Get alerted about vulnerabilities that affect your stack.
Sign up free to get alerts when software you use is affected.
CVE Vulnerabilities - 16 October 2026
RSS2790 vulnerabilities published on 16 October 2026
DeepSeek Harness can run malicious code via crafted files
CVE-2026-95182
DeepSeek Harness may run any code an attacker places in a specially prepared executable file. This means an attacker could take control of the system by convincing a user to open a malicious file. Upd...
10.0
CGA-x93f-q36c-j88g
CGA-x93f-q36c-j88g
10.0
CGA-5qj4-qrc5-mcc6
CGA-5qj4-qrc5-mcc6
10.0
CGA-2rhq-q3pw-jxp8
CGA-2rhq-q3pw-jxp8
10.0
CGA-8f3r-9m7m-296v
CGA-8f3r-9m7m-296v
10.0
CGA-jg5r-7c23-qc3p
CGA-jg5r-7c23-qc3p
10.0
CGA-3qv6-3xgc-4j49
CGA-3qv6-3xgc-4j49
10.0
CGA-px8f-pvhq-wc2v
CGA-px8f-pvhq-wc2v
10.0
CGA-fhr6-rgfr-hw68
CGA-fhr6-rgfr-hw68
10.0
CGA-2ffq-gx33-3gvm
CGA-2ffq-gx33-3gvm
10.0
CGA-xvmf-m3pv-mpqf
CGA-xvmf-m3pv-mpqf
10.0
CGA-2h3r-f4vx-3cpq
CGA-2h3r-f4vx-3cpq
10.0
CGA-f5cv-w5w6-gw9v
CGA-f5cv-w5w6-gw9v
10.0
CGA-grqp-px63-ghpx
CGA-grqp-px63-ghpx
10.0
CGA-fr53-fvjw-x4vm
CGA-fr53-fvjw-x4vm
10.0
CGA-qh23-76mw-6p2g
CGA-qh23-76mw-6p2g
10.0
CGA-mxfj-hfh4-h97q
CGA-mxfj-hfh4-h97q
10.0
CGA-p6xq-2782-cc36
CGA-p6xq-2782-cc36
10.0
CGA-9494-pm5r-23pj
CGA-9494-pm5r-23pj
10.0
Firefox can let attackers execute code or leak data
OESA-2026-4299
Several flaws in Firefox and related components could allow attackers to run malicious code, escape security sandboxes, or expose private information. These problems have been corrected in the latest ...
10.0
Firefox could let attackers run code or view data
OESA-2026-4298
Multiple flaws were found in Firefox that could let a malicious website break out of the browser’s safety sandbox, run unwanted code, or expose private information. These issues affect recent versions...
10.0
Firefox may let attackers run code or steal data
OESA-2026-4297
The Firefox web browser (including its extended support and Thunderbird email versions) has several flaws that could let a malicious site break out of its safety sandbox, cause the program to crash, o...
10.0
Firefox may let attackers run code or steal data
OESA-2026-4296
The Firefox web browser on openEuler can be tricked into executing malicious code or exposing private information due to several bugs in its audio/video, widget, navigation, storage, and networking co...
10.0
Magento Enterprise Edition may allow remote code execution
CVE-2026-103849
ROOT-APP-COMPOSER-CVE-2026-103849
The Magento Enterprise Edition and related Adobe Commerce products contain a security hole that could let a hacker run their own programs on your server, potentially exposing data or disrupting the si...
10.0
The Grid WordPress plugin can let attackers run code
CVE-2026-94169
The Grid plugin for WordPress, up to version 2.8.1, can be tricked into executing commands from a website visitor. This could allow an attacker to take control of the server hosting your site. Update ...
10.0