0.00484,"id":"CVE-2026-71195","known_exploited":false,"published_date":"2026-10-21","resoarc_impact":"NOT_CONFIRMED","resoarc_response":"UNREVIEWED","response_difficulty":"unknown","severity":"CRITICAL","source":"NVD","sources":["NVD"],"summary":"In OpenStack Manila before 23.0.1, multiple Manila API operations on public shares do not verify that the caller owns the share. The API controllers authorize operations against the caller's own project context, then load a foreign public share without re-authorizing against the share's actual owner","technologies":[],"title":"In OpenStack Manila before 23.0.1, multiple Manila API operations on public shares do not verify that the caller owns the share. The API controllers author","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-71195"},{"cves":[],"epss":null,"id":"CVE-2026-87095","known_exploited":false,"published_date":"2026-10-21","resoarc_impact":"NOT_CONFIRMED","resoarc_response":"UNREVIEWED","response_difficulty":"unknown","severity":"CRITICAL","source":"NVD","sources":["NVD"],"summary":"Sensitive information disclosure and manipulation due to improper authorization checks. The following products are affected: Acronis Cyber Infrastructure (ACI) before build 6.0.1-112, Acronis Cyber Infrastructure (ACI) before build 6.1.1-64, Acronis Cyber Infrastructure (ACI) before build 6.2.1-71.","technologies":[],"title":"Sensitive information disclosure and manipulation due to improper authorization checks. The following products are affected: Acronis Cyber Infrastructure (","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-87095"},{"cves":[],"epss":null,"id":"CVE-2026-114403","known_exploited":false,"published_date":"2026-10-21","resoarc_impact":"NOT_CONFIRMED","resoarc_response":"UNREVIEWED","response_difficulty":"unknown","severity":"CRITICAL","source":"NVD","sources":["NVD"],"summary":"PHPOffice PHPPresentation through 1.2.0 contains an insecure deserialization vulnerability that allows attackers to instantiate arbitrary PHP objects by supplying a crafted presentation file. Attackers can upload a ZIP containing PhpPresentation.xml that IOFactory::load passes to unserialize(), enab","technologies":[{"group":"runtime","id":"php","label":"PHP"}],"title":"PHPOffice PHPPresentation through 1.2.0 contains an insecure deserialization vulnerability that allows attackers to instantiate arbitrary PHP objects by su","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-114403"},{"cves":[],"epss":null,"id":"CVE-2026-111832","known_exploited":false,"published_date":"2026-10-21","resoarc_impact":"NOT_CONFIRMED","resoarc_response":"UNREVIEWED","response_difficulty":"unknown","severity":"CRITICAL","source":"NVD","sources":["NVD"],"summary":"Unrestricted Upload of File with Dangerous Type vulnerability in WP Mailster WP Mailster wp-mailster allows Upload a Web Shell to a Web Server.This issue affects WP Mailster: from n/a through 1.9.1.0.","technologies":[],"title":"Unrestricted Upload of File with Dangerous Type vulnerability in WP Mailster WP Mailster wp-mailster allows Upload a Web Shell to a Web Server.This issue a","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-111832"}],"caution":"Only the verified public snapshot's current item set is provided. This endpoint is not an exhaustive CVE archive."}