CVE Vulnerabilities - 1 October 2026

Teledyne FLIR Aware2 lets attackers read robot settings

CVE-2026-55393

The web interface of Teledyne FLIR Aware2 (versions up to 6.9.0.2 for PackBot and 1.7.9 for FirstLook) does not properly check file paths. An outside attacker could use this weakness to view configura...

10.0

Flatpak could let malicious code run

CLEANSTART-2024-UL58888

The Flatpak package used for Linux app isolation has a security weakness that could let attackers run unwanted code on a system. This could affect any Linux machines using Flatpak, potentially comprom...

10.0

cri-tools may accept resumed TLS sessions after CA changes

CLEANSTART-2026-NB86636

The cri-tools software can mistakenly allow a secure connection to continue when the list of trusted certificate authorities is changed between the original and resumed handshake. This could let an un...

10.0

BackupSheep plugin allows anyone to delete files and steal backups

CVE-2026-101148

The BackupSheep WordPress backup plugin (up to version 1.8) does not check its integration key, so anyone on the internet can make a full site backup and download it, including user password hashes, a...

10.0

cri-tools may accept resumed TLS sessions after CA changes

CLEANSTART-2026-NB75490

The cri-tools component can mistakenly allow a TLS connection to continue when the list of trusted certificate authorities is changed between the original and resumed handshakes. This could let an una...

10.0

BoKS Manager creates predictable service‑account passwords

CVE-2026-79901

The BoKS Manager server component can produce passwords for Active Directory service accounts using a method that can be guessed if the time of password change is known. This makes it possible for an ...

9.9

CGA-8r5x-w2gf-jr48

CGA-8r5x-w2gf-jr48

9.9

CGA-jv6j-w246-26pj

CGA-jv6j-w246-26pj

9.9

CGA-44p6-6h83-pp6r

CGA-44p6-6h83-pp6r

9.9

CGA-p6x5-8363-6j7h

CGA-p6x5-8363-6j7h

9.9

CGA-7467-6594-qjg2

CGA-7467-6594-qjg2

9.9

CGA-cpp3-gw43-rv8f

CGA-cpp3-gw43-rv8f

9.9

CGA-8vr3-vwh8-69rq

CGA-8vr3-vwh8-69rq

9.9

CGA-xc3j-mf7q-pg24

CGA-xc3j-mf7q-pg24

9.9

CGA-4gh9-vrm7-r5rh

CGA-4gh9-vrm7-r5rh

9.9

RAGFlow 0.24.0 allows unauthorized code execution via dataset API

CVE-2026-51897

Version 0.24.0 of RAGFlow does not correctly limit who can call the get_dataset function, so a malicious user could cause the system to run their own code or commands. This could lead to data loss, sy...

9.8

Ragflow 0.24.0 may expose other tenants’ data

CVE-2026-51893

Version 0.24.0 of the Ragflow application allows a request that includes a user‑chosen identifier to reach internal data without checking who owns it. This could let an outsider retrieve information f...

9.8

Langchain Chatchat 0.3.1 can be forced to write files anywhere

CVE-2026-51884

The temporary document upload feature in Langchain Chatchat version 0.3.1 does not properly check file names, allowing an attacker to place files in any folder on the server. This could let malicious ...

9.8

Deeptutor 1.4.0 lets remote user run shell commands

CVE-2026-51881

The live tutorbot feature in Deeptutor version 1.4.0 can be tricked into running any command on the server. This means someone outside your network could cause the software to execute harmful actions ...

9.8

Deeptutor 1.4.0 can let remote users modify any file

CVE-2026-51880

The Deeptutor version 1.4.0 software lets someone connected to its live tutorbot web interface write or change files outside the intended work area. This means an attacker could overwrite important sy...

9.8

FortiMail lets remote attacker place files on server

CVE-2026-104286

FortiMail's web interface can be tricked into accessing any location on the underlying system, allowing an unauthenticated user to drop files through specially crafted web requests. This could let att...

9.8 KEV

Authlib library may load forged server addresses

CVE-2026-104056 UBUNTU-CVE-2026-104056 DEBIAN-CVE-2026-104056

The Authlib Python library (versions up to 1.7.2) saves discovery information without confirming it came from the expected source. An attacker could supply false data that replaces legitimate endpoint...

9.8

Apache HTTP Server may crash or be taken over

CVE-2026-57941 DEBIAN-CVE-2026-57941 UBUNTU-CVE-2026-57941 ALPINE-CVE-2026-57941

The Apache web server, versions 2.4.0 through 2.4.68, has a coding mistake that can let an attacker cause the server to stop working or potentially run their own code. This happens when the server han...

9.8

Apache HTTP Server could execute unwanted code via URL rewrite

CVE-2026-56154 DEBIAN-CVE-2026-56154 UBUNTU-CVE-2026-56154 ALPINE-CVE-2026-56154

The Apache HTTP Server versions 2.4.0 through 2.4.68 have a flaw in the mod_rewrite component that could allow an attacker to run their own code on the server. This could let malicious users take cont...

9.8

Core Privileged Access Manager can let remote attackers corrupt memory

CVE-2026-12627

The Core Privileged Access Manager component that handles automatic device registration can be tricked into overwriting its own memory when it processes a response from a client. An attacker who can r...

9.8