CVEs published in October 2026

CVE-2026-76269Medium

In Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10, and 9.4.15, a user who does not hold the "admin" or "power" Splunk roles could use a user-controlled job identifier to access substantially all search job information from jobs that belong to other users, including search query text, job metadata, results, and preview results, through an Application Programming Interface (API) implemented as a Representational State Transfer (REST) API

CVE-2026-76268Critical

In Splunk Enterprise versions below 10.4.3 and 10.2.7, an unauthenticated user with network access to the Patroni Representational State Transfer (REST) Application Programming Interface (API) on a search head cluster member could execute attacker-controlled operating-system commands

CVE-2026-76267Medium

In Splunk Enterprise versions below 10.4.3, 10.2.7, and 10.0.10, a user that holds a role with the read_o11y_content capability could inject forged entries into the app log through the Representational State Transfer (REST) API

CVE-2026-76266High

In Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10, and 9.4.15 on Linux, a local user who can run commands as the user account running Splunk Enterprise could cause an affected Linux package upgrade to run attacker-controlled operating-system commands with root privileges

CVE-2026-76265Medium

In Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10, and 9.4.15, and Splunk Secure Gateway versions below 3.10.11, 3.9.25, and 3.8.72, a user who does not hold the "admin" or "power" Splunk roles could access privileged Splunk Secure Gateway functionality

CVE-2026-76264Medium

In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.10, and 9.4.15, a user who does not hold the "admin" or "power" Splunk roles could create or edit scripted lookup definitions through raw configuration endpoints

CVE-2026-1403Medium

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 11.7 before 18.8.9, 18.9 before 18.9.5, and 18.10 before 18.10.3 that when importing CSV files could have allowed an authenticated user to cause denial of service to Sidekiq workers due to improper validation of CSV file structure

CVE-2026-103371High

Insertion of Sensitive Information into Log File in Apache Geode Web Management

CVE-2026-92543High

Docker Engine classifies a registry hostname as insecure using an any-match DNS check

CVE-2026-92542High

Unauthorized traffic injection via forged VXLAN datagrams

CVE-2026-76500Critical

CVE-2026-76499Critical

CVE-2026-76498Critical

CVE-2026-76488Medium

Cisco Application Policy Infrastructure Controller Unauthorized File Access Vulnerability

CVE-2026-76484Critical

CVE-2026-76483Critical

CVE-2026-76482Critical

CVE-2026-76480Critical

CVE-2026-76472Critical

CVE-2026-76470Critical

CVE-2026-76469Critical

CVE-2026-76468Critical

CVE-2026-76467Critical

CVE-2026-76464Critical

CVE-2026-76463Critical

CVE-2026-76454Critical

CVE-2026-76452Critical

CVE-2026-76437Critical

CVE-2026-20362High

Cisco Finesse Server-Side Request Forgery Vulnerability

CVE-2026-20328Critical

CVE-2026-20321Medium

Cisco Application Policy Infrastructure Controller API Command Injection Vulnerability

CVE-2026-92415Medium

— Use of Externally-Controlled Input to Select Classes or Code vulnerability in Apache Jackrabbit's WebDAV/Davex client

CVE-2026-92414Critical

Pre-auth hijack of cached sessions via derivable WebDAV lock tokens

CVE-2026-102258Critical

Post-authentication Stored Cross-Site Scripting (XSS) vulnerability has been identified in the SMA1000 Appliance Management Console (AMC) which in specific conditions could potentially enable a remote authenticated attacker as administrator to store and potentially execute arbitrary JavaScript code in the Appliance Management Console (AMC)

CVE-2026-102257Critical

Zip Slip vulnerability in the in the SMA1000 Appliance Management Console (AMC) interface allows an attacker to extract files outside the intended destination directory using a specially crafted archive, resulting in remote code execution

CVE-2026-102256Critical

Post-authentication Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability has been identified in the SMA1000 appliance which in specific conditions could potentially enable a remote authenticated attacker as administrator to execute arbitrary OS commands, resulting in remote code execution

CVE-2026-102255Critical

Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended alternate access path

CVE-2026-97146Medium

Apache YuniKorn 1.9.0 and earlier allows bypassing the check for the user annotation by setting a secondary label on the pod

CVE-2026-78243Low

Apache YuniKorn 1.8.0 and later, if configured with the LDAP group resolver, crashes due to an out of bounds read processing group membership entries.If the LDAP server returns a group membership entry, memberOf attribute, for a user specified in the pod the server crashes if a membership record does not start with "CN="

CVE-2026-92393Low

Apache YuniKorn 1.9.0 and earlier does not implement label and user annotation checks for workload UPDATE action bypassing all checks

CVE-2026-93684Medium

SQL user using Impala up to and including version 4.5.2 with only SELECT permission can put JavaScript in a table alias and make it run in another user's browser when that user opens the query plan in Impala's Web UI

CVE-2026-90466Medium

Path traversal of 'trusted_jar_paths' in Impala 4.5.2 allows an attacker-controlled JAR to be loaded via a relative path where the prefix matches a path specified in 'trusted_jar_paths'

CVE-2026-97720Critical

Incorrect implementation of JWT/OAuth authentication in Impala executors in Apache Impala versions up to and including 4.5.2 which allows attacked to access resources served by the executor's webserver when that webserver is configured to accept JWT/OAuth tokens

CVE-2026-59347High

VMware Workstation: VMware Workstation and Fusion contain a stack-based buffer-overflow vulnerability in HGFS.

CVE-2026-59346Critical

VMware Workstation: VMware Workstation and Fusion contain an integer-overflow vulnerability.

CVE-2026-69249Critical

CVE-2026-69248Critical

CVE-2026-69247Critical

CVE-2026-46600Critical

Golang.Org/X/Net Vulnerability in NetApp Products

CVE-2026-39882Critical

CVE-2025-22872Critical

CVE-2026-106583Low

Command injection via unvalidated command-line username

CVE-2026-106589Low

Privilege escalation via retained root privileges in sshd-session

CVE-2026-105244Medium

Improper Encoding or Escaping of Output vulnerability in the RemoteSyslogAppender of Apache log4net

CVE-2026-105243Medium

Insufficient Logging vulnerability in the EventLogAppender of Apache log4net

CVE-2026-105242Medium

Improper Handling of Exceptional Conditions vulnerability in the aspnet-request pattern converter of Apache log4net

CVE-2026-105241Medium

Improper Handling of Unicode Encoding vulnerability in the SmtpPickupDirAppender of Apache log4net

CVE-2026-105240Medium

Improper Neutralization of Null Byte or NUL Character vulnerability in the OutputDebugStringAppender of Apache log4net

CVE-2026-105239Medium

Improper Neutralization of Null Byte or NUL Character vulnerability in the EventLogAppender of Apache log4net

CVE-2026-105111Medium

Stored Cross-Site Scripting via untrusted class files in Class2HTML

CVE-2026-94114High

Security verification bypass via unvalidated class caching

CVE-2026-79818Medium

ClearPass Policy Manager: vulnerability in an API interface of ClearPass Policy Manager could allow an unauthenticated remote attacker to circumvent existing authentication controls

CVE-2026-79817Medium

ClearPass Policy Manager: sensitive information disclosure vulnerability exists in the client software of HPE Networking ClearPass Policy Manager

CVE-2026-79816Medium

ClearPass Policy Manager: vulnerability in a client interface of HPE Networking ClearPass Policy Manager could allow an unauthenticated remote attacker to conduct a DOM-based cross-site scripting (XSS) attack against a user of the affected client interface

CVE-2026-79815Medium

ClearPass Policy Manager: command injection vulnerability in the OnGuard agent of ClearPass Policy Manager could allow an authenticated remote attacker to inject arbitrary commands

CVE-2026-79814Medium

ClearPass Policy Manager: arbitrary file write vulnerability in the ClearPass Policy Manager OnGuard agent could allow malicious users on a local instance to elevate their user privileges if certain preconditions outside of the attacker's control are met

CVE-2026-79813Medium

ClearPass: local privilege escalation vulnerability exists in the ClearPass client software

CVE-2026-79812Medium

ClearPass Policy Manager: denial of service vulnerability exists in the OnGuard agent of HPE Networking ClearPass Policy Manager

CVE-2026-79811High

ClearPass Policy Manager: SQL injection vulnerability in the API of ClearPass Policy Manager could allow a remote authenticated attacker with administrative privileges to conduct SQL injection attacks against the ClearPass Policy Manager instance

CVE-2026-79810High

ClearPass Policy Manager: Remote code execution vulnerabilities exist in the affected interface of HPE Networking ClearPass Policy Manager that could allow an authenticated remote attacker with high privileges to execute arbitrary code

CVE-2026-79809High

ClearPass Policy Manager: unauthenticated path traversal vulnerability exists in an API endpoint of ClearPass Policy Manager

CVE-2026-79808High

ClearPass Policy Manager: buffer overflow vulnerability exists in the OnGuard agent of ClearPass Policy Manager

CVE-2026-79807High

ClearPass Policy Manager: missing integrity verification vulnerability in the Windows client software for ClearPass Policy Manager could allow malicious users on a local instance to elevate their user privileges

CVE-2026-79806High

ClearPass Policy Manager: privilege escalation vulnerability in the ClearPass Policy Manager OnGuard Linux agent could allow malicious users on a Linux instance to elevate their user privileges

CVE-2026-79805Critical

ClearPass Policy Manager: authenticated path traversal vulnerability exists in ClearPass Policy Manager

CVE-2026-79803High

ClearPass Policy Manager: command injection vulnerability exists in the API of ClearPass Policy Manager

CVE-2026-79802High

ClearPass Policy Manager: command injection vulnerability exists in the client software of ClearPass Policy Manager

CVE-2026-79801Critical

ClearPass Policy Manager: missing integrity verification vulnerability in the client agent software of HPE Networking ClearPass Policy Manager could allow an unauthenticated remote attacker to introduce untrusted code

CVE-2026-79800High

ClearPass Policy Manager: authenticated path traversal vulnerability exists in the command line interface of ClearPass Policy Manager

CVE-2026-79799High

ClearPass Policy Manager: vulnerability in the web-based management interface of ClearPass Policy Manager could allow an unauthenticated remote attacker to conduct a stored cross-site scripting (XSS) attack against an administrative user of the interface

CVE-2026-79798Critical

ClearPass Policy Manager: SQL injection vulnerabilities in the web-based management interface of ClearPass Policy Manager could allow a low-privileged authenticated remote attacker to conduct SQL injection attacks against the ClearPass Policy Manager instance

CVE-2026-79797High

ClearPass Policy Manager: improper access control vulnerability exists in the Android client application for HPE Networking ClearPass Policy Manager, where application functionality may be invoked by untrusted sources

CVE-2026-79796Critical

ClearPass Policy Manager: Vulnerabilities have been identified in the affected interface of ClearPass Policy Manager that could potentially allow an unauthenticated remote attacker to circumvent existing authentication controls

CVE-2026-79794Critical

ClearPass Policy Manager: SQL injection vulnerability in the web-based management interface of ClearPass Policy Manager could allow an authenticated remote attacker to conduct SQL injection attacks against the ClearPass Policy Manager instance

CVE-2026-76754Critical

ClearPass Policy Manager: vulnerability in an affected interface of ClearPass Policy Manager could allow an unauthenticated remote attacker to conduct SQL injection attacks against the ClearPass Policy Manager instance

CVE-2026-76753Critical

ClearPass Policy Manager: format string vulnerability in an affected service interface of HPE Networking ClearPass Policy Manager could allow an unauthenticated remote attacker to corrupt process memory

CVE-2026-76752Critical

ClearPass Policy Manager: Authentication bypass vulnerabilities exist in the web-based management and API interfaces of HPE Networking ClearPass Policy Manager

CVE-2026-76751Critical

ClearPass Policy Manager: missing integrity verification vulnerability exists in the OnGuard agent of ClearPass Policy Manager

CVE-2026-76750Critical

ClearPass Policy Manager: Deserialization of untrusted data vulnerabilities exist in the web interface of HPE Networking ClearPass Policy Manager

CVE-2026-76749Medium

Unauthenticated Sensitive Information Disclosure in AOS-S

CVE-2026-76748High

Authenticated Privilege Escalation Vulnerability in the API of AOS-S

CVE-2026-76747Critical

Unauthenticated Buffer Overflow Vulnerabilities lead to Information Disclosure in AOS-S

CVE-2026-76746Critical

Unauthenticated Adjacent Buffer Overflow Vulnerability Leading to Information Disclosure in AOS-S

CVE-2026-76745Critical

Unauthenticated Adjacent Memory Corruption Vulnerabilities Leading to Remote Code Execution in AOS-S

CVE-2026-76744Critical

Unauthenticated Buffer Overflow Vulnerabilities lead to Remote Code Execution in AOS-S

CVE-2026-76743Critical

Authentication Bypass Vulnerability in the Management Interface of AOS-S

CVE-2026-76742Critical

Authentication Bypass in the Web Management Interface of AOS-S

CVE-2026-76741Medium

Authenticated Buffer Overflow Vulnerabilities lead to Denial-of-Service in AOS-S

CVE-2026-106404High

Incorrect authorization in FontAccess

CVE-2026-106401High

Out of bounds write in Media