CVE-2026-116682
— FileBrowser Quantum: Symlink following escapes user scope allowing arbitrary file read ou…
FileBrowser Quantum is a free, self-hosted, web-based file manager. Prior to 1.5.2-stable and 2.0.1-beta, file read handling in backend/pkg/indexing/indexingFiles.go resolves symbolic links through G…
|
Path Traversal
Oct 27, 2026
Oct 27, 2026
Oct 27, 2026
Oct 27, 2026
CVE-2026-117526
— reduxjs redux-devtools Remotedev Server evalAction code injection
A vulnerability was found in reduxjs redux-devtools 5.0.0. Affected by this vulnerability is the function evalAction of the component Remotedev Server. The manipulation of the argument action results…
|
Injection
Oct 27, 2026
Oct 27, 2026
Oct 27, 2026
Oct 27, 2026
CVE-2026-116680
— Homebox generic notifier SSRF via HTTP redirect after URL validation
HomeBox is a home inventory and organization system. Prior to version 0.27.0, Homebox validates generic notifier URLs with ValidateNotifierURL before creation, update, testing, and scheduled delivery…
homebox
|
Server-Side Request Forgery
Oct 27, 2026
Oct 27, 2026
Oct 27, 2026
Oct 27, 2026
A double free in XKB SetGeometryin X.Org X Server before 21.1.25 and X Wayland before 24.1.14 could be used by attached clients to cause a crash or potentially code in the x server context.
Oct 27, 2026
Oct 27, 2026
Oct 27, 2026
Oct 27, 2026
CVE-2026-102816
— Unauthenticated Wireless Regulatory Region Configuration in TP-Link RE305
An authorization vulnerability exists in the country or region configuration interface of TP-Link RE305 V3. An unauthenticated attacker on the same local network may modify the wireless regulatory re…
Oct 27, 2026
Oct 27, 2026
Oct 27, 2026
Oct 27, 2026
CVE-2026-102815
— Command Injection in tmpServer Allows Local Privilege Escalation in TP-Link RE305
An
operating-system command injection vulnerability exists in the tmpServer
service of TP-Link RE305 V3. The service runs with root privileges and listens
on the local loopback interface. A local att…
Oct 27, 2026
Oct 27, 2026
Oct 27, 2026
Oct 27, 2026
CVE-2026-102814
— Improper Authentication in TP-Link TDDP v2 Allows Root Command Execution in TP-Link RE305
An
authentication weakness exists in the TP-Link TDDP v2 service of TP-Link RE305
V3. TDDP v2 uses a fixed and derivable cryptographic key, which may allow an
unauthenticated attacker on the same loc…
Oct 27, 2026
Oct 27, 2026
Oct 27, 2026
Oct 27, 2026
CVE-2026-102813
— Administrator Password Reset Through the Verification-Code Interface in TP-Link RE305
An authentication flaw exists in the password-recovery functionality of TP-Link RE305 V3. The verification-code interface allows an unauthenticated attacker on the same local network to trigger gener…
Oct 27, 2026
Oct 27, 2026
Oct 27, 2026
Oct 27, 2026
CVE-2026-102812
— Hardcoded AES-128 Key and Fixed IV in Configuration Backup Encryption in TP-Link RE305 an…
A hard-coded
cryptographic key vulnerability exists in the user-configuration backup
mechanism of TP-Link RE305 V3 and Archer C7 V5. A fixed AES-128 key and
initialization vector are embedded in the …
Oct 27, 2026
Oct 27, 2026
Oct 27, 2026
Oct 27, 2026
NextChat version 2.16.1 contains a client‑side cross‑site scripting (XSS) vulnerability in the Plugin Editor due to unsafe rendering of externally supplied OpenAPI plugin schema content. When a plugi…
|
Cross-Site Scripting
Oct 27, 2026
Oct 27, 2026
Oct 27, 2026
Oct 27, 2026
CVE-2026-108311
— Tanium addressed an insufficient logging vulnerability in Tanium Server.
Tanium addressed an insufficient logging vulnerability in Tanium Server.
server
|
Remote
|
Information Disclosure
Oct 27, 2026
Oct 27, 2026
Oct 27, 2026
Oct 27, 2026
CVE-2026-108303
— Tanium addressed an unauthorized code execution vulnerability in Certificate Manager.
Tanium addressed an unauthorized code execution vulnerability in Certificate Manager.
Remote
|
Authentication
Oct 27, 2026
Oct 27, 2026
Oct 27, 2026
Oct 27, 2026
CVE-2026-108316
— Tanium addressed an information disclosure vulnerability in Tanium Server.
Tanium addressed an information disclosure vulnerability in Tanium Server.
server
|
Remote
|
Information Disclosure
Oct 27, 2026
Oct 27, 2026
Oct 27, 2026
Oct 27, 2026
CVE-2026-116656
— Tanium addressed an uncontrolled resource consumption vulnerability in Enforce.
Tanium addressed an uncontrolled resource consumption vulnerability in Enforce.
enforce
|
Remote
|
Denial of Service
Oct 27, 2026
Oct 27, 2026
Oct 27, 2026
Oct 27, 2026
CVE-2026-108325
— Tanium addressed an insertion of sensitive information into log file vulnerability in Rep…
Tanium addressed an insertion of sensitive information into log file vulnerability in Reputation.
Oct 27, 2026
Oct 27, 2026
Oct 27, 2026
Oct 27, 2026
CVE-2026-116659
— Tanium addressed an uncontrolled resource consumption vulnerability in Enforce.
Tanium addressed an uncontrolled resource consumption vulnerability in Enforce.
enforce
|
Remote
|
Denial of Service
Oct 27, 2026
Oct 27, 2026
Oct 27, 2026
Oct 27, 2026
CVE-2026-108302
— Tanium addressed an improper access controls vulnerability in Comply.
Tanium addressed an improper access controls vulnerability in Comply.
comply
|
Remote
|
Authorization
Oct 27, 2026
Oct 27, 2026
Oct 27, 2026
Oct 27, 2026
CVE-2026-108306
— Tanium addressed a local privilege escalation vulnerability in End-User Notifications.
Tanium addressed a local privilege escalation vulnerability in End-User Notifications.
Oct 27, 2026
Oct 27, 2026
Oct 27, 2026
Oct 27, 2026
CVE-2026-108329
— Tanium addressed an unauthorized code execution vulnerability in Threat Response.
Tanium addressed an unauthorized code execution vulnerability in Threat Response.
Oct 27, 2026
Oct 27, 2026
Oct 27, 2026
Oct 27, 2026
CVE-2026-108332
— Tanium addressed an improper link resolution before file access vulnerability in Threat R…
Tanium addressed an improper link resolution before file access vulnerability in Threat Response Client Extension.
Oct 27, 2026
Oct 27, 2026
Oct 27, 2026
Oct 27, 2026
