🟠 CVE-2026-93017 - High (7.7)

The `insights-operator-gather` ClusterRole grants the operator's service account read access to s...

https://www.thehackerwire.com/vulnerability/CVE-2026-93017/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🔴 CVE-2026-95210 - Critical (9.1)

Improper certificate validation in gnutls v3.8.13 causes the application to accept certificates c...

https://www.thehackerwire.com/vulnerability/CVE-2026-95210/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-107322 - High (7.8)

An incomplete list of disallowed inputs in Amazon Agent Plugins for AWS databases-on-aws plugin b...

https://www.thehackerwire.com/vulnerability/CVE-2026-107322/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-106433 - High (8.8)

Improper state management in MongoDB libmongocrypt can cause provider-specific data to be treated...

https://www.thehackerwire.com/vulnerability/CVE-2026-106433/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-107384 - High (8.1)

MariaDB Connector/Node.js is used to connect applications developed on Node.js to MariaDB and MyS...

https://www.thehackerwire.com/vulnerability/CVE-2026-107384/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-107383 - High (7.5)

MariaDB Connector/Node.js is used to connect applications developed on Node.js to MariaDB and MyS...

https://www.thehackerwire.com/vulnerability/CVE-2026-107383/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🔴 CVE-2026-107699 - Critical (9.8)

ppt2png through 0.0.6 contains an OS command injection vulnerability that allows attackers to exe...

https://www.thehackerwire.com/vulnerability/CVE-2026-107699/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🔴 CVE-2026-107704 - Critical (9.8)

The image_optimizer Ruby gem 1.3.0 through 1.9.0 contains an OS command injection vulnerability i...

https://www.thehackerwire.com/vulnerability/CVE-2026-107704/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🔴 CVE-2026-107703 - Critical (9.8)

@enmaso/node-convert through 1.0.0 contains an OS command injection vulnerability in convert.js t...

https://www.thehackerwire.com/vulnerability/CVE-2026-107703/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-107701 - High (8.2)

dot-access through 1.0.0 contains a prototype pollution vulnerability that allows attackers to mo...

https://www.thehackerwire.com/vulnerability/CVE-2026-107701/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🔴 CVE-2026-107700 - Critical (9.8)

dot-access 0.0.3 through 1.0.0 contains a code injection vulnerability that allows remote attacke...

https://www.thehackerwire.com/vulnerability/CVE-2026-107700/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-84276 - High (7.5)

IBM Guardium Data Protection 12.2.2 is affected by a denial-of-service vulnerability in the edge-...

https://www.thehackerwire.com/vulnerability/CVE-2026-84276/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-107333 - High (8.1)

Malcolm's nginx based reverse proxy contains a URL path normalization inconsistency between its L...

https://www.thehackerwire.com/vulnerability/CVE-2026-107333/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-107303 - High (7.6)

JHipster is a development platform to quickly generate, develop, and deploy modern web applicatio...

https://www.thehackerwire.com/vulnerability/CVE-2026-107303/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-107302 - High (7.5)

msgpack5 is a msgpack v5 implementation for node.js and the browser. Prior to 6.1.0, the decoder ...

https://www.thehackerwire.com/vulnerability/CVE-2026-107302/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-107375 - High (8.8)

JHipster is a development platform to quickly generate, develop, and deploy modern web applicatio...

https://www.thehackerwire.com/vulnerability/CVE-2026-107375/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-107377 - High (7.5)

datamodel-code-generator generates Python data models from schema definitions. From 0.59.0 until ...

https://www.thehackerwire.com/vulnerability/CVE-2026-107377/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-107376 - High (8.2)

webonyx graphql-php is a PHP implementation of the GraphQL specification. Prior to 15.32.3, Graph...

https://www.thehackerwire.com/vulnerability/CVE-2026-107376/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🔴 CVE-2026-9209 - Critical (9.8)

mJobTime through build 15.7.3.32 contains an unauthenticated SQL execution vulnerability in the L...

https://www.thehackerwire.com/vulnerability/CVE-2026-9209/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack

🟠 CVE-2026-104078 - High (7.8)

Obsidian Desktop before 1.14.0 contains a filter bypass vulnerability in the bundled MathJax 3.2....

https://www.thehackerwire.com/vulnerability/CVE-2026-104078/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack