🟠 CVE-2026-86865 - High (8.8)

Tanium addressed a SQL injection vulnerability in Asset.

https://www.thehackerwire.com/vulnerability/CVE-2026-86865/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🔴 CVE-2026-92397 - Critical (9.1)

A vulnerability has been found in Ruijie RG-EW3000GX EW_3.0(1)B11P380. Affected by this vulnerabi...

https://www.thehackerwire.com/vulnerability/CVE-2026-92397/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-92626 - High (7.5)

Control iD iDSecure versions prior to 4.8.3.0 are affected by an unauthenticated Denial of Serv...

https://www.thehackerwire.com/vulnerability/CVE-2026-92626/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-92625 - High (7.5)

Control iD iDSecure versions prior to 4.8.3.0 are affected by an unauthenticated Denial of Serv...

https://www.thehackerwire.com/vulnerability/CVE-2026-92625/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-92248 - High (7.8)

A flaw was found in the file-psd plugin in GIMP. When generating a thumbnail preview for a specia...

https://www.thehackerwire.com/vulnerability/CVE-2026-92248/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-69486 - High (8.8)

Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to ...

https://www.thehackerwire.com/vulnerability/CVE-2026-69486/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-85893 - High (8.8)

Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate priv...

https://www.thehackerwire.com/vulnerability/CVE-2026-85893/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-68070 - High (8.8)

The affected products are missing authentication for a critical function, which could allow an at...

https://www.thehackerwire.com/vulnerability/CVE-2026-68070/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🔴 CVE-2026-66890 - Critical (9.6)

The affected products use hard-coded credentials, which could allow remote access to files with r...

https://www.thehackerwire.com/vulnerability/CVE-2026-66890/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-88065 - High (7.5)

`tts-be` is a backend for a timetable selector that aims to help students better choose their cla...

https://www.thehackerwire.com/vulnerability/CVE-2026-88065/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🔴 CVE-2026-91939 - Critical (9.8)

Cotonti 1.0.0 Comments plugin passes the ci GET parameter to unserialize() without allowed_classe...

https://www.thehackerwire.com/vulnerability/CVE-2026-91939/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-92000 - High (7.5)

adm-zip versions 0.5.14 through 0.6.0 fail to apply zlib decompression output limits when ZIP ent...

https://www.thehackerwire.com/vulnerability/CVE-2026-92000/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-87289 - High (7.5)

Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-webserver-st...

https://www.thehackerwire.com/vulnerability/CVE-2026-87289/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-87288 - High (8.1)

Vulnerability in the Oracle GraalVM product of Oracle Java SE (component: Compiler). The suppor...

https://www.thehackerwire.com/vulnerability/CVE-2026-87288/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-87287 - High (8.1)

Vulnerability in the Oracle GraalVM product of Oracle Java SE (component: Compiler). The suppor...

https://www.thehackerwire.com/vulnerability/CVE-2026-87287/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-87286 - High (8.1)

Vulnerability in the Oracle GraalVM product of Oracle Java SE (component: Compiler). The suppor...

https://www.thehackerwire.com/vulnerability/CVE-2026-87286/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-88975 - High (7.5)

Http4s is a Scala interface for HTTP services. Prior to 0.23.37 and 1.0.0-M48, Ember’s HTTP/2 r...

https://www.thehackerwire.com/vulnerability/CVE-2026-88975/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🔴 CVE-2026-89040 - Critical (9.8)

Tencent Mass Service Engine in Cluster (MSEC) allows a remote, unauthenticated attacker to send a...

https://www.thehackerwire.com/vulnerability/CVE-2026-89040/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-69213 - High (7.5)

Http4s is a Scala interface for HTTP services. Prior to 0.23.35 and 1.0.0-M47, Ember HTTP/2 seria...

https://www.thehackerwire.com/vulnerability/CVE-2026-69213/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-92176 - High (7.8)

pdfforge PDF Architect App Object Out-Of-Bounds Read Remote Code Execution Vulnerability. This vu...

https://www.thehackerwire.com/vulnerability/CVE-2026-92176/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack