🚨 EUVD-2026-100576 📊 8.7/10 🏢 Omnispace 📝 Omnispace Agora Project before 26.10.0 contains a broken access control vulnerability in the MobileFileDownload route that allows unauthenticated atta... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-100576 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2026-100578 📊 8.6/10 🏢 Omnispace 📝 Omnispace Agora Project before 26.10.0 contains a SQL injection vulnerability in the calendar functionality that allows attackers to inject malicious ... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-100578 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2022-27961 📊 9.8/10 📝 build_model in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow. 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-27961 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2026-100582 📊 7.1/10 🏢 Omnispace 📝 Omnispace Agora Project before 26.10.0 contains a broken access control vulnerability that allows a regular, non-administrative member to create user ... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-100582 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2026-101087 📊 4.3/10 🏢 Gitea 📝 Gitea's user organization-list API includes Limited-visibility organizations for authenticated restricted accounts without applying the visibility restric... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-101087 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2026-100580 📊 8.6/10 🏢 Omnispace 📝 Omnispace Agora Project before 26.10.0 contains a broken access control vulnerability that allows a space administrator to assign users into spaces ou... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-100580 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2026-98835 📊 6.9/10 🏢 axios 📝 Axios is a promise-based HTTP client for the browser and Node.js. From 1.15.0 until 1.20.0, Axios shouldBypassProxy treats the NO_PROXY CIDR form as a textu... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-98835 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2026-101086 📊 4.3/10 🏢 Gitea 📝 Gitea's package registry grants authenticated users read access to packages owned by Limited-visibility users without excluding restricted accounts. A res... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-101086 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2026-101084 📊 5.3/10 🏢 Gitea 📝 Gitea's collaborative-owner authorization path for reading cross-repository reusable workflows does not exclude fork pull request runs. An approved fork w... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-101084 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2026-101083 📊 6.5/10 🏢 Gitea 📝 Gitea's Swift package parser limits each manifest to 128 KiB but does not limit the number of manifests or their aggregate size before reading them into m... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-101083 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2026-101161 📊 4.3/10 🏢 Dell 📝 Dell Terraform Provider for OME, versions 1.0.0 through 1.2.3, contains an Insertion of Sensitive Information into Log File vulnerability in the provider c... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-101161 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2026-101082 📊 6.5/10 🏢 Gitea 📝 Gitea parses Alpine package uploads before enforcing package-size quotas and does not bound the decompressed .PKGINFO data or its dependency and provides ... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-101082 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2022-27962 📊 9.8/10 📝 defineAttribute in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow. 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-27962 #cybersecurity #infosec #cve #euvd

🚨 EUVD-2026-101284 📊 6.5/10 🏢 Gitea 📝 Gitea's OneDev migration downloader reads the entire remote version response into memory without a size limit and uses a client without a timeout. An auth... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-101284 #cybersecurity #infosec #cve #euvd

📊 EUVD Daily CVSS 🟠 Avg: 7.01/10 (High) 📈 975 vulns | Min: 2.0 Max: 10.0 📅 2026-10-13 #cybersecurity #infosec #cvss #euvd