CVE Vulnerabilities - 7 October 2026

Cisco License On-Prem software could accept malformed data, allowing a malicious user to bypass security checks and potentially gain unauthorized access. This risk is limited to the on‑premises licens...

The ping feature in the Fanvil x7a phone firmware (version 2.6.0.1182) does not check the data it receives, so a stranger could send specially crafted input and cause the phone to execute commands on ...

The SiYuan note‑taking application lets anyone send a specially crafted search term that runs database commands. This can let an attacker view or modify notes in any notebook without logging in. Updat...

The SMA1000 appliance’s Workplace interface allows outsiders to send the device its own network requests without logging in. This could let an attacker reach hidden internal functions and carry out ac...