CVE Vulnerabilities - 6 October 2026

JetBrains TeamCity could let attackers run code on server

CVE-2026-106218

TeamCity versions earlier than 2026.1.3 allow specially crafted Kotlin scripts to break out of the safe sandbox and execute commands on the server. This could let an attacker take control of the build...

10.0

Quasar Framework lets attackers inject malicious code

CVE-2026-106102 GHSA-pq96-jpmf-w254

The server‑side rendering feature in Quasar Framework versions before 2.22.0 does not properly encode data placed in page titles, meta tags, links or scripts. If an attacker can control that data—such...

10.0

Payload CMS form builder may run attacker code

CVE-2026-105857 GHSA-r488-j9vj-wx3q

The form builder plugin for Payload CMS (versions before 3.90.0 and early canary builds) can be tricked into executing code on your server when a malicious form is submitted. This could let an attacke...

10.0

Dell Container Storage Modules before 1.18 allow remote privilege gain

CVE-2026-63692

Versions of Dell Container Storage Modules older than 1.18 do not check who is using a critical function. This means someone who can reach the system over the network could raise their access level wi...

10.0

Dell Container Storage Modules lets attackers steal storage admin credentials

CVE-2026-63688

Versions of Dell Container Storage Modules before 1.18.0 do not properly check who can use a critical storage management service. This gap could let an outside attacker obtain the administrator passwo...

10.0

Doctreat Core plugin lets anyone gain admin rights

CVE-2026-39773

The Doctreat Core plugin for WordPress (versions up to 1.7.0) can be accessed without a login and used to give a user full administrative control. This means an attacker could change settings, view or...

10.0

Doctreat theme lets anyone upload files

CVE-2026-39770

The Doctreat theme for WordPress up to version 1.7.0 lets people who are not logged in place files on your site. This could let attackers add malicious code and take control of the site. Update the th...

10.0

Kognetiks Chatbot for WordPress lets anyone upload files

CVE-2026-32579

The Kognetiks Chatbot for WordPress plugin (versions up to 2.4.9) does not require login to accept file uploads. An attacker could place malicious files on your site, potentially taking control or dis...

10.0

n8n workflow tool could allow unauthorized code execution

GHSA-qrx8-25qr-5r7v CVE-2026-54309 ROOT-APP-NPM-CVE-2026-54309

The n8n automation platform has a security weakness that could let an attacker run code on your system. Updated versions have been released that fix the problem. Install the latest n8n release as soon...

8.8

TOTOLINK X6000R allows remote command execution via firmware upload

CVE-2026-105484

The X6000R router’s firmware‑upload feature can be tricked into running arbitrary system commands when a specially crafted file name is used. This can be exploited over the network, potentially giving...

10.0

Prometheus Redis Exporter and Temporal Server may skip address checks

CLEANSTART-2026-YR68258

Both the Prometheus Redis Exporter (FIPS version) and Temporal Server can incorrectly skip verification of where a connection originates when a non‑public‑key method is used. This could let an attacke...

10.0

go1.27 TLS session resumption can bypass certificate checks

CLEANSTART-2026-YX19241

The Go 1.27 TLS library may allow a connection to resume a session even if the trusted certificate lists (ClientCAs or RootCAs) are changed in between. This means an unauthorized party could be accept...

10.0

CGA-jhqp-j738-9gwv

CGA-jhqp-j738-9gwv

9.9

CGA-6hhg-c5gf-cxvf

CGA-6hhg-c5gf-cxvf

9.9

CGA-hqw3-rhf4-g43j

CGA-hqw3-rhf4-g43j

9.9

CGA-h5v4-6wfj-hwpx

CGA-h5v4-6wfj-hwpx

9.9

ClearPass Policy Manager lets logged‑in user run database commands

CVE-2026-79798

A user who can log into the ClearPass Policy Manager web interface could change the way the system talks to its database and issue their own commands. This could let the attacker view, modify, or dele...

9.9

Handlebars templates can run attacker code on server

CVE-2026-106445 DEBIAN-CVE-2026-106445 GHSA-p8wg-vrv2-v86f UBUNTU-CVE-2026-106445

Versions of Handlebars from 3.0.0 through 4.7.9 let a specially crafted template execute any JavaScript on the server when a certain setting is turned on. This can let an attacker take control of the ...

9.9

Dell CSM Operator before 1.18 allows privilege escalation

CVE-2026-67269

The Dell Container Storage Modules (CSM) Operator versions earlier than 1.18 contain a flaw that lets a low‑privilege attacker increase their rights. If exploited, the attacker could gain full (root) ...

9.9

Workreap Core plugin lets attackers upload files

CVE-2026-39759

The Workreap Core plugin for WordPress, up to version 3.4.5, permits anyone to place a file on your server. This could let malicious code run or compromise your site. Update the plugin to the latest v...

9.9

Taskbot plugin lets low-level users upload any file

CVE-2026-39757

The Taskbot plugin for WordPress (versions up to 6.6) allows users with the Subscriber role to upload files of any type. This could let an attacker place malicious code on the site and take control. U...

9.9

WP Duplicate plugin lets any user upload files

CVE-2026-39755

The WP Duplicate plugin (versions up to 1.1.11) lets a logged‑in user with a low‑level account upload files to the server. This could let an attacker place malicious code on the website and take contr...

9.9

WooCommerce Designer Pro plugin lets attackers run code

CVE-2026-32568

The WooCommerce Designer Pro extension for WordPress (versions up to 1.9.33) can be tricked into downloading and executing malicious programs. This could let a remote user take control of your website...

9.9

Tenda AC5 router can be remotely compromised via Wi‑Fi password

CVE-2026-105778

The Tenda AC5 router allows a specially crafted Wi‑Fi password to be sent to its configuration page, which can cause the device to crash or be taken over. This can be done from anywhere on the network...

8.6

n8n workflow automation could let attackers run code

GHSA-c37g-w77q-m4vp CVE-2026-54310 ROOT-APP-NPM-CVE-2026-54310

The n8n automation software, including its GitHub Actions and Root.io packages, had a security weakness that could allow a malicious user to run arbitrary code on your system. This could lead to data ...

6.5