CVE Vulnerabilities - 13 October 2026

Adobe ColdFusion 2025/2023 allows attackers to run code

CVE-2026-106624

Both the 2025 and 2023 versions of Adobe ColdFusion can be tricked into running whatever code an attacker provides. This can happen without any user clicking anything and gives the attacker the same r...

10.0

ColdFusion allows attackers to make network requests as server

CVE-2026-106622

Adobe ColdFusion versions 2023 and 2025 can be tricked into sending internal network requests without any user action. This could let an attacker reach otherwise protected services and gain higher-lev...

10.0

ColdFusion 2025 and 2023 allow dangerous file upload

CVE-2026-105899

Adobe ColdFusion versions 2025 and 2023 let attackers upload files of any type without checks. A malicious file could run code on the server, giving the attacker the same rights as the web application...

10.0

Adobe Experience Manager may let attackers run code as you

CVE-2026-90532

Adobe Experience Manager can allow an attacker to run code using the rights of a logged‑in user, which could give them control of that user’s account or session. The flaw can be triggered without the ...

10.0

Adobe Experience Manager may let attackers run code

CVE-2026-48383

The cloud service and on‑premise versions 6.5 of Adobe Experience Manager have a flaw that can let an attacker execute their own code on the system without any user clicking anything. This could give ...

10.0

Adobe Experience Manager can run unauthorized code

CVE-2026-48382

Adobe Experience Manager versions—including the cloud service and 6.5 LTS—allow an attacker to execute their own commands as the logged‑in user without any user interaction. This could let the attacke...

10.0

Dockhand lets attackers reset passwords without authentication

CVE-2026-110130 GHSA-r3mg-r5vm-3v6w

Versions of Dockhand older than 1.0.45 allow anyone on the network to change a user’s password, including the admin’s, without proving who they are. This happens because the system mistakenly treats c...

9.9

Podman allows image to bypass security settings

DEBIAN-CVE-2026-94603 UBUNTU-CVE-2026-94603 BELL-CVE-2026-94603 CVE-2026-94603

Versions of Podman between 4.4.0 and 5.8.8 (and 6.1.2) let a specially marked container image turn off most sandbox protections, ignoring the options you set to limit capabilities. This could let an i...

10.0

ProPhoenix Law RMS lets attackers view other users’ data

CVE-2024-34323

The 2022.2403.3.101 version of ProPhoenix Law RMS does not properly verify who is requesting information, so someone could send a specially crafted web request and see private data belonging to other ...

10.0

saltyorg/docs documentation workflow can leak deployment secrets

CVE-2026-55675

The documentation build process for the Salty website runs code from external contributors before installing required packages. If a malicious contributor adds specially crafted setup files, they can ...

10.0

NVIDIA AIStore for Linux can allow attacker code execution

CVE-2026-65162

The AIStore software for Linux includes an old API that lets a remote user set unsafe container settings. If exploited, the attacker could run code, gain higher privileges, view or change data, and di...

10.0

JTL-WMS allows unauthenticated API access

CVE-2026-89309

The JTL-WMS mobile server does not always check that a user is logged in before processing requests. An attacker on the same network could call the system’s functions without a valid password or token...

10.0

Wavlink WL‑WN592AX6 allows remote command execution

CVE-2026-109110

The Wavlink WL‑WN592AX6 device contains a flaw in its wmapd service that lets an attacker send specially crafted data to run commands on the device. This can be triggered from outside the network, pot...

9.3

Wavlink WL‑WN530BE1‑A can be crashed via settings export

CVE-2026-109109

The router's web interface has a flaw in the Settings Export function that lets an attacker send a specially crafted request and cause the device to overflow its memory, potentially crashing or taking...

9.3

GitLab allows remote code execution via crafted CI/CD regex

CVE-2026-97229

All supported versions of GitLab Community and Enterprise Edition can be tricked by a specially crafted regular expression in a CI/CD configuration. An attacker without any login could cause the serve...

10.0

SAP Cloud SDK for Python can leak OAuth tokens

CVE-2026-89111 GHSA-4mv3-jxxm-9cx2

The SAP Cloud SDK for Python used in multi‑tenant Business Technology Platform apps can be tricked into sending its token‑request traffic to a server the attacker controls. This could let the attacker...

10.0

Legacy Update can be used to install updates without consent

CVE-2026-97381 GHSA-f4g7-4gmx-jfgf

Legacy Update versions 1.12.0 through 1.13.1 allow a malicious web page to control the ActiveX component, letting it gather system details, show dialogs, and install or trigger updates without the use...

9.9

ColdFusion allows low‑privileged attacker to run code

CVE-2026-106612

Adobe ColdFusion versions 2023 and 2025 can be tricked into running any code the attacker chooses, even without the user doing anything. This means a low‑level attacker could take actions on the serve...

9.9

Adobe ColdFusion 2025 and 2023 allow attacker to run code

CVE-2026-105903

The 2025 and 2023 versions of Adobe ColdFusion can be tricked into running any code the attacker supplies, even from a low‑privilege account and without needing a user to click anything. This could le...

9.9

Adobe Experience Manager 6.5 allows unauthorized code execution

CVE-2026-75732

The 6.5 version of Adobe Experience Manager can let an attacker run code without needing any user interaction, potentially taking control of a user’s session. This could give the attacker higher privi...

9.9

Adobe Experience Manager 6.5 allows code execution

CVE-2026-105895

Adobe Experience Manager version 6.5 can run malicious code supplied by an attacker without any user interaction. This could let the attacker take control of a user's account or session and possibly g...

9.9

Adobe Experience Manager 6.5 lets attackers run commands

CVE-2026-103848

Adobe Experience Manager version 6.5 can be tricked into running system commands supplied by an attacker. Even a low‑privilege attacker can cause the software to execute arbitrary code without any use...

9.9

Argo CD may create forbidden resources when deleting apps

CVE-2026-77459 GHSA-fmxq-cgp8-87wp

Versions of Argo CD from 2.10.0 up to 3.3.15, 3.4.10, 3.5.4 and 3.6.0‑rc2 can run a delete‑hook that bypasses the normal project rules, allowing creation of resources in disallowed namespaces or clust...

9.9

Ivanti Xtraction may leak credentials to attacker

CVE-2026-106042

If a user logs into Ivanti Xtraction, an attacker who is also logged in can trick the system into sending requests to a location the attacker controls. This can expose the credentials used by the EPMM...

9.9

Ivanti Neurons Patch for Intune endpoint can expose login data

CVE-2026-109412

The Ivanti Neurons Patch for Intune includes a web address that, when accessed by someone with valid credentials, can reveal authentication details. This could allow an attacker to see passwords or to...

9.9