CVE Vulnerabilities - 6 October 2026

JetBrains TeamCity could let attackers run code on server

CVE-2026-106218

TeamCity versions earlier than 2026.1.3 allow specially crafted Kotlin scripts to break out of the safe sandbox and execute commands on the server. This could let an attacker take control of the build...

10.0

Quasar Framework lets attackers inject malicious code

CVE-2026-106102 GHSA-pq96-jpmf-w254

The server‑side rendering feature in Quasar Framework versions before 2.22.0 does not properly encode data placed in page titles, meta tags, links or scripts. If an attacker can control that data—such...

10.0

Payload CMS form builder may run attacker code

CVE-2026-105857 GHSA-r488-j9vj-wx3q

The form builder plugin for Payload CMS (versions before 3.90.0 and early canary builds) can be tricked into executing code on your server when a malicious form is submitted. This could let an attacke...

10.0

Dell Container Storage Modules before 1.18 allow remote privilege gain

CVE-2026-63692

Versions of Dell Container Storage Modules older than 1.18 do not check who is using a critical function. This means someone who can reach the system over the network could raise their access level wi...

10.0

Dell Container Storage Modules lets attackers steal storage admin credentials

CVE-2026-63688

Versions of Dell Container Storage Modules before 1.18.0 do not properly check who can use a critical storage management service. This gap could let an outside attacker obtain the administrator passwo...

10.0

Doctreat Core plugin lets anyone gain admin rights

CVE-2026-39773

The Doctreat Core plugin for WordPress (versions up to 1.7.0) can be accessed without a login and used to give a user full administrative control. This means an attacker could change settings, view or...

10.0

Doctreat theme lets anyone upload files

CVE-2026-39770

The Doctreat theme for WordPress up to version 1.7.0 lets people who are not logged in place files on your site. This could let attackers add malicious code and take control of the site. Update the th...

10.0

Kognetiks Chatbot for WordPress lets anyone upload files

CVE-2026-32579

The Kognetiks Chatbot for WordPress plugin (versions up to 2.4.9) does not require login to accept file uploads. An attacker could place malicious files on your site, potentially taking control or dis...

10.0

TOTOLINK X6000R allows remote command execution via firmware upload

CVE-2026-105484

The X6000R router’s firmware‑upload feature can be tricked into running arbitrary system commands when a specially crafted file name is used. This can be exploited over the network, potentially giving...

10.0

Prometheus Redis Exporter and Temporal Server may skip address checks

CLEANSTART-2026-YR68258

Both the Prometheus Redis Exporter (FIPS version) and Temporal Server can incorrectly skip verification of where a connection originates when a non‑public‑key method is used. This could let an attacke...

10.0

go1.27 TLS session resumption can bypass certificate checks

CLEANSTART-2026-YX19241

The Go 1.27 TLS library may allow a connection to resume a session even if the trusted certificate lists (ClientCAs or RootCAs) are changed in between. This means an unauthorized party could be accept...

10.0

CGA-jhqp-j738-9gwv

CGA-jhqp-j738-9gwv

9.9

CGA-6hhg-c5gf-cxvf

CGA-6hhg-c5gf-cxvf

9.9

CGA-hqw3-rhf4-g43j

CGA-hqw3-rhf4-g43j

9.9

CGA-h5v4-6wfj-hwpx

CGA-h5v4-6wfj-hwpx

9.9

ClearPass Policy Manager lets logged‑in user run database commands

CVE-2026-79798

A user who can log into the ClearPass Policy Manager web interface could change the way the system talks to its database and issue their own commands. This could let the attacker view, modify, or dele...

9.9

Handlebars templates can run attacker code on server

CVE-2026-106445 DEBIAN-CVE-2026-106445 GHSA-p8wg-vrv2-v86f UBUNTU-CVE-2026-106445

Versions of Handlebars from 3.0.0 through 4.7.9 let a specially crafted template execute any JavaScript on the server when a certain setting is turned on. This can let an attacker take control of the ...

9.9

Dell CSM Operator before 1.18 allows privilege escalation

CVE-2026-67269

The Dell Container Storage Modules (CSM) Operator versions earlier than 1.18 contain a flaw that lets a low‑privilege attacker increase their rights. If exploited, the attacker could gain full (root) ...

9.9

Workreap Core plugin lets attackers upload files

CVE-2026-39759

The Workreap Core plugin for WordPress, up to version 3.4.5, permits anyone to place a file on your server. This could let malicious code run or compromise your site. Update the plugin to the latest v...

9.9

Taskbot plugin lets low-level users upload any file

CVE-2026-39757

The Taskbot plugin for WordPress (versions up to 6.6) allows users with the Subscriber role to upload files of any type. This could let an attacker place malicious code on the site and take control. U...

9.9

WP Duplicate plugin lets any user upload files

CVE-2026-39755

The WP Duplicate plugin (versions up to 1.1.11) lets a logged‑in user with a low‑level account upload files to the server. This could let an attacker place malicious code on the website and take contr...

9.9

WooCommerce Designer Pro plugin lets attackers run code

CVE-2026-32568

The WooCommerce Designer Pro extension for WordPress (versions up to 1.9.33) can be tricked into downloading and executing malicious programs. This could let a remote user take control of your website...

9.9

n8n workflow tool could let attackers run code

GHSA-wrwr-h859-xh2r CVE-2026-44791 ROOT-APP-NPM-CVE-2026-44791

The n8n automation platform had a weakness that could allow a malicious user to execute code on the server running it. This could lead to unauthorized access or data compromise. Update to the latest r...

9.4

n8n automation tool could be compromised, patches released

GHSA-c8xv-5998-g76h CVE-2026-44789 ROOT-APP-NPM-CVE-2026-44789

The n8n workflow automation software has a security weakness that could let attackers run code or access data. Updated versions of n8n have been released that fix the problem. Apply the latest n8n rel...

9.4

ClearPass Policy Manager allows file read/modify via path traversal

CVE-2026-79805

If an attacker gains a valid login to ClearPass Policy Manager, they can trick the system into accessing files outside its normal area. This could let them view or change important system files, poten...

9.8