24 hours
1,622 CVEs with changes across correlated intelligence sources
Across all severities · Precook updated 2026-10-17T17:38:49Z
Exploit references: Select CVEs in this time window that have a record in Metasploit OR Exploit-DB. This is an evidence-reference filter, not a claim that an attack occurred or that every affected version is exploitable. It does not include KEV-only CVEs unless an exploit reference also exists. Metasploit and Exploit-DB are matched using their active CVE indexes; if either index is unavailable, results are marked unavailable rather than zero.
How it connects
Select a vendor or product to investigate in Triage; select a threat signal to filter this window. Lines represent indexed associations, not installed exposure.Intelligence relationships
Vendor-style connections · window-level threat counts · visible-page identitiesRefine timeline, severity and threat signals ⌄
ZDI published: 0 window CVEs linked to ZDI (any publication date); 0 advisories released in the past 24h. Upcoming ZDI-CAN notices remain vendor-level and are not attributed to CVEs.
Associated vulnerabilities · 1,622
Correlated intelligence updates · 24h · All severities · All signalsCVE-2026-102764Improper Origin Validation in Internal Messaging Components of BeyondTrust Remote Supportbeyondtrust / remote support (≤ 26.2.3) · BeyondTrust / Remote Support9.3Critical1.18%CISA KEVBSI CSAFRSS 2CWE-290 ↗›
Vulnerability intelligence
CERT-SE · BeyondTrust varnar för kritisk nolldagssårbarhet · Source ↗
Google Cloud Threat Intelligence / Mandiant · ARMORY CASTLE Exploits BeyondTrust · Source ↗
BeyondTrust Remote Support: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen
Improper Origin Validation in Internal Messaging Components of BeyondTrust Remote Support
Recorded intelligence activity: 17 Oct 2026, 03:55 UTC.
Source(s) reported by the precooked timeline: BSI CSAF · CISA Advisory · CISA KEV · CISA Vulnrichment · CVEProject · EUVD · GHSA.
Underlying CVE record last modified: 15 Oct 2026, 20:30 UTC.
This indicates indexed source activity, not necessarily a newly published exploit, a KEV addition or a change to the underlying vulnerability. EPSS refreshes can also surface old CVEs.Affected vendors, products & devices
Click any identity to explore ↗2 distinct affected-product identities listed in this bounded CVE lookup. Select a vendor or product to investigate.
No matching affected products.
Vendor-wide upcoming ZDI notices are intentionally not attributed to these CVEs or products. Only directly CVE-linked ZDI evidence is shown under Evidence & source attribution.
Vendors
Identity evidence: NVD applicability / catalog · CVE catalog product links · NVD criteria may be conditional, and listing does not prove installed exposure.Evidence & source attribution
CVE-2026-105192LMCache Unauthenticated RCE in multiprocess mode via pickle deserializationLMCache / LMCache9.8Critical0.48%Unauthenticated RCECWE-306 ↗CWE-502 ↗›
Vulnerability intelligence
LMCache Unauthenticated RCE in multiprocess mode via pickle deserialization
Textual classification only; validate technical prerequisites in the source advisory. Unknown classifications are not considered safe.LMCache Unauthenticated RCE in multiprocess mode via pickle deserialization
Recorded intelligence activity: 16 Oct 2026, 20:09 UTC.
Source(s) reported by the precooked timeline: CISA Vulnrichment · CVEProject · GHSA.
Underlying CVE record last modified: 07 Oct 2026, 09:40 UTC.
This indicates indexed source activity, not necessarily a newly published exploit, a KEV addition or a change to the underlying vulnerability. EPSS refreshes can also surface old CVEs.Affected vendors, products & devices
Click any identity to explore ↗1 distinct affected-product identities listed in this bounded CVE lookup. Select a vendor or product to investigate.
No matching affected products.
Vendor-wide upcoming ZDI notices are intentionally not attributed to these CVEs or products. Only directly CVE-linked ZDI evidence is shown under Evidence & source attribution.
Vendors
Identity evidence: NVD applicability / catalog · CVE catalog product links · NVD criteria may be conditional, and listing does not prove installed exposure.Evidence & source attribution
CVE-2026-63146Omnispace Agora Project < 26.10.0 PHP Code Injection via config.inc.phpOmnispace / Agora Project9.8Critical0.66%CWE-94 ↗›
Vulnerability intelligence
Omnispace Agora Project < 26.10.0 PHP Code Injection via config.inc.php
Recorded intelligence activity: 17 Oct 2026, 00:41 UTC.
Source(s) reported by the precooked timeline: CISA Vulnrichment · CVEProject · GHSA.
Underlying CVE record last modified: 14 Oct 2026, 15:14 UTC.
This indicates indexed source activity, not necessarily a newly published exploit, a KEV addition or a change to the underlying vulnerability. EPSS refreshes can also surface old CVEs.Affected vendors, products & devices
Click any identity to explore ↗1 distinct affected-product identities listed in this bounded CVE lookup. Select a vendor or product to investigate.
No matching affected products.
Vendor-wide upcoming ZDI notices are intentionally not attributed to these CVEs or products. Only directly CVE-linked ZDI evidence is shown under Evidence & source attribution.
Vendors
Identity evidence: NVD applicability / catalog · CVE catalog product links · NVD criteria may be conditional, and listing does not prove installed exposure.Evidence & source attribution
CVE-2026-100202Windows Message Queuing Queue Manager Remote Code Execution VulnerabilityMicrosoftZDI upcoming · 49 / Windows 10 Version 1607 · MicrosoftZDI upcoming · 49 / Windows 11 Version 26H2 · MicrosoftZDI upcoming · 49 / Windows Server 2012+17 more listed ↓9.8Critical1.00%BSI CSAFRCECWE-416 ↗›
Vulnerability intelligence
Windows Message Queuing Queue Manager Remote Code Execution Vulnerability
Textual classification only; validate technical prerequisites in the source advisory. Unknown classifications are not considered safe.Microsoft Windows und Windows Server: Mehrere Schwachstellen
Windows Message Queuing Queue Manager Remote Code Execution Vulnerability
Recorded intelligence activity: 16 Oct 2026, 23:25 UTC.
Source(s) reported by the precooked timeline: BSI CSAF · CISA Vulnrichment · CVEProject · GHSA.
Underlying CVE record last modified: 16 Oct 2026, 23:25 UTC.
This indicates indexed source activity, not necessarily a newly published exploit, a KEV addition or a change to the underlying vulnerability. EPSS refreshes can also surface old CVEs.Affected vendors, products & devices
Click any identity to explore ↗20 distinct affected-product identities listed in this bounded CVE lookup. Select a vendor or product to investigate.
No matching affected products.
Vendor-wide upcoming ZDI notices are intentionally not attributed to these CVEs or products. Only directly CVE-linked ZDI evidence is shown under Evidence & source attribution.
Vendors
Identity evidence: NVD applicability / catalog · CVE catalog product links · NVD criteria may be conditional, and listing does not prove installed exposure.Evidence & source attribution
CVE-2026-105016Microsoft QUIC Remote Code Execution VulnerabilityMicrosoftZDI upcoming · 49 / .NET 10.0 · MicrosoftZDI upcoming · 49 / Windows 11 Version 25H2 · MicrosoftZDI upcoming · 49 / Windows 11 version 26H1+11 more listed ↓9.8Critical0.99%BSI CSAFRCECWE-122 ↗›
Vulnerability intelligence
Microsoft QUIC Remote Code Execution Vulnerability
Textual classification only; validate technical prerequisites in the source advisory. Unknown classifications are not considered safe.Microsoft Windows und Windows Server: Mehrere Schwachstellen
Microsoft Entwicklerwerkzeuge: Mehrere Schwachstellen
Microsoft QUIC Remote Code Execution Vulnerability
Recorded intelligence activity: 16 Oct 2026, 23:27 UTC.
Source(s) reported by the precooked timeline: BSI CSAF · CISA Vulnrichment · CVEProject · GHSA.
Underlying CVE record last modified: 16 Oct 2026, 23:27 UTC.
This indicates indexed source activity, not necessarily a newly published exploit, a KEV addition or a change to the underlying vulnerability. EPSS refreshes can also surface old CVEs.Affected vendors, products & devices
Click any identity to explore ↗14 distinct affected-product identities listed in this bounded CVE lookup. Select a vendor or product to investigate.
No matching affected products.
Vendor-wide upcoming ZDI notices are intentionally not attributed to these CVEs or products. Only directly CVE-linked ZDI evidence is shown under Evidence & source attribution.
Vendors
Identity evidence: NVD applicability / catalog · CVE catalog product links · NVD criteria may be conditional, and listing does not prove installed exposure.Evidence & source attribution
CVE-2026-69634Windows iSCSI Remote Code Execution VulnerabilityMicrosoftZDI upcoming · 49 / Windows 10 Version 1607 · MicrosoftZDI upcoming · 49 / Windows 11 Version 26H2 · MicrosoftZDI upcoming · 49 / Windows Server 2012+17 more listed ↓9.8Critical0.79%BSI CSAFRCERSS 1CWE-122 ↗›
Vulnerability intelligence
Windows iSCSI Remote Code Execution Vulnerability
Textual classification only; validate technical prerequisites in the source advisory. Unknown classifications are not considered safe.Microsoft Security Update Guide · CVE-2026-69634 Windows iSCSI Remote Code Execution Vulnerability · Source ↗
Microsoft Windows und Windows Server: Mehrere Schwachstellen
Windows iSCSI Remote Code Execution Vulnerability
Recorded intelligence activity: 16 Oct 2026, 23:15 UTC.
Source(s) reported by the precooked timeline: BSI CSAF · CISA Vulnrichment · CVEProject · GHSA.
Underlying CVE record last modified: 16 Oct 2026, 23:15 UTC.
This indicates indexed source activity, not necessarily a newly published exploit, a KEV addition or a change to the underlying vulnerability. EPSS refreshes can also surface old CVEs.Affected vendors, products & devices
Click any identity to explore ↗20 distinct affected-product identities listed in this bounded CVE lookup. Select a vendor or product to investigate.
No matching affected products.
Vendor-wide upcoming ZDI notices are intentionally not attributed to these CVEs or products. Only directly CVE-linked ZDI evidence is shown under Evidence & source attribution.
Vendors
Identity evidence: NVD applicability / catalog · CVE catalog product links · NVD criteria may be conditional, and listing does not prove installed exposure.Evidence & source attribution
CVE-2026-69639Windows libarchive Remote Code Execution VulnerabilityMicrosoftZDI upcoming · 49 / Windows 10 Version 1809 · MicrosoftZDI upcoming · 49 / Windows Server 2019 · MicrosoftZDI upcoming · 49 / Windows Server 2019 (Server Core installation)+10 more listed ↓9.8Critical0.79%BSI CSAFRCERSS 1CWE-122 ↗›
Vulnerability intelligence
Windows libarchive Remote Code Execution Vulnerability
Textual classification only; validate technical prerequisites in the source advisory. Unknown classifications are not considered safe.Microsoft Security Update Guide · CVE-2026-69639 Windows libarchive Remote Code Execution Vulnerability · Source ↗
Microsoft Windows und Windows Server: Mehrere Schwachstellen
Windows libarchive Remote Code Execution Vulnerability
Recorded intelligence activity: 16 Oct 2026, 23:14 UTC.
Source(s) reported by the precooked timeline: BSI CSAF · CISA Vulnrichment · CVEProject · GHSA.
Underlying CVE record last modified: 16 Oct 2026, 23:14 UTC.
This indicates indexed source activity, not necessarily a newly published exploit, a KEV addition or a change to the underlying vulnerability. EPSS refreshes can also surface old CVEs.Affected vendors, products & devices
Click any identity to explore ↗13 distinct affected-product identities listed in this bounded CVE lookup. Select a vendor or product to investigate.
No matching affected products.
Vendor-wide upcoming ZDI notices are intentionally not attributed to these CVEs or products. Only directly CVE-linked ZDI evidence is shown under Evidence & source attribution.
Vendors
Identity evidence: NVD applicability / catalog · CVE catalog product links · NVD criteria may be conditional, and listing does not prove installed exposure.Evidence & source attribution
CVE-2026-69705Windows iSCSI Remote Code Execution VulnerabilityMicrosoftZDI upcoming · 49 / Windows 10 Version 1607 · MicrosoftZDI upcoming · 49 / Windows 11 Version 26H2 · MicrosoftZDI upcoming · 49 / Windows Server 2012+17 more listed ↓9.8Critical0.79%BSI CSAFRCERSS 1CWE-787 ↗›
Vulnerability intelligence
Windows iSCSI Remote Code Execution Vulnerability
Textual classification only; validate technical prerequisites in the source advisory. Unknown classifications are not considered safe.Microsoft Security Update Guide · CVE-2026-69705 Windows iSCSI Remote Code Execution Vulnerability · Source ↗
Microsoft Windows und Windows Server: Mehrere Schwachstellen
Windows iSCSI Remote Code Execution Vulnerability
Recorded intelligence activity: 16 Oct 2026, 23:15 UTC.
Source(s) reported by the precooked timeline: BSI CSAF · CISA Vulnrichment · CVEProject · GHSA.
Underlying CVE record last modified: 16 Oct 2026, 23:15 UTC.
This indicates indexed source activity, not necessarily a newly published exploit, a KEV addition or a change to the underlying vulnerability. EPSS refreshes can also surface old CVEs.Affected vendors, products & devices
Click any identity to explore ↗20 distinct affected-product identities listed in this bounded CVE lookup. Select a vendor or product to investigate.
No matching affected products.
Vendor-wide upcoming ZDI notices are intentionally not attributed to these CVEs or products. Only directly CVE-linked ZDI evidence is shown under Evidence & source attribution.
Vendors
Identity evidence: NVD applicability / catalog · CVE catalog product links · NVD criteria may be conditional, and listing does not prove installed exposure.Evidence & source attribution
CVE-2026-69886Windows Imaging Component Remote Code Execution VulnerabilitymicrosoftZDI upcoming · 49 / windows 10 1607 (< 10.0.14393.9612) · microsoftZDI upcoming · 49 / windows 10 1809 (< 10.0.17763.9376) · microsoftZDI upcoming · 49 / windows 10 21h2 (< 10.0.19044.7807)+31 more listed ↓9.8Critical0.77%BSI CSAFRCERSS 1CWE-122 ↗›
Vulnerability intelligence
Windows Imaging Component Remote Code Execution Vulnerability
Textual classification only; validate technical prerequisites in the source advisory. Unknown classifications are not considered safe.Microsoft Security Update Guide · CVE-2026-69886 Windows Imaging Component Remote Code Execution Vulnerability · Source ↗
Microsoft Windows und Windows Server: Mehrere Schwachstellen
Windows Imaging Component Remote Code Execution Vulnerability
Recorded intelligence activity: 16 Oct 2026, 23:17 UTC.
Source(s) reported by the precooked timeline: BSI CSAF · CISA Vulnrichment · CVEProject · GHSA.
Underlying CVE record last modified: 16 Oct 2026, 23:17 UTC.
This indicates indexed source activity, not necessarily a newly published exploit, a KEV addition or a change to the underlying vulnerability. EPSS refreshes can also surface old CVEs.Affected vendors, products & devices
Click any identity to explore ↗34 distinct affected-product identities listed in this bounded CVE lookup. Select a vendor or product to investigate.
No matching affected products.
Vendor-wide upcoming ZDI notices are intentionally not attributed to these CVEs or products. Only directly CVE-linked ZDI evidence is shown under Evidence & source attribution.
Vendors
Identity evidence: NVD applicability / catalog · CVE catalog product links · NVD criteria may be conditional, and listing does not prove installed exposure.Evidence & source attribution
CVE-2026-70024Windows Internet Information Services Remote Code Execution VulnerabilitymicrosoftZDI upcoming · 49 / windows 10 1607 (< 10.0.14393.9612) · microsoftZDI upcoming · 49 / windows 10 1809 (< 10.0.17763.9376) · microsoftZDI upcoming · 49 / windows 10 21h2 (< 10.0.19044.7807)+31 more listed ↓9.8Critical0.78%BSI CSAFRCECWE-20 ↗CWE-121 ↗›
Vulnerability intelligence
Windows Internet Information Services Remote Code Execution Vulnerability
Textual classification only; validate technical prerequisites in the source advisory. Unknown classifications are not considered safe.Microsoft Windows und Windows Server: Mehrere Schwachstellen
Windows Internet Information Services Remote Code Execution Vulnerability
Recorded intelligence activity: 16 Oct 2026, 23:19 UTC.
Source(s) reported by the precooked timeline: BSI CSAF · CISA Vulnrichment · CVEProject · GHSA.
Underlying CVE record last modified: 16 Oct 2026, 23:19 UTC.
This indicates indexed source activity, not necessarily a newly published exploit, a KEV addition or a change to the underlying vulnerability. EPSS refreshes can also surface old CVEs.Affected vendors, products & devices
Click any identity to explore ↗34 distinct affected-product identities listed in this bounded CVE lookup. Select a vendor or product to investigate.
No matching affected products.
Vendor-wide upcoming ZDI notices are intentionally not attributed to these CVEs or products. Only directly CVE-linked ZDI evidence is shown under Evidence & source attribution.
Vendors
Identity evidence: NVD applicability / catalog · CVE catalog product links · NVD criteria may be conditional, and listing does not prove installed exposure.Evidence & source attribution
CVE-2026-70096Windows Rich Text Edit Control Remote Code Execution VulnerabilityMicrosoftZDI upcoming · 49 / Microsoft 365 Apps for Enterprise · MicrosoftZDI upcoming · 49 / Windows 10 Version 22H2 · MicrosoftZDI upcoming · 49 / Windows 11 version 23H2+23 more listed ↓9.8Critical0.96%BSI CSAFRCERSS 1CWE-122 ↗›
Vulnerability intelligence
Windows Rich Text Edit Control Remote Code Execution Vulnerability
Textual classification only; validate technical prerequisites in the source advisory. Unknown classifications are not considered safe.Microsoft Security Update Guide · CVE-2026-70096 Windows Rich Text Edit Control Remote Code Execution Vulnerability · Source ↗
Microsoft Windows und Windows Server: Mehrere Schwachstellen
Microsoft Office Produkte: Mehrere Schwachstellen ermöglichen Privilegieneskalation
Windows Rich Text Edit Control Remote Code Execution Vulnerability
Recorded intelligence activity: 16 Oct 2026, 23:15 UTC.
Source(s) reported by the precooked timeline: BSI CSAF · CISA Vulnrichment · CVEProject · GHSA.
Underlying CVE record last modified: 16 Oct 2026, 23:15 UTC.
This indicates indexed source activity, not necessarily a newly published exploit, a KEV addition or a change to the underlying vulnerability. EPSS refreshes can also surface old CVEs.Affected vendors, products & devices
Click any identity to explore ↗26 distinct affected-product identities listed in this bounded CVE lookup. Select a vendor or product to investigate.
No matching affected products.
Vendor-wide upcoming ZDI notices are intentionally not attributed to these CVEs or products. Only directly CVE-linked ZDI evidence is shown under Evidence & source attribution.
Vendors
Identity evidence: NVD applicability / catalog · CVE catalog product links · NVD criteria may be conditional, and listing does not prove installed exposure.Evidence & source attribution
CVE-2026-70147Microsoft PostScript Printer Driver Remote Code Execution VulnerabilityMicrosoftZDI upcoming · 49 / Windows 10 Version 1607 · MicrosoftZDI upcoming · 49 / Windows 11 Version 26H2 · MicrosoftZDI upcoming · 49 / Windows Server 2012+17 more listed ↓9.8Critical0.97%BSI CSAFRCECWE-122 ↗›
Vulnerability intelligence
Microsoft PostScript Printer Driver Remote Code Execution Vulnerability
Textual classification only; validate technical prerequisites in the source advisory. Unknown classifications are not considered safe.Microsoft Windows und Windows Server: Mehrere Schwachstellen
Microsoft PostScript Printer Driver Remote Code Execution Vulnerability
Recorded intelligence activity: 16 Oct 2026, 23:19 UTC.
Source(s) reported by the precooked timeline: BSI CSAF · CISA Vulnrichment · CVEProject · GHSA.
Underlying CVE record last modified: 16 Oct 2026, 23:19 UTC.
This indicates indexed source activity, not necessarily a newly published exploit, a KEV addition or a change to the underlying vulnerability. EPSS refreshes can also surface old CVEs.Affected vendors, products & devices
Click any identity to explore ↗20 distinct affected-product identities listed in this bounded CVE lookup. Select a vendor or product to investigate.
No matching affected products.
Vendor-wide upcoming ZDI notices are intentionally not attributed to these CVEs or products. Only directly CVE-linked ZDI evidence is shown under Evidence & source attribution.
Vendors
Identity evidence: NVD applicability / catalog · CVE catalog product links · NVD criteria may be conditional, and listing does not prove installed exposure.Evidence & source attribution
CVE-2026-70153Microsoft PostScript Printer Driver Remote Code Execution VulnerabilityMicrosoftZDI upcoming · 49 / Windows 10 Version 1607 · MicrosoftZDI upcoming · 49 / Windows 11 Version 26H2 · MicrosoftZDI upcoming · 49 / Windows Server 2012+17 more listed ↓9.8Critical0.97%BSI CSAFRCECWE-122 ↗›
Vulnerability intelligence
Microsoft PostScript Printer Driver Remote Code Execution Vulnerability
Textual classification only; validate technical prerequisites in the source advisory. Unknown classifications are not considered safe.Microsoft Windows und Windows Server: Mehrere Schwachstellen
Microsoft PostScript Printer Driver Remote Code Execution Vulnerability
Recorded intelligence activity: 16 Oct 2026, 23:24 UTC.
Source(s) reported by the precooked timeline: BSI CSAF · CISA Vulnrichment · CVEProject · GHSA.
Underlying CVE record last modified: 16 Oct 2026, 23:24 UTC.
This indicates indexed source activity, not necessarily a newly published exploit, a KEV addition or a change to the underlying vulnerability. EPSS refreshes can also surface old CVEs.Affected vendors, products & devices
Click any identity to explore ↗20 distinct affected-product identities listed in this bounded CVE lookup. Select a vendor or product to investigate.
No matching affected products.
Vendor-wide upcoming ZDI notices are intentionally not attributed to these CVEs or products. Only directly CVE-linked ZDI evidence is shown under Evidence & source attribution.
Vendors
Identity evidence: NVD applicability / catalog · CVE catalog product links · NVD criteria may be conditional, and listing does not prove installed exposure.Evidence & source attribution
CVE-2026-70157Windows System Information Console Remote Code Execution VulnerabilityMicrosoftZDI upcoming · 49 / Windows 10 Version 1607 · MicrosoftZDI upcoming · 49 / Windows 11 Version 26H2 · MicrosoftZDI upcoming · 49 / Windows Server 2012+17 more listed ↓9.8Critical0.96%BSI CSAFRCECWE-122 ↗›
Vulnerability intelligence
Windows System Information Console Remote Code Execution Vulnerability
Textual classification only; validate technical prerequisites in the source advisory. Unknown classifications are not considered safe.Microsoft Windows und Windows Server: Mehrere Schwachstellen
Windows System Information Console Remote Code Execution Vulnerability
Recorded intelligence activity: 16 Oct 2026, 23:21 UTC.
Source(s) reported by the precooked timeline: BSI CSAF · CISA Vulnrichment · CVEProject · GHSA.
Underlying CVE record last modified: 16 Oct 2026, 23:21 UTC.
This indicates indexed source activity, not necessarily a newly published exploit, a KEV addition or a change to the underlying vulnerability. EPSS refreshes can also surface old CVEs.Affected vendors, products & devices
Click any identity to explore ↗20 distinct affected-product identities listed in this bounded CVE lookup. Select a vendor or product to investigate.
No matching affected products.
Vendor-wide upcoming ZDI notices are intentionally not attributed to these CVEs or products. Only directly CVE-linked ZDI evidence is shown under Evidence & source attribution.
Vendors
Identity evidence: NVD applicability / catalog · CVE catalog product links · NVD criteria may be conditional, and listing does not prove installed exposure.Evidence & source attribution
CVE-2026-70242Microsoft Office Outlook Remote Code Execution VulnerabilitymicrosoftZDI upcoming · 49 / 365 apps · microsoftZDI upcoming · 49 / office 2021 · microsoftZDI upcoming · 49 / office 2024+3 more listed ↓9.8Critical1.01%BSI CSAFRCERSS 1CWE-122 ↗›
Vulnerability intelligence
Microsoft Office Outlook Remote Code Execution Vulnerability
Textual classification only; validate technical prerequisites in the source advisory. Unknown classifications are not considered safe.Rapid7 Research · Patch Tuesday - October 2026 · Source ↗
Microsoft Office Produkte: Mehrere Schwachstellen ermöglichen Privilegieneskalation
Microsoft Office Outlook Remote Code Execution Vulnerability
Recorded intelligence activity: 16 Oct 2026, 23:24 UTC.
Source(s) reported by the precooked timeline: BSI CSAF · CISA Vulnrichment · CVEProject · GHSA.
Underlying CVE record last modified: 16 Oct 2026, 23:24 UTC.
This indicates indexed source activity, not necessarily a newly published exploit, a KEV addition or a change to the underlying vulnerability. EPSS refreshes can also surface old CVEs.Affected vendors, products & devices
Click any identity to explore ↗6 distinct affected-product identities listed in this bounded CVE lookup. Select a vendor or product to investigate.
No matching affected products.
Vendor-wide upcoming ZDI notices are intentionally not attributed to these CVEs or products. Only directly CVE-linked ZDI evidence is shown under Evidence & source attribution.
Vendors
Identity evidence: NVD applicability / catalog · CVE catalog product links · NVD criteria may be conditional, and listing does not prove installed exposure.Evidence & source attribution
CVE-2026-70300Microsoft Office Word Remote Code Execution VulnerabilitymicrosoftZDI upcoming · 49 / 365 apps · microsoftZDI upcoming · 49 / office 2021 · microsoftZDI upcoming · 49 / office 2024+3 more listed ↓9.8Critical0.98%BSI CSAFRCECWE-822 ↗›
Vulnerability intelligence
Microsoft Office Word Remote Code Execution Vulnerability
Textual classification only; validate technical prerequisites in the source advisory. Unknown classifications are not considered safe.Microsoft Office Produkte: Mehrere Schwachstellen ermöglichen Privilegieneskalation
Microsoft Office Word Remote Code Execution Vulnerability
Recorded intelligence activity: 16 Oct 2026, 23:20 UTC.
Source(s) reported by the precooked timeline: BSI CSAF · CISA Vulnrichment · CVEProject · GHSA.
Underlying CVE record last modified: 16 Oct 2026, 23:20 UTC.
This indicates indexed source activity, not necessarily a newly published exploit, a KEV addition or a change to the underlying vulnerability. EPSS refreshes can also surface old CVEs.Affected vendors, products & devices
Click any identity to explore ↗6 distinct affected-product identities listed in this bounded CVE lookup. Select a vendor or product to investigate.
No matching affected products.
Vendor-wide upcoming ZDI notices are intentionally not attributed to these CVEs or products. Only directly CVE-linked ZDI evidence is shown under Evidence & source attribution.
Vendors
Identity evidence: NVD applicability / catalog · CVE catalog product links · NVD criteria may be conditional, and listing does not prove installed exposure.Evidence & source attribution
CVE-2026-77900Azure App Service Remote Code Execution VulnerabilityMicrosoftZDI upcoming · 49 / Azure App Service for Linux9.8Critical0.49%BSI CSAFRCECWE-306 ↗›
Vulnerability intelligence
Azure App Service Remote Code Execution Vulnerability
Textual classification only; validate technical prerequisites in the source advisory. Unknown classifications are not considered safe.Microsoft Azure: Mehrere Schwachstellen
Azure App Service Remote Code Execution Vulnerability
Recorded intelligence activity: 16 Oct 2026, 23:26 UTC.
Source(s) reported by the precooked timeline: BSI CSAF · CISA Vulnrichment · CVEProject · GHSA.
Underlying CVE record last modified: 16 Oct 2026, 23:26 UTC.
This indicates indexed source activity, not necessarily a newly published exploit, a KEV addition or a change to the underlying vulnerability. EPSS refreshes can also surface old CVEs.Affected vendors, products & devices
Click any identity to explore ↗1 distinct affected-product identities listed in this bounded CVE lookup. Select a vendor or product to investigate.
No matching affected products.
Vendor-wide upcoming ZDI notices are intentionally not attributed to these CVEs or products. Only directly CVE-linked ZDI evidence is shown under Evidence & source attribution.
Vendors
Identity evidence: NVD applicability / catalog · CVE catalog product links · NVD criteria may be conditional, and listing does not prove installed exposure.Evidence & source attribution
CVE-2026-83517Microsoft Windows Media Foundation Remote Code Execution VulnerabilityMicrosoftZDI upcoming · 49 / Windows 10 Version 1607 · MicrosoftZDI upcoming · 49 / Windows 11 Version 26H2 · MicrosoftZDI upcoming · 49 / Windows Server 2012+17 more listed ↓9.8Critical0.96%BSI CSAFRCECWE-122 ↗›
Vulnerability intelligence
Microsoft Windows Media Foundation Remote Code Execution Vulnerability
Textual classification only; validate technical prerequisites in the source advisory. Unknown classifications are not considered safe.Microsoft Windows und Windows Server: Mehrere Schwachstellen
Microsoft Windows Media Foundation Remote Code Execution Vulnerability
Recorded intelligence activity: 16 Oct 2026, 23:22 UTC.
Source(s) reported by the precooked timeline: BSI CSAF · CISA Vulnrichment · CVEProject · GHSA.
Underlying CVE record last modified: 16 Oct 2026, 23:22 UTC.
This indicates indexed source activity, not necessarily a newly published exploit, a KEV addition or a change to the underlying vulnerability. EPSS refreshes can also surface old CVEs.Affected vendors, products & devices
Click any identity to explore ↗20 distinct affected-product identities listed in this bounded CVE lookup. Select a vendor or product to investigate.
No matching affected products.
Vendor-wide upcoming ZDI notices are intentionally not attributed to these CVEs or products. Only directly CVE-linked ZDI evidence is shown under Evidence & source attribution.
Vendors
Identity evidence: NVD applicability / catalog · CVE catalog product links · NVD criteria may be conditional, and listing does not prove installed exposure.Evidence & source attribution
CVE-2026-83519Windows Error Reporting Remote Code Execution VulnerabilityMicrosoftZDI upcoming · 49 / Windows 10 Version 1607 · MicrosoftZDI upcoming · 49 / Windows 11 Version 26H2 · MicrosoftZDI upcoming · 49 / Windows Server 2012+17 more listed ↓9.8Critical0.96%BSI CSAFRCECWE-122 ↗›
Vulnerability intelligence
Windows Error Reporting Remote Code Execution Vulnerability
Textual classification only; validate technical prerequisites in the source advisory. Unknown classifications are not considered safe.Microsoft Windows und Windows Server: Mehrere Schwachstellen
Windows Error Reporting Remote Code Execution Vulnerability
Recorded intelligence activity: 16 Oct 2026, 23:22 UTC.
Source(s) reported by the precooked timeline: BSI CSAF · CISA Vulnrichment · CVEProject · GHSA.
Underlying CVE record last modified: 16 Oct 2026, 23:22 UTC.
This indicates indexed source activity, not necessarily a newly published exploit, a KEV addition or a change to the underlying vulnerability. EPSS refreshes can also surface old CVEs.Affected vendors, products & devices
Click any identity to explore ↗20 distinct affected-product identities listed in this bounded CVE lookup. Select a vendor or product to investigate.
No matching affected products.
Vendor-wide upcoming ZDI notices are intentionally not attributed to these CVEs or products. Only directly CVE-linked ZDI evidence is shown under Evidence & source attribution.
Vendors
Identity evidence: NVD applicability / catalog · CVE catalog product links · NVD criteria may be conditional, and listing does not prove installed exposure.Evidence & source attribution
CVE-2026-83578Microsoft PowerShell Remote Code Execution VulnerabilityMicrosoftZDI upcoming · 49 / Windows 10 Version 1607 · MicrosoftZDI upcoming · 49 / Windows 11 Version 26H2 · MicrosoftZDI upcoming · 49 / Windows Server 2012+17 more listed ↓9.8Critical0.96%BSI CSAFRCERSS 1CWE-122 ↗CWE-190 ↗›
Vulnerability intelligence
Microsoft PowerShell Remote Code Execution Vulnerability
Textual classification only; validate technical prerequisites in the source advisory. Unknown classifications are not considered safe.Microsoft Security Update Guide · CVE-2026-83578 Microsoft PowerShell Remote Code Execution Vulnerability · Source ↗
Microsoft Windows und Windows Server: Mehrere Schwachstellen
Microsoft PowerShell Remote Code Execution Vulnerability
Recorded intelligence activity: 16 Oct 2026, 23:16 UTC.
Source(s) reported by the precooked timeline: BSI CSAF · CISA Vulnrichment · CVEProject · GHSA.
Underlying CVE record last modified: 16 Oct 2026, 23:16 UTC.
This indicates indexed source activity, not necessarily a newly published exploit, a KEV addition or a change to the underlying vulnerability. EPSS refreshes can also surface old CVEs.Affected vendors, products & devices
Click any identity to explore ↗20 distinct affected-product identities listed in this bounded CVE lookup. Select a vendor or product to investigate.
No matching affected products.
Vendor-wide upcoming ZDI notices are intentionally not attributed to these CVEs or products. Only directly CVE-linked ZDI evidence is shown under Evidence & source attribution.
Vendors
Identity evidence: NVD applicability / catalog · CVE catalog product links · NVD criteria may be conditional, and listing does not prove installed exposure.Evidence & source attribution
CVE-2026-83693Windows Error Reporting Remote Code Execution VulnerabilityMicrosoftZDI upcoming · 49 / Windows 10 Version 1607 · MicrosoftZDI upcoming · 49 / Windows 11 Version 26H2 · MicrosoftZDI upcoming · 49 / Windows Server 2012+17 more listed ↓9.8Critical1.00%BSI CSAFRCERSS 1CWE-122 ↗›
Vulnerability intelligence
Windows Error Reporting Remote Code Execution Vulnerability
Textual classification only; validate technical prerequisites in the source advisory. Unknown classifications are not considered safe.Microsoft Security Update Guide · CVE-2026-83693 Windows Error Reporting Remote Code Execution Vulnerability · Source ↗
Microsoft Windows und Windows Server: Mehrere Schwachstellen
Windows Error Reporting Remote Code Execution Vulnerability
Recorded intelligence activity: 16 Oct 2026, 23:16 UTC.
Source(s) reported by the precooked timeline: BSI CSAF · CISA Vulnrichment · CVEProject · GHSA.
Underlying CVE record last modified: 16 Oct 2026, 23:16 UTC.
This indicates indexed source activity, not necessarily a newly published exploit, a KEV addition or a change to the underlying vulnerability. EPSS refreshes can also surface old CVEs.Affected vendors, products & devices
Click any identity to explore ↗20 distinct affected-product identities listed in this bounded CVE lookup. Select a vendor or product to investigate.
No matching affected products.
Vendor-wide upcoming ZDI notices are intentionally not attributed to these CVEs or products. Only directly CVE-linked ZDI evidence is shown under Evidence & source attribution.
Vendors
Identity evidence: NVD applicability / catalog · CVE catalog product links · NVD criteria may be conditional, and listing does not prove installed exposure.Evidence & source attribution
CVE-2026-83748Windows Error Reporting Remote Code Execution VulnerabilityMicrosoftZDI upcoming · 49 / Windows 10 Version 1607 · MicrosoftZDI upcoming · 49 / Windows 11 Version 26H2 · MicrosoftZDI upcoming · 49 / Windows Server 2012+17 more listed ↓9.8Critical0.72%BSI CSAFRCERSS 1CWE-122 ↗›
Vulnerability intelligence
Windows Error Reporting Remote Code Execution Vulnerability
Textual classification only; validate technical prerequisites in the source advisory. Unknown classifications are not considered safe.Microsoft Security Update Guide · CVE-2026-83748 Windows Error Reporting Remote Code Execution Vulnerability · Source ↗
Microsoft Windows und Windows Server: Mehrere Schwachstellen
Windows Error Reporting Remote Code Execution Vulnerability
Recorded intelligence activity: 16 Oct 2026, 23:16 UTC.
Source(s) reported by the precooked timeline: BSI CSAF · CISA Vulnrichment · CVEProject · GHSA.
Underlying CVE record last modified: 16 Oct 2026, 23:16 UTC.
This indicates indexed source activity, not necessarily a newly published exploit, a KEV addition or a change to the underlying vulnerability. EPSS refreshes can also surface old CVEs.Affected vendors, products & devices
Click any identity to explore ↗20 distinct affected-product identities listed in this bounded CVE lookup. Select a vendor or product to investigate.
No matching affected products.
Vendor-wide upcoming ZDI notices are intentionally not attributed to these CVEs or products. Only directly CVE-linked ZDI evidence is shown under Evidence & source attribution.
Vendors
Identity evidence: NVD applicability / catalog · CVE catalog product links · NVD criteria may be conditional, and listing does not prove installed exposure.Evidence & source attribution
CVE-2026-83770Windows Text Shaping Remote Code Execution VulnerabilityMicrosoftZDI upcoming · 49 / Windows 10 Version 1607 · MicrosoftZDI upcoming · 49 / Windows 11 Version 26H2 · MicrosoftZDI upcoming · 49 / Windows Server 2012+17 more listed ↓9.8Critical1.00%BSI CSAFRCECWE-122 ↗›
Vulnerability intelligence
Windows Text Shaping Remote Code Execution Vulnerability
Textual classification only; validate technical prerequisites in the source advisory. Unknown classifications are not considered safe.Microsoft Windows und Windows Server: Mehrere Schwachstellen
Windows Text Shaping Remote Code Execution Vulnerability
Recorded intelligence activity: 16 Oct 2026, 23:22 UTC.
Source(s) reported by the precooked timeline: BSI CSAF · CISA Vulnrichment · CVEProject · GHSA.
Underlying CVE record last modified: 16 Oct 2026, 23:22 UTC.
This indicates indexed source activity, not necessarily a newly published exploit, a KEV addition or a change to the underlying vulnerability. EPSS refreshes can also surface old CVEs.Affected vendors, products & devices
Click any identity to explore ↗20 distinct affected-product identities listed in this bounded CVE lookup. Select a vendor or product to investigate.
No matching affected products.
Vendor-wide upcoming ZDI notices are intentionally not attributed to these CVEs or products. Only directly CVE-linked ZDI evidence is shown under Evidence & source attribution.
Vendors
Identity evidence: NVD applicability / catalog · CVE catalog product links · NVD criteria may be conditional, and listing does not prove installed exposure.Evidence & source attribution
CVE-2026-83780Windows CCFFilter Driver Remote Code Execution VulnerabilityMicrosoftZDI upcoming · 49 / Windows 10 Version 1607 · MicrosoftZDI upcoming · 49 / Windows 10 Version 1809 · MicrosoftZDI upcoming · 49 / Windows Server 2016+6 more listed ↓9.8Critical0.96%BSI CSAFRCERSS 1CWE-416 ↗›
Vulnerability intelligence
Windows CCFFilter Driver Remote Code Execution Vulnerability
Textual classification only; validate technical prerequisites in the source advisory. Unknown classifications are not considered safe.Microsoft Security Update Guide · CVE-2026-83780 Windows CCFFilter Driver Remote Code Execution Vulnerability · Source ↗
Microsoft Windows und Windows Server: Mehrere Schwachstellen
Windows CCFFilter Driver Remote Code Execution Vulnerability
Recorded intelligence activity: 16 Oct 2026, 23:16 UTC.
Source(s) reported by the precooked timeline: BSI CSAF · CISA Vulnrichment · CVEProject · GHSA.
Underlying CVE record last modified: 16 Oct 2026, 23:16 UTC.
This indicates indexed source activity, not necessarily a newly published exploit, a KEV addition or a change to the underlying vulnerability. EPSS refreshes can also surface old CVEs.Affected vendors, products & devices
Click any identity to explore ↗9 distinct affected-product identities listed in this bounded CVE lookup. Select a vendor or product to investigate.
No matching affected products.
Vendor-wide upcoming ZDI notices are intentionally not attributed to these CVEs or products. Only directly CVE-linked ZDI evidence is shown under Evidence & source attribution.
Vendors
Identity evidence: NVD applicability / catalog · CVE catalog product links · NVD criteria may be conditional, and listing does not prove installed exposure.Evidence & source attribution
CVE-2026-83782Windows Shell Remote Code Execution VulnerabilityMicrosoftZDI upcoming · 49 / Windows 10 Version 1607 · MicrosoftZDI upcoming · 49 / Windows 11 Version 26H2 · MicrosoftZDI upcoming · 49 / Windows Server 2012+17 more listed ↓9.8Critical0.89%BSI CSAFRCERSS 1CWE-122 ↗›
Vulnerability intelligence
Windows Shell Remote Code Execution Vulnerability
Textual classification only; validate technical prerequisites in the source advisory. Unknown classifications are not considered safe.Microsoft Security Update Guide · CVE-2026-83782 Windows Shell Remote Code Execution Vulnerability · Source ↗
Microsoft Windows und Windows Server: Mehrere Schwachstellen
Windows Shell Remote Code Execution Vulnerability
Recorded intelligence activity: 16 Oct 2026, 23:16 UTC.
Source(s) reported by the precooked timeline: BSI CSAF · CISA Vulnrichment · CVEProject · GHSA.
Underlying CVE record last modified: 16 Oct 2026, 23:16 UTC.
This indicates indexed source activity, not necessarily a newly published exploit, a KEV addition or a change to the underlying vulnerability. EPSS refreshes can also surface old CVEs.Affected vendors, products & devices
Click any identity to explore ↗20 distinct affected-product identities listed in this bounded CVE lookup. Select a vendor or product to investigate.
No matching affected products.
Vendor-wide upcoming ZDI notices are intentionally not attributed to these CVEs or products. Only directly CVE-linked ZDI evidence is shown under Evidence & source attribution.
Vendors
Identity evidence: NVD applicability / catalog · CVE catalog product links · NVD criteria may be conditional, and listing does not prove installed exposure.Evidence & source attribution
CVE-2026-83862Windows Network Load Balancing Remote Code Execution VulnerabilityMicrosoftZDI upcoming · 49 / Windows 10 Version 1607 · MicrosoftZDI upcoming · 49 / Windows Server 2019 (Server Core installation) · MicrosoftZDI upcoming · 49 / Windows Server 2022+10 more listed ↓9.8Critical0.65%BSI CSAFRCERSS 1CWE-416 ↗›
Vulnerability intelligence
Windows Network Load Balancing Remote Code Execution Vulnerability
Textual classification only; validate technical prerequisites in the source advisory. Unknown classifications are not considered safe.Microsoft Security Update Guide · CVE-2026-83862 Windows Network Load Balancing Remote Code Execution Vulnerability · Source ↗
Microsoft Windows und Windows Server: Mehrere Schwachstellen
Windows Network Load Balancing Remote Code Execution Vulnerability
Recorded intelligence activity: 16 Oct 2026, 23:17 UTC.
Source(s) reported by the precooked timeline: BSI CSAF · CISA Vulnrichment · CVEProject · GHSA.
Underlying CVE record last modified: 16 Oct 2026, 23:17 UTC.
This indicates indexed source activity, not necessarily a newly published exploit, a KEV addition or a change to the underlying vulnerability. EPSS refreshes can also surface old CVEs.Affected vendors, products & devices
Click any identity to explore ↗13 distinct affected-product identities listed in this bounded CVE lookup. Select a vendor or product to investigate.
No matching affected products.
Vendor-wide upcoming ZDI notices are intentionally not attributed to these CVEs or products. Only directly CVE-linked ZDI evidence is shown under Evidence & source attribution.
Vendors
Identity evidence: NVD applicability / catalog · CVE catalog product links · NVD criteria may be conditional, and listing does not prove installed exposure.Evidence & source attribution
CVE-2026-83869Windows Domain Name Service Remote Code Execution VulnerabilitymicrosoftZDI upcoming · 49 / windows 10 1607 (< 10.0.14393.9612) · microsoftZDI upcoming · 49 / windows 10 1809 (< 10.0.17763.9376) · microsoftZDI upcoming · 49 / windows 10 21h2 (< 10.0.19044.7807)+31 more listed ↓9.8Critical0.63%BSI CSAFRCERSS 1CWE-191 ↗›
Vulnerability intelligence
Windows Domain Name Service Remote Code Execution Vulnerability
Textual classification only; validate technical prerequisites in the source advisory. Unknown classifications are not considered safe.Microsoft Security Update Guide · CVE-2026-83869 Windows Domain Name Service Remote Code Execution Vulnerability · Source ↗
Microsoft Windows und Windows Server: Mehrere Schwachstellen
Windows Domain Name Service Remote Code Execution Vulnerability
Recorded intelligence activity: 16 Oct 2026, 23:17 UTC.
Source(s) reported by the precooked timeline: BSI CSAF · CISA Vulnrichment · CVEProject · GHSA.
Underlying CVE record last modified: 16 Oct 2026, 23:17 UTC.
This indicates indexed source activity, not necessarily a newly published exploit, a KEV addition or a change to the underlying vulnerability. EPSS refreshes can also surface old CVEs.Affected vendors, products & devices
Click any identity to explore ↗34 distinct affected-product identities listed in this bounded CVE lookup. Select a vendor or product to investigate.
No matching affected products.
Vendor-wide upcoming ZDI notices are intentionally not attributed to these CVEs or products. Only directly CVE-linked ZDI evidence is shown under Evidence & source attribution.
Vendors
Identity evidence: NVD applicability / catalog · CVE catalog product links · NVD criteria may be conditional, and listing does not prove installed exposure.Evidence & source attribution
CVE-2026-83910RPC Runtime Library Remote Code Execution VulnerabilityMicrosoftZDI upcoming · 49 / Windows 10 Version 1607 · MicrosoftZDI upcoming · 49 / Windows 11 Version 26H2 · MicrosoftZDI upcoming · 49 / Windows Server 2012+17 more listed ↓9.8Critical0.96%BSI CSAFRCECWE-787 ↗›
Vulnerability intelligence
RPC Runtime Library Remote Code Execution Vulnerability
Textual classification only; validate technical prerequisites in the source advisory. Unknown classifications are not considered safe.Microsoft Windows und Windows Server: Mehrere Schwachstellen
RPC Runtime Library Remote Code Execution Vulnerability
Recorded intelligence activity: 16 Oct 2026, 23:23 UTC.
Source(s) reported by the precooked timeline: BSI CSAF · CISA Vulnrichment · CVEProject · GHSA.
Underlying CVE record last modified: 16 Oct 2026, 23:23 UTC.
This indicates indexed source activity, not necessarily a newly published exploit, a KEV addition or a change to the underlying vulnerability. EPSS refreshes can also surface old CVEs.Affected vendors, products & devices
Click any identity to explore ↗20 distinct affected-product identities listed in this bounded CVE lookup. Select a vendor or product to investigate.
No matching affected products.
Vendor-wide upcoming ZDI notices are intentionally not attributed to these CVEs or products. Only directly CVE-linked ZDI evidence is shown under Evidence & source attribution.
Vendors
Identity evidence: NVD applicability / catalog · CVE catalog product links · NVD criteria may be conditional, and listing does not prove installed exposure.Evidence & source attribution
CVE-2026-83935Microsoft XML Remote Code Execution VulnerabilityMicrosoftZDI upcoming · 49 / Windows 10 Version 1607 · MicrosoftZDI upcoming · 49 / Windows 11 Version 26H2 · MicrosoftZDI upcoming · 49 / Windows Server 2012+17 more listed ↓9.8Critical0.70%BSI CSAFRCECWE-122 ↗›
Vulnerability intelligence
Microsoft XML Remote Code Execution Vulnerability
Textual classification only; validate technical prerequisites in the source advisory. Unknown classifications are not considered safe.Microsoft Windows und Windows Server: Mehrere Schwachstellen
Microsoft XML Remote Code Execution Vulnerability
Recorded intelligence activity: 16 Oct 2026, 23:23 UTC.
Source(s) reported by the precooked timeline: BSI CSAF · CISA Vulnrichment · CVEProject · GHSA.
Underlying CVE record last modified: 16 Oct 2026, 23:23 UTC.
This indicates indexed source activity, not necessarily a newly published exploit, a KEV addition or a change to the underlying vulnerability. EPSS refreshes can also surface old CVEs.Affected vendors, products & devices
Click any identity to explore ↗20 distinct affected-product identities listed in this bounded CVE lookup. Select a vendor or product to investigate.
No matching affected products.
Vendor-wide upcoming ZDI notices are intentionally not attributed to these CVEs or products. Only directly CVE-linked ZDI evidence is shown under Evidence & source attribution.
Vendors
Identity evidence: NVD applicability / catalog · CVE catalog product links · NVD criteria may be conditional, and listing does not prove installed exposure.Evidence & source attribution
CVE-2026-84015Remote Access Point-to-Point Protocol (PPP) EAP-TLS Remote Code Execution VulnerabilityMicrosoftZDI upcoming · 49 / Windows 10 Version 1607 · MicrosoftZDI upcoming · 49 / Windows 11 Version 26H2 · MicrosoftZDI upcoming · 49 / Windows Server 2012+17 more listed ↓9.8Critical0.89%BSI CSAFRCERSS 1CWE-122 ↗›
Vulnerability intelligence
Remote Access Point-to-Point Protocol (PPP) EAP-TLS Remote Code Execution Vulnerability
Textual classification only; validate technical prerequisites in the source advisory. Unknown classifications are not considered safe.Microsoft Security Update Guide · CVE-2026-84015 Remote Access Point-to-Point Protocol (PPP) EAP-TLS Remote Code Execution Vulnerability · Source ↗
Microsoft Windows und Windows Server: Mehrere Schwachstellen
Remote Access Point-to-Point Protocol (PPP) EAP-TLS Remote Code Execution Vulnerability
Recorded intelligence activity: 16 Oct 2026, 23:17 UTC.
Source(s) reported by the precooked timeline: BSI CSAF · CISA Vulnrichment · CVEProject · GHSA.
Underlying CVE record last modified: 16 Oct 2026, 23:17 UTC.
This indicates indexed source activity, not necessarily a newly published exploit, a KEV addition or a change to the underlying vulnerability. EPSS refreshes can also surface old CVEs.Affected vendors, products & devices
Click any identity to explore ↗20 distinct affected-product identities listed in this bounded CVE lookup. Select a vendor or product to investigate.
No matching affected products.
Vendor-wide upcoming ZDI notices are intentionally not attributed to these CVEs or products. Only directly CVE-linked ZDI evidence is shown under Evidence & source attribution.
Vendors
Identity evidence: NVD applicability / catalog · CVE catalog product links · NVD criteria may be conditional, and listing does not prove installed exposure.Evidence & source attribution
CVE-2026-85792Windows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilitymicrosoftZDI upcoming · 49 / windows 10 1607 (< 10.0.14393.9612) · microsoftZDI upcoming · 49 / windows 10 1809 (< 10.0.17763.9376) · microsoftZDI upcoming · 49 / windows 10 21h2 (< 10.0.19044.7807)+31 more listed ↓9.8Critical0.87%BSI CSAFRCERSS 1CWE-416 ↗›
Vulnerability intelligence
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
Textual classification only; validate technical prerequisites in the source advisory. Unknown classifications are not considered safe.Microsoft Security Update Guide · CVE-2026-85792 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability · Source ↗
Microsoft Windows und Windows Server: Mehrere Schwachstellen
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
Recorded intelligence activity: 16 Oct 2026, 23:18 UTC.
Source(s) reported by the precooked timeline: BSI CSAF · CISA Vulnrichment · CVEProject · GHSA.
Underlying CVE record last modified: 16 Oct 2026, 23:18 UTC.
This indicates indexed source activity, not necessarily a newly published exploit, a KEV addition or a change to the underlying vulnerability. EPSS refreshes can also surface old CVEs.Affected vendors, products & devices
Click any identity to explore ↗34 distinct affected-product identities listed in this bounded CVE lookup. Select a vendor or product to investigate.
No matching affected products.
Vendor-wide upcoming ZDI notices are intentionally not attributed to these CVEs or products. Only directly CVE-linked ZDI evidence is shown under Evidence & source attribution.
Vendors
Identity evidence: NVD applicability / catalog · CVE catalog product links · NVD criteria may be conditional, and listing does not prove installed exposure.Evidence & source attribution
CVE-2026-85806Network Policy Server (NPS) Remote Code Execution VulnerabilitymicrosoftZDI upcoming · 49 / windows 10 1607 (< 10.0.14393.9612) · microsoftZDI upcoming · 49 / windows 10 1809 (< 10.0.17763.9376) · microsoftZDI upcoming · 49 / windows 10 21h2 (< 10.0.19044.7807)+31 more listed ↓9.8Critical0.91%BSI CSAFRCERSS 1CWE-121 ↗CWE-191 ↗›
Vulnerability intelligence
Network Policy Server (NPS) Remote Code Execution Vulnerability
Textual classification only; validate technical prerequisites in the source advisory. Unknown classifications are not considered safe.Microsoft Security Update Guide · CVE-2026-85806 Network Policy Server (NPS) Remote Code Execution Vulnerability · Source ↗
Microsoft Windows und Windows Server: Mehrere Schwachstellen
Network Policy Server (NPS) Remote Code Execution Vulnerability
Recorded intelligence activity: 16 Oct 2026, 23:18 UTC.
Source(s) reported by the precooked timeline: BSI CSAF · CISA Vulnrichment · CVEProject · GHSA.
Underlying CVE record last modified: 16 Oct 2026, 23:18 UTC.
This indicates indexed source activity, not necessarily a newly published exploit, a KEV addition or a change to the underlying vulnerability. EPSS refreshes can also surface old CVEs.Affected vendors, products & devices
Click any identity to explore ↗34 distinct affected-product identities listed in this bounded CVE lookup. Select a vendor or product to investigate.
No matching affected products.
Vendor-wide upcoming ZDI notices are intentionally not attributed to these CVEs or products. Only directly CVE-linked ZDI evidence is shown under Evidence & source attribution.
Vendors
Identity evidence: NVD applicability / catalog · CVE catalog product links · NVD criteria may be conditional, and listing does not prove installed exposure.Evidence & source attribution
CVE-2026-85809Windows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilitymicrosoftZDI upcoming · 49 / windows 10 1607 (< 10.0.14393.9612) · microsoftZDI upcoming · 49 / windows 10 1809 (< 10.0.17763.9376) · microsoftZDI upcoming · 49 / windows 10 21h2 (< 10.0.19044.7807)+31 more listed ↓9.8Critical0.91%BSI CSAFRCERSS 1CWE-122 ↗›
Vulnerability intelligence
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
Textual classification only; validate technical prerequisites in the source advisory. Unknown classifications are not considered safe.Microsoft Security Update Guide · CVE-2026-85809 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability · Source ↗
Microsoft Windows und Windows Server: Mehrere Schwachstellen
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
Recorded intelligence activity: 16 Oct 2026, 23:18 UTC.
Source(s) reported by the precooked timeline: BSI CSAF · CISA Vulnrichment · CVEProject · GHSA.
Underlying CVE record last modified: 16 Oct 2026, 23:18 UTC.
This indicates indexed source activity, not necessarily a newly published exploit, a KEV addition or a change to the underlying vulnerability. EPSS refreshes can also surface old CVEs.Affected vendors, products & devices
Click any identity to explore ↗34 distinct affected-product identities listed in this bounded CVE lookup. Select a vendor or product to investigate.
No matching affected products.
Vendor-wide upcoming ZDI notices are intentionally not attributed to these CVEs or products. Only directly CVE-linked ZDI evidence is shown under Evidence & source attribution.
Vendors
Identity evidence: NVD applicability / catalog · CVE catalog product links · NVD criteria may be conditional, and listing does not prove installed exposure.Evidence & source attribution
CVE-2026-85814Microsoft Windows Media Foundation Remote Code Execution VulnerabilitymicrosoftZDI upcoming · 49 / windows 10 1607 (< 10.0.14393.9612) · microsoftZDI upcoming · 49 / windows 10 1809 (< 10.0.17763.9376) · microsoftZDI upcoming · 49 / windows 10 21h2 (< 10.0.19044.7807)+31 more listed ↓9.8Critical0.91%BSI CSAFRCERSS 1CWE-122 ↗›
Vulnerability intelligence
Microsoft Windows Media Foundation Remote Code Execution Vulnerability
Textual classification only; validate technical prerequisites in the source advisory. Unknown classifications are not considered safe.Microsoft Security Update Guide · CVE-2026-85814 Microsoft Windows Media Foundation Remote Code Execution Vulnerability · Source ↗
Microsoft Windows und Windows Server: Mehrere Schwachstellen
Microsoft Windows Media Foundation Remote Code Execution Vulnerability
Recorded intelligence activity: 16 Oct 2026, 23:18 UTC.
Source(s) reported by the precooked timeline: BSI CSAF · CISA Vulnrichment · CVEProject · GHSA.
Underlying CVE record last modified: 16 Oct 2026, 23:18 UTC.
This indicates indexed source activity, not necessarily a newly published exploit, a KEV addition or a change to the underlying vulnerability. EPSS refreshes can also surface old CVEs.Affected vendors, products & devices
Click any identity to explore ↗34 distinct affected-product identities listed in this bounded CVE lookup. Select a vendor or product to investigate.
No matching affected products.
Vendor-wide upcoming ZDI notices are intentionally not attributed to these CVEs or products. Only directly CVE-linked ZDI evidence is shown under Evidence & source attribution.
Vendors
Identity evidence: NVD applicability / catalog · CVE catalog product links · NVD criteria may be conditional, and listing does not prove installed exposure.Evidence & source attribution
CVE-2026-85928Windows Volume Manager Extension Driver Remote Code Execution VulnerabilityMicrosoftZDI upcoming · 49 / Windows 10 Version 1607 · MicrosoftZDI upcoming · 49 / Windows 11 Version 26H2 · MicrosoftZDI upcoming · 49 / Windows Server 2012+17 more listed ↓9.8Critical0.65%BSI CSAFRCERSS 1CWE-122 ↗›
Vulnerability intelligence
Windows Volume Manager Extension Driver Remote Code Execution Vulnerability
Textual classification only; validate technical prerequisites in the source advisory. Unknown classifications are not considered safe.Microsoft Security Update Guide · CVE-2026-85928 Windows Volume Manager Extension Driver Remote Code Execution Vulnerability · Source ↗
Microsoft Windows und Windows Server: Mehrere Schwachstellen
Windows Volume Manager Extension Driver Remote Code Execution Vulnerability
Recorded intelligence activity: 16 Oct 2026, 23:19 UTC.
Source(s) reported by the precooked timeline: BSI CSAF · CISA Vulnrichment · CVEProject · GHSA.
Underlying CVE record last modified: 16 Oct 2026, 23:19 UTC.
This indicates indexed source activity, not necessarily a newly published exploit, a KEV addition or a change to the underlying vulnerability. EPSS refreshes can also surface old CVEs.Affected vendors, products & devices
Click any identity to explore ↗20 distinct affected-product identities listed in this bounded CVE lookup. Select a vendor or product to investigate.
No matching affected products.
Vendor-wide upcoming ZDI notices are intentionally not attributed to these CVEs or products. Only directly CVE-linked ZDI evidence is shown under Evidence & source attribution.
Vendors
Identity evidence: NVD applicability / catalog · CVE catalog product links · NVD criteria may be conditional, and listing does not prove installed exposure.Evidence & source attribution
CVE-2026-88102Microsoft Failover Cluster Remote Code Execution VulnerabilitymicrosoftZDI upcoming · 49 / windows server 2019 (< 10.0.17763.9376) · microsoftZDI upcoming · 49 / windows server 2022 (< 10.0.20348.5761) · microsoftZDI upcoming · 49 / windows server 2025 (< 10.0.26100.33650)+5 more listed ↓9.8Critical0.63%BSI CSAFRCERSS 1CWE-416 ↗›
Vulnerability intelligence
Microsoft Failover Cluster Remote Code Execution Vulnerability
Textual classification only; validate technical prerequisites in the source advisory. Unknown classifications are not considered safe.Microsoft Security Update Guide · CVE-2026-88102 Microsoft Failover Cluster Remote Code Execution Vulnerability · Source ↗
Microsoft Windows und Windows Server: Mehrere Schwachstellen
Microsoft Failover Cluster Remote Code Execution Vulnerability
Recorded intelligence activity: 16 Oct 2026, 23:19 UTC.
Source(s) reported by the precooked timeline: BSI CSAF · CISA Vulnrichment · CVEProject · GHSA.
Underlying CVE record last modified: 16 Oct 2026, 23:19 UTC.
This indicates indexed source activity, not necessarily a newly published exploit, a KEV addition or a change to the underlying vulnerability. EPSS refreshes can also surface old CVEs.Affected vendors, products & devices
Click any identity to explore ↗8 distinct affected-product identities listed in this bounded CVE lookup. Select a vendor or product to investigate.
No matching affected products.
Vendor-wide upcoming ZDI notices are intentionally not attributed to these CVEs or products. Only directly CVE-linked ZDI evidence is shown under Evidence & source attribution.
Vendors
Identity evidence: NVD applicability / catalog · CVE catalog product links · NVD criteria may be conditional, and listing does not prove installed exposure.Evidence & source attribution
CVE-2026-88131Microsoft Dataverse Remote Code Execution VulnerabilitymicrosoftZDI upcoming · 49 / dataverse · MicrosoftZDI upcoming · 49 / Microsoft Dataverse9.8Critical0.82%BSI CSAFRCECWE-502 ↗›
Vulnerability intelligence
Microsoft Dataverse Remote Code Execution Vulnerability
Textual classification only; validate technical prerequisites in the source advisory. Unknown classifications are not considered safe.Microsoft Dataverse: Schwachstelle ermöglicht Codeausführung
Microsoft Dataverse Remote Code Execution Vulnerability
Recorded intelligence activity: 16 Oct 2026, 23:26 UTC.
Source(s) reported by the precooked timeline: BSI CSAF · CISA Vulnrichment · CVEProject · GHSA.
Underlying CVE record last modified: 16 Oct 2026, 23:26 UTC.
This indicates indexed source activity, not necessarily a newly published exploit, a KEV addition or a change to the underlying vulnerability. EPSS refreshes can also surface old CVEs.Affected vendors, products & devices
Click any identity to explore ↗2 distinct affected-product identities listed in this bounded CVE lookup. Select a vendor or product to investigate.
No matching affected products.
Vendor-wide upcoming ZDI notices are intentionally not attributed to these CVEs or products. Only directly CVE-linked ZDI evidence is shown under Evidence & source attribution.
Vendors
Identity evidence: NVD applicability / catalog · CVE catalog product links · NVD criteria may be conditional, and listing does not prove installed exposure.Evidence & source attribution
CVE-2026-88156Microsoft Office Outlook Remote Code Execution VulnerabilitymicrosoftZDI upcoming · 49 / 365 apps · microsoftZDI upcoming · 49 / microsoft 365 · microsoftZDI upcoming · 49 / office 2021+7 more listed ↓9.8Critical0.98%BSI CSAFRCERSS 2CWE-121 ↗›
Vulnerability intelligence
Microsoft Office Outlook Remote Code Execution Vulnerability
Textual classification only; validate technical prerequisites in the source advisory. Unknown classifications are not considered safe.Microsoft Security Update Guide · CVE-2026-88156 Microsoft Office Outlook Remote Code Execution Vulnerability · Source ↗
Rapid7 Research · Patch Tuesday - October 2026 · Source ↗
Microsoft Office Produkte: Mehrere Schwachstellen ermöglichen Privilegieneskalation
Microsoft Office Outlook Remote Code Execution Vulnerability
Recorded intelligence activity: 16 Oct 2026, 23:20 UTC.
Source(s) reported by the precooked timeline: BSI CSAF · CISA Vulnrichment · CVEProject · GHSA.
Underlying CVE record last modified: 16 Oct 2026, 23:20 UTC.
This indicates indexed source activity, not necessarily a newly published exploit, a KEV addition or a change to the underlying vulnerability. EPSS refreshes can also surface old CVEs.Affected vendors, products & devices
Click any identity to explore ↗10 distinct affected-product identities listed in this bounded CVE lookup. Select a vendor or product to investigate.
No matching affected products.
Vendor-wide upcoming ZDI notices are intentionally not attributed to these CVEs or products. Only directly CVE-linked ZDI evidence is shown under Evidence & source attribution.
Vendors
Identity evidence: NVD applicability / catalog · CVE catalog product links · NVD criteria may be conditional, and listing does not prove installed exposure.Evidence & source attribution
CVE-2026-88178Microsoft Office PowerPoint Remote Code Execution VulnerabilitymicrosoftZDI upcoming · 49 / 365 apps · microsoftZDI upcoming · 49 / microsoft 365 · microsoftZDI upcoming · 49 / office 2021+7 more listed ↓9.8Critical0.95%BSI CSAFRCERSS 1CWE-416 ↗›
Vulnerability intelligence
Microsoft Office PowerPoint Remote Code Execution Vulnerability
Textual classification only; validate technical prerequisites in the source advisory. Unknown classifications are not considered safe.Microsoft Security Update Guide · CVE-2026-88178 Microsoft Office PowerPoint Remote Code Execution Vulnerability · Source ↗
Microsoft Office Produkte: Mehrere Schwachstellen ermöglichen Privilegieneskalation
Microsoft Office PowerPoint Remote Code Execution Vulnerability
Recorded intelligence activity: 16 Oct 2026, 23:20 UTC.
Source(s) reported by the precooked timeline: BSI CSAF · CISA Vulnrichment · CVEProject · GHSA.
Underlying CVE record last modified: 16 Oct 2026, 23:20 UTC.
This indicates indexed source activity, not necessarily a newly published exploit, a KEV addition or a change to the underlying vulnerability. EPSS refreshes can also surface old CVEs.Affected vendors, products & devices
Click any identity to explore ↗10 distinct affected-product identities listed in this bounded CVE lookup. Select a vendor or product to investigate.
No matching affected products.
Vendor-wide upcoming ZDI notices are intentionally not attributed to these CVEs or products. Only directly CVE-linked ZDI evidence is shown under Evidence & source attribution.
Vendors
Identity evidence: NVD applicability / catalog · CVE catalog product links · NVD criteria may be conditional, and listing does not prove installed exposure.Evidence & source attribution
CVE-2026-96096Windows Media Player Remote Code Execution VulnerabilitymicrosoftZDI upcoming · 49 / windows 10 1607 (< 10.0.14393.9612) · microsoftZDI upcoming · 49 / windows 10 1809 (< 10.0.17763.9376) · microsoftZDI upcoming · 49 / windows 10 21h2 (< 10.0.19044.7807)+31 more listed ↓9.8Critical0.66%BSI CSAFRCECWE-122 ↗›
Vulnerability intelligence
Windows Media Player Remote Code Execution Vulnerability
Textual classification only; validate technical prerequisites in the source advisory. Unknown classifications are not considered safe.Microsoft Windows und Windows Server: Mehrere Schwachstellen
Windows Media Player Remote Code Execution Vulnerability
Recorded intelligence activity: 16 Oct 2026, 23:21 UTC.
Source(s) reported by the precooked timeline: BSI CSAF · CISA Vulnrichment · CVEProject · GHSA.
Underlying CVE record last modified: 16 Oct 2026, 23:21 UTC.
This indicates indexed source activity, not necessarily a newly published exploit, a KEV addition or a change to the underlying vulnerability. EPSS refreshes can also surface old CVEs.Affected vendors, products & devices
Click any identity to explore ↗34 distinct affected-product identities listed in this bounded CVE lookup. Select a vendor or product to investigate.
No matching affected products.
Vendor-wide upcoming ZDI notices are intentionally not attributed to these CVEs or products. Only directly CVE-linked ZDI evidence is shown under Evidence & source attribution.
Vendors
Identity evidence: NVD applicability / catalog · CVE catalog product links · NVD criteria may be conditional, and listing does not prove installed exposure.Evidence & source attribution
CVE-2026-96113Windows Domain Name Service Remote Code Execution VulnerabilitymicrosoftZDI upcoming · 49 / windows 10 1607 (< 10.0.14393.9612) · microsoftZDI upcoming · 49 / windows 10 1809 (< 10.0.17763.9376) · microsoftZDI upcoming · 49 / windows server 2012 (r2)+17 more listed ↓9.8Critical0.66%BSI CSAFRCECWE-197 ↗CWE-122 ↗›
Vulnerability intelligence
Windows Domain Name Service Remote Code Execution Vulnerability
Textual classification only; validate technical prerequisites in the source advisory. Unknown classifications are not considered safe.Microsoft Windows und Windows Server: Mehrere Schwachstellen
Windows Domain Name Service Remote Code Execution Vulnerability
Recorded intelligence activity: 16 Oct 2026, 23:26 UTC.
Source(s) reported by the precooked timeline: BSI CSAF · CISA Vulnrichment · CVEProject · GHSA.
Underlying CVE record last modified: 16 Oct 2026, 23:26 UTC.
This indicates indexed source activity, not necessarily a newly published exploit, a KEV addition or a change to the underlying vulnerability. EPSS refreshes can also surface old CVEs.Affected vendors, products & devices
Click any identity to explore ↗20 distinct affected-product identities listed in this bounded CVE lookup. Select a vendor or product to investigate.
No matching affected products.
Vendor-wide upcoming ZDI notices are intentionally not attributed to these CVEs or products. Only directly CVE-linked ZDI evidence is shown under Evidence & source attribution.
Vendors
Identity evidence: NVD applicability / catalog · CVE catalog product links · NVD criteria may be conditional, and listing does not prove installed exposure.Evidence & source attribution
CVE-2026-96219Windows Local Security Authority Subsystem Service (LSASS) Remote Code Execution VulnerabilitymicrosoftZDI upcoming · 49 / windows 10 1809 (< 10.0.17763.9376) · microsoftZDI upcoming · 49 / windows 10 21h2 (< 10.0.19044.7807) · microsoftZDI upcoming · 49 / windows 10 22h2 (< 10.0.19045.7807)+21 more listed ↓9.8Critical0.87%BSI CSAFRCECWE-787 ↗›
Vulnerability intelligence
Windows Local Security Authority Subsystem Service (LSASS) Remote Code Execution Vulnerability
Textual classification only; validate technical prerequisites in the source advisory. Unknown classifications are not considered safe.Microsoft Windows und Windows Server: Mehrere Schwachstellen
Windows Local Security Authority Subsystem Service (LSASS) Remote Code Execution Vulnerability
Recorded intelligence activity: 16 Oct 2026, 21:17 UTC.
Source(s) reported by the precooked timeline: BSI CSAF · CISA Vulnrichment · GHSA.
Underlying CVE record last modified: 16 Oct 2026, 23:20 UTC.
This indicates indexed source activity, not necessarily a newly published exploit, a KEV addition or a change to the underlying vulnerability. EPSS refreshes can also surface old CVEs.Affected vendors, products & devices
Click any identity to explore ↗24 distinct affected-product identities listed in this bounded CVE lookup. Select a vendor or product to investigate.
No matching affected products.
Vendor-wide upcoming ZDI notices are intentionally not attributed to these CVEs or products. Only directly CVE-linked ZDI evidence is shown under Evidence & source attribution.
Vendors
Identity evidence: NVD applicability / catalog · CVE catalog product links · NVD criteria may be conditional, and listing does not prove installed exposure.Evidence & source attribution
CVE-2026-96320Windows DHCP Server Remote Code Execution VulnerabilitymicrosoftZDI upcoming · 49 / windows 10 1607 (< 10.0.14393.9612) · microsoftZDI upcoming · 49 / windows 10 1809 (< 10.0.17763.9376) · microsoftZDI upcoming · 49 / windows server 2012 (r2)+17 more listed ↓9.8Critical0.91%BSI CSAFRCECWE-122 ↗›
Vulnerability intelligence
Windows DHCP Server Remote Code Execution Vulnerability
Textual classification only; validate technical prerequisites in the source advisory. Unknown classifications are not considered safe.Microsoft Windows und Windows Server: Mehrere Schwachstellen
Windows DHCP Server Remote Code Execution Vulnerability
Recorded intelligence activity: 16 Oct 2026, 23:25 UTC.
Source(s) reported by the precooked timeline: BSI CSAF · CISA Vulnrichment · CVEProject · GHSA.
Underlying CVE record last modified: 16 Oct 2026, 23:25 UTC.
This indicates indexed source activity, not necessarily a newly published exploit, a KEV addition or a change to the underlying vulnerability. EPSS refreshes can also surface old CVEs.Affected vendors, products & devices
Click any identity to explore ↗20 distinct affected-product identities listed in this bounded CVE lookup. Select a vendor or product to investigate.
No matching affected products.
Vendor-wide upcoming ZDI notices are intentionally not attributed to these CVEs or products. Only directly CVE-linked ZDI evidence is shown under Evidence & source attribution.
Vendors
Identity evidence: NVD applicability / catalog · CVE catalog product links · NVD criteria may be conditional, and listing does not prove installed exposure.Evidence & source attribution
CVE-2026-96864Microsoft Failover Cluster Virtual Driver Remote Code Execution VulnerabilityMicrosoftZDI upcoming · 49 / Windows 10 Version 1607 · MicrosoftZDI upcoming · 49 / Windows Server 2019 (Server Core installation) · MicrosoftZDI upcoming · 49 / Windows Server 2022+10 more listed ↓9.8Critical0.65%BSI CSAFRCECWE-415 ↗›
Vulnerability intelligence
Microsoft Failover Cluster Virtual Driver Remote Code Execution Vulnerability
Textual classification only; validate technical prerequisites in the source advisory. Unknown classifications are not considered safe.Microsoft Windows und Windows Server: Mehrere Schwachstellen
Microsoft Failover Cluster Virtual Driver Remote Code Execution Vulnerability
Recorded intelligence activity: 16 Oct 2026, 23:20 UTC.
Source(s) reported by the precooked timeline: BSI CSAF · CISA Vulnrichment · CVEProject · GHSA.
Underlying CVE record last modified: 16 Oct 2026, 23:20 UTC.
This indicates indexed source activity, not necessarily a newly published exploit, a KEV addition or a change to the underlying vulnerability. EPSS refreshes can also surface old CVEs.Affected vendors, products & devices
Click any identity to explore ↗13 distinct affected-product identities listed in this bounded CVE lookup. Select a vendor or product to investigate.
No matching affected products.
Vendor-wide upcoming ZDI notices are intentionally not attributed to these CVEs or products. Only directly CVE-linked ZDI evidence is shown under Evidence & source attribution.
Vendors
Identity evidence: NVD applicability / catalog · CVE catalog product links · NVD criteria may be conditional, and listing does not prove installed exposure.Evidence & source attribution
CVE-2026-96909Windows BitLocker Remote Code Execution VulnerabilitymicrosoftZDI upcoming · 49 / windows 11 23h2 (< 10.0.22631.7652) · microsoftZDI upcoming · 49 / windows 11 24h2 (< 10.0.26100.9711) · microsoftZDI upcoming · 49 / windows 11 25h2 (< 10.0.26200.9711)+12 more listed ↓9.8Critical0.87%BSI CSAFRCECWE-122 ↗›
Vulnerability intelligence
Windows BitLocker Remote Code Execution Vulnerability
Textual classification only; validate technical prerequisites in the source advisory. Unknown classifications are not considered safe.Microsoft Windows und Windows Server: Mehrere Schwachstellen
Windows BitLocker Remote Code Execution Vulnerability
Recorded intelligence activity: 16 Oct 2026, 23:25 UTC.
Source(s) reported by the precooked timeline: BSI CSAF · CISA Vulnrichment · CVEProject · GHSA.
Underlying CVE record last modified: 16 Oct 2026, 23:25 UTC.
This indicates indexed source activity, not necessarily a newly published exploit, a KEV addition or a change to the underlying vulnerability. EPSS refreshes can also surface old CVEs.Affected vendors, products & devices
Click any identity to explore ↗15 distinct affected-product identities listed in this bounded CVE lookup. Select a vendor or product to investigate.
No matching affected products.
Vendor-wide upcoming ZDI notices are intentionally not attributed to these CVEs or products. Only directly CVE-linked ZDI evidence is shown under Evidence & source attribution.
Vendors
Identity evidence: NVD applicability / catalog · CVE catalog product links · NVD criteria may be conditional, and listing does not prove installed exposure.Evidence & source attribution
CVE-2026-96924Windows OLE Remote Code Execution VulnerabilitymicrosoftZDI upcoming · 49 / windows 10 1607 (< 10.0.14393.9612) · microsoftZDI upcoming · 49 / windows 10 1809 (< 10.0.17763.9376) · microsoftZDI upcoming · 49 / windows 10 21h2 (< 10.0.19044.7807)+31 more listed ↓9.8Critical0.87%BSI CSAFRCECWE-822 ↗›
Vulnerability intelligence
Windows OLE Remote Code Execution Vulnerability
Textual classification only; validate technical prerequisites in the source advisory. Unknown classifications are not considered safe.Microsoft Windows und Windows Server: Mehrere Schwachstellen
Windows OLE Remote Code Execution Vulnerability
Recorded intelligence activity: 16 Oct 2026, 23:25 UTC.
Source(s) reported by the precooked timeline: BSI CSAF · CISA Vulnrichment · CVEProject · GHSA.
Underlying CVE record last modified: 16 Oct 2026, 23:25 UTC.
This indicates indexed source activity, not necessarily a newly published exploit, a KEV addition or a change to the underlying vulnerability. EPSS refreshes can also surface old CVEs.Affected vendors, products & devices
Click any identity to explore ↗34 distinct affected-product identities listed in this bounded CVE lookup. Select a vendor or product to investigate.
No matching affected products.
Vendor-wide upcoming ZDI notices are intentionally not attributed to these CVEs or products. Only directly CVE-linked ZDI evidence is shown under Evidence & source attribution.
Vendors
Identity evidence: NVD applicability / catalog · CVE catalog product links · NVD criteria may be conditional, and listing does not prove installed exposure.Evidence & source attribution
CVE-2026-96934Windows DHCP Server Remote Code Execution VulnerabilitymicrosoftZDI upcoming · 49 / windows 10 1607 (< 10.0.14393.9612) · microsoftZDI upcoming · 49 / windows 10 1809 (< 10.0.17763.9376) · microsoftZDI upcoming · 49 / windows server 2012 (r2)+17 more listed ↓9.8Critical0.71%BSI CSAFRCECWE-416 ↗›
Vulnerability intelligence
Windows DHCP Server Remote Code Execution Vulnerability
Textual classification only; validate technical prerequisites in the source advisory. Unknown classifications are not considered safe.Microsoft Windows und Windows Server: Mehrere Schwachstellen
Windows DHCP Server Remote Code Execution Vulnerability
Recorded intelligence activity: 16 Oct 2026, 23:25 UTC.
Source(s) reported by the precooked timeline: BSI CSAF · CISA Vulnrichment · CVEProject · GHSA.
Underlying CVE record last modified: 16 Oct 2026, 23:25 UTC.
This indicates indexed source activity, not necessarily a newly published exploit, a KEV addition or a change to the underlying vulnerability. EPSS refreshes can also surface old CVEs.Affected vendors, products & devices
Click any identity to explore ↗20 distinct affected-product identities listed in this bounded CVE lookup. Select a vendor or product to investigate.
No matching affected products.
Vendor-wide upcoming ZDI notices are intentionally not attributed to these CVEs or products. Only directly CVE-linked ZDI evidence is shown under Evidence & source attribution.
Vendors
Identity evidence: NVD applicability / catalog · CVE catalog product links · NVD criteria may be conditional, and listing does not prove installed exposure.Evidence & source attribution
CVE-2026-97016Microsoft Office Outlook Remote Code Execution VulnerabilitymicrosoftZDI upcoming · 49 / 365 apps · microsoftZDI upcoming · 49 / office 2021 · microsoftZDI upcoming · 49 / office 2024+3 more listed ↓9.8Critical0.98%BSI CSAFRCERSS 1CWE-122 ↗›
Vulnerability intelligence
Microsoft Office Outlook Remote Code Execution Vulnerability
Textual classification only; validate technical prerequisites in the source advisory. Unknown classifications are not considered safe.Rapid7 Research · Patch Tuesday - October 2026 · Source ↗
Microsoft Office Produkte: Mehrere Schwachstellen ermöglichen Privilegieneskalation
Microsoft Office Outlook Remote Code Execution Vulnerability
Recorded intelligence activity: 16 Oct 2026, 23:20 UTC.
Source(s) reported by the precooked timeline: BSI CSAF · CISA Vulnrichment · CVEProject · GHSA.
Underlying CVE record last modified: 16 Oct 2026, 23:20 UTC.
This indicates indexed source activity, not necessarily a newly published exploit, a KEV addition or a change to the underlying vulnerability. EPSS refreshes can also surface old CVEs.Affected vendors, products & devices
Click any identity to explore ↗6 distinct affected-product identities listed in this bounded CVE lookup. Select a vendor or product to investigate.
No matching affected products.
Vendor-wide upcoming ZDI notices are intentionally not attributed to these CVEs or products. Only directly CVE-linked ZDI evidence is shown under Evidence & source attribution.
Vendors
Identity evidence: NVD applicability / catalog · CVE catalog product links · NVD criteria may be conditional, and listing does not prove installed exposure.Evidence & source attribution
CVE-2026-97805Windows Partition Management Driver Remote Code Execution VulnerabilitymicrosoftZDI upcoming · 49 / windows 10 1607 (< 10.0.14393.9612) · microsoftZDI upcoming · 49 / windows 10 1809 (< 10.0.17763.9376) · microsoftZDI upcoming · 49 / windows 10 21h2 (< 10.0.19044.7807)+31 more listed ↓9.8Critical0.94%BSI CSAFRCECWE-20 ↗CWE-125 ↗›
Vulnerability intelligence
Windows Partition Management Driver Remote Code Execution Vulnerability
Textual classification only; validate technical prerequisites in the source advisory. Unknown classifications are not considered safe.Microsoft Windows und Windows Server: Mehrere Schwachstellen
Windows Partition Management Driver Remote Code Execution Vulnerability
Recorded intelligence activity: 16 Oct 2026, 23:26 UTC.
Source(s) reported by the precooked timeline: BSI CSAF · CISA Vulnrichment · CVEProject · GHSA.
Underlying CVE record last modified: 16 Oct 2026, 23:26 UTC.
This indicates indexed source activity, not necessarily a newly published exploit, a KEV addition or a change to the underlying vulnerability. EPSS refreshes can also surface old CVEs.Affected vendors, products & devices
Click any identity to explore ↗34 distinct affected-product identities listed in this bounded CVE lookup. Select a vendor or product to investigate.
No matching affected products.
Vendor-wide upcoming ZDI notices are intentionally not attributed to these CVEs or products. Only directly CVE-linked ZDI evidence is shown under Evidence & source attribution.
Vendors
Identity evidence: NVD applicability / catalog · CVE catalog product links · NVD criteria may be conditional, and listing does not prove installed exposure.Evidence & source attribution
CVE-2026-97814Windows Text Shaping Remote Code Execution VulnerabilitymicrosoftZDI upcoming · 49 / windows 10 1607 (< 10.0.14393.9612) · microsoftZDI upcoming · 49 / windows 10 1809 (< 10.0.17763.9376) · microsoftZDI upcoming · 49 / windows 10 21h2 (< 10.0.19044.7807)+31 more listed ↓9.8Critical0.97%BSI CSAFRCECWE-122 ↗›
Vulnerability intelligence
Windows Text Shaping Remote Code Execution Vulnerability
Textual classification only; validate technical prerequisites in the source advisory. Unknown classifications are not considered safe.Microsoft Windows und Windows Server: Mehrere Schwachstellen
Windows Text Shaping Remote Code Execution Vulnerability
Recorded intelligence activity: 16 Oct 2026, 23:26 UTC.
Source(s) reported by the precooked timeline: BSI CSAF · CISA Vulnrichment · CVEProject · GHSA.
Underlying CVE record last modified: 16 Oct 2026, 23:26 UTC.
This indicates indexed source activity, not necessarily a newly published exploit, a KEV addition or a change to the underlying vulnerability. EPSS refreshes can also surface old CVEs.Affected vendors, products & devices
Click any identity to explore ↗34 distinct affected-product identities listed in this bounded CVE lookup. Select a vendor or product to investigate.
No matching affected products.
Vendor-wide upcoming ZDI notices are intentionally not attributed to these CVEs or products. Only directly CVE-linked ZDI evidence is shown under Evidence & source attribution.
Vendors
Identity evidence: NVD applicability / catalog · CVE catalog product links · NVD criteria may be conditional, and listing does not prove installed exposure.Evidence & source attribution
CVE-2026-97815Windows Error Reporting Remote Code Execution VulnerabilitymicrosoftZDI upcoming · 49 / windows 10 1607 (< 10.0.14393.9612) · microsoftZDI upcoming · 49 / windows 10 1809 (< 10.0.17763.9376) · microsoftZDI upcoming · 49 / windows 10 21h2 (< 10.0.19044.7807)+31 more listed ↓9.8Critical0.67%BSI CSAFRCECWE-122 ↗›
Vulnerability intelligence
Windows Error Reporting Remote Code Execution Vulnerability
Textual classification only; validate technical prerequisites in the source advisory. Unknown classifications are not considered safe.Microsoft Windows und Windows Server: Mehrere Schwachstellen
Windows Error Reporting Remote Code Execution Vulnerability
Recorded intelligence activity: 16 Oct 2026, 23:26 UTC.
Source(s) reported by the precooked timeline: BSI CSAF · CISA Vulnrichment · CVEProject · GHSA.
Underlying CVE record last modified: 16 Oct 2026, 23:26 UTC.
This indicates indexed source activity, not necessarily a newly published exploit, a KEV addition or a change to the underlying vulnerability. EPSS refreshes can also surface old CVEs.Affected vendors, products & devices
Click any identity to explore ↗34 distinct affected-product identities listed in this bounded CVE lookup. Select a vendor or product to investigate.
No matching affected products.
Vendor-wide upcoming ZDI notices are intentionally not attributed to these CVEs or products. Only directly CVE-linked ZDI evidence is shown under Evidence & source attribution.
Vendors
Identity evidence: NVD applicability / catalog · CVE catalog product links · NVD criteria may be conditional, and listing does not prove installed exposure.Evidence & source attribution
CVE-2026-97816Microsoft OpenSSH for Windows Remote Code Execution VulnerabilitymicrosoftZDI upcoming · 49 / windows 10 1809 (< 10.0.17763.9376) · microsoftZDI upcoming · 49 / windows 10 21h2 (< 10.0.19044.7807) · microsoftZDI upcoming · 49 / windows 10 22h2 (< 10.0.19044.7807)+21 more listed ↓9.8Critical0.89%BSI CSAFRCECWE-416 ↗›
Vulnerability intelligence
Microsoft OpenSSH for Windows Remote Code Execution Vulnerability
Textual classification only; validate technical prerequisites in the source advisory. Unknown classifications are not considered safe.Microsoft Windows und Windows Server: Mehrere Schwachstellen
Microsoft OpenSSH for Windows Remote Code Execution Vulnerability
Recorded intelligence activity: 16 Oct 2026, 23:26 UTC.
Source(s) reported by the precooked timeline: BSI CSAF · CISA Vulnrichment · CVEProject · GHSA.
Underlying CVE record last modified: 16 Oct 2026, 23:26 UTC.
This indicates indexed source activity, not necessarily a newly published exploit, a KEV addition or a change to the underlying vulnerability. EPSS refreshes can also surface old CVEs.Affected vendors, products & devices
Click any identity to explore ↗24 distinct affected-product identities listed in this bounded CVE lookup. Select a vendor or product to investigate.
No matching affected products.
Vendor-wide upcoming ZDI notices are intentionally not attributed to these CVEs or products. Only directly CVE-linked ZDI evidence is shown under Evidence & source attribution.
Vendors
Identity evidence: NVD applicability / catalog · CVE catalog product links · NVD criteria may be conditional, and listing does not prove installed exposure.Evidence & source attribution
CVE-2026-102238Visual Studio Code Remote Code Execution VulnerabilityMicrosoftZDI upcoming · 49 / Visual Studio Code9.6Critical0.65%BSI CSAFRCERSS 1CWE-22 ↗›
Vulnerability intelligence
Visual Studio Code Remote Code Execution Vulnerability
Textual classification only; validate technical prerequisites in the source advisory. Unknown classifications are not considered safe.Microsoft Security Update Guide · CVE-2026-102238 Visual Studio Code Remote Code Execution Vulnerability · Source ↗
Microsoft Entwicklerwerkzeuge: Mehrere Schwachstellen
Visual Studio Code Remote Code Execution Vulnerability
Recorded intelligence activity: 16 Oct 2026, 23:14 UTC.
Source(s) reported by the precooked timeline: BSI CSAF · CISA Vulnrichment · CVEProject · GHSA.
Underlying CVE record last modified: 16 Oct 2026, 23:14 UTC.
This indicates indexed source activity, not necessarily a newly published exploit, a KEV addition or a change to the underlying vulnerability. EPSS refreshes can also surface old CVEs.Affected vendors, products & devices
Click any identity to explore ↗1 distinct affected-product identities listed in this bounded CVE lookup. Select a vendor or product to investigate.
No matching affected products.
Vendor-wide upcoming ZDI notices are intentionally not attributed to these CVEs or products. Only directly CVE-linked ZDI evidence is shown under Evidence & source attribution.
Vendors
Identity evidence: NVD applicability / catalog · CVE catalog product links · NVD criteria may be conditional, and listing does not prove installed exposure.Evidence & source attribution
CVE-2026-74040Wazuh 3.9.0 before 4.14.8 Arbitrary File Overwrite RCE via process_files_from_workerWazuhZDI upcoming · 2 / wazuh-manager9.4Critical0.55%BSI CSAFCWE-862 ↗›
Vulnerability intelligence
Wazuh: Mehrere Schwachstellen
Wazuh 3.9.0 before 4.14.8 Arbitrary File Overwrite RCE via process_files_from_worker
Recorded intelligence activity: 16 Oct 2026, 21:53 UTC.
Source(s) reported by the precooked timeline: BSI CSAF · CVEProject.
Underlying CVE record last modified: 13 Oct 2026, 13:27 UTC.
This indicates indexed source activity, not necessarily a newly published exploit, a KEV addition or a change to the underlying vulnerability. EPSS refreshes can also surface old CVEs.Affected vendors, products & devices
Click any identity to explore ↗1 distinct affected-product identities listed in this bounded CVE lookup. Select a vendor or product to investigate.
No matching affected products.
Vendor-wide upcoming ZDI notices are intentionally not attributed to these CVEs or products. Only directly CVE-linked ZDI evidence is shown under Evidence & source attribution.
Vendors
Identity evidence: NVD applicability / catalog · CVE catalog product links · NVD criteria may be conditional, and listing does not prove installed exposure.Evidence & source attribution
CVE-2026-96951Windows Shell Security Feature Bypass VulnerabilitymicrosoftZDI upcoming · 49 / outlook web · microsoftZDI upcoming · 49 / windows 10 1607 (< 10.0.14393.9612) · microsoftZDI upcoming · 49 / windows 10 1809 (< 10.0.17763.9376)+31 more listed ↓8.8High1.51%CISA KEVProject Zero · 0-dayBSI CSAFRSS 2CWE-77 ↗›
Vulnerability intelligence
CERT-FR Advisories · Multiples vulnérabilités dans Microsoft Windows (14 octobre 2026) · Source ↗
Rapid7 Research · Patch Tuesday - October 2026 · Source ↗
Microsoft / Windows · Windows Shell Security Feature Bypass Vulnerability
Discovered ??? · Patched 2026-10-13Microsoft Windows und Windows Server: Mehrere Schwachstellen
Microsoft Office Produkte: Mehrere Schwachstellen ermöglichen Privilegieneskalation
Windows Shell Security Feature Bypass Vulnerability
Recorded intelligence activity: 16 Oct 2026, 23:25 UTC.
Source(s) reported by the precooked timeline: BSI CSAF · CISA Advisory · CISA KEV · CISA Vulnrichment · CVEProject · EUVD · GHSA.
Underlying CVE record last modified: 16 Oct 2026, 23:25 UTC.
This indicates indexed source activity, not necessarily a newly published exploit, a KEV addition or a change to the underlying vulnerability. EPSS refreshes can also surface old CVEs.Affected vendors, products & devices
Click any identity to explore ↗34 distinct affected-product identities listed in this bounded CVE lookup. Select a vendor or product to investigate.
No matching affected products.
Vendor-wide upcoming ZDI notices are intentionally not attributed to these CVEs or products. Only directly CVE-linked ZDI evidence is shown under Evidence & source attribution.
Vendors
Identity evidence: NVD applicability / catalog · CVE catalog product links · NVD criteria may be conditional, and listing does not prove installed exposure.Evidence & source attribution
CVE-2025-61624An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') [CWE-22] vulnerability in F…fortinetZDI upcoming · 3 / fortios (≥ 6.4.0 · < 7.4.10 · ≥ 7.6.0 · < 7.6.5) · fortinetZDI upcoming · 3 / fortipam (≥ 1.0.0 · < 1.7.1) · fortinetZDI upcoming · 3 / fortiproxy (≥ 7.0.0 · < 7.4.12 · ≥ 7.6.0 · < 7.6.5)+7 more listed ↓5.4Medium1.08%CISA KEVBSI CSAFCWE-22 ↗›
Vulnerability intelligence
Fortinet FortiOS, FortiProxy und FortiSwitch: Schwachstelle ermöglicht Manipulation von Dateien
SSA-975644: Multiple Vulnerabilities in Fortigate NGFW on RUGGEDCOM APE1808 Devices
An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') [CWE-22] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.4, FortiOS 7.4.0 through 7.4.9, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all versions, FortiPAM 1.7.0, FortiPAM 1.6 all versions, FortiPAM 1.5 all versions, FortiPAM 1.4 all versions, FortiPAM 1.3 all versions, FortiPAM 1.2 all versions, FortiPAM 1.1 all versions, FortiPAM 1.0 all versions, FortiProxy 7.6.0 through 7.6.4, FortiProxy 7.4.0 through 7.4.11, FortiProxy 7.2 all versions, FortiProxy 7.0 all versions, FortiSwitchManager 7.2.0 through 7.2.7, FortiSwitchManager 7.0.0 through 7.0.6 may allow an authenticated attacker with admin profile and at least read-write permissions to write or delete arbitrary files via specific CLI commands.
Recorded intelligence activity: 17 Oct 2026, 03:55 UTC.
Source(s) reported by the precooked timeline: CISA Advisory · CISA KEV · CISA Vulnrichment · CVEProject · EUVD · GHSA.
Underlying CVE record last modified: 14 Apr 2026, 15:39 UTC.
This indicates indexed source activity, not necessarily a newly published exploit, a KEV addition or a change to the underlying vulnerability. EPSS refreshes can also surface old CVEs.Affected vendors, products & devices
Click any identity to explore ↗10 distinct affected-product identities listed in this bounded CVE lookup. Select a vendor or product to investigate.
No matching affected products.
Vendor-wide upcoming ZDI notices are intentionally not attributed to these CVEs or products. Only directly CVE-linked ZDI evidence is shown under Evidence & source attribution.
Vendors
Identity evidence: NVD applicability / catalog · CVE catalog product links · NVD criteria may be conditional, and listing does not prove installed exposure.Evidence & source attribution
CVE-2026-96207Microsoft Partner Center Elevation of Privilege VulnerabilitymicrosoftZDI upcoming · 49 / partner center · MicrosoftZDI upcoming · 49 / Microsoft Partner Center10.0Critical0.47%BSI CSAFCWE-295 ↗›
Vulnerability intelligence
Microsoft Azure: Mehrere Schwachstellen
Microsoft Partner Center Elevation of Privilege Vulnerability
Recorded intelligence activity: 16 Oct 2026, 23:26 UTC.
Source(s) reported by the precooked timeline: BSI CSAF · CISA Vulnrichment · CVEProject · GHSA.
Underlying CVE record last modified: 16 Oct 2026, 23:26 UTC.
This indicates indexed source activity, not necessarily a newly published exploit, a KEV addition or a change to the underlying vulnerability. EPSS refreshes can also surface old CVEs.Affected vendors, products & devices
Click any identity to explore ↗2 distinct affected-product identities listed in this bounded CVE lookup. Select a vendor or product to investigate.
No matching affected products.
Vendor-wide upcoming ZDI notices are intentionally not attributed to these CVEs or products. Only directly CVE-linked ZDI evidence is shown under Evidence & source attribution.
Vendors
Identity evidence: NVD applicability / catalog · CVE catalog product links · NVD criteria may be conditional, and listing does not prove installed exposure.Evidence & source attribution
CVE-2026-105037EnergizeLab Station Middleware Authenticated Path Traversal Arbitrary File ReadEnergizeLab / station-middleware9.9Critical0.40%CWE-73 ↗›
Vulnerability intelligence
EnergizeLab Station Middleware Authenticated Path Traversal Arbitrary File Read
Recorded intelligence activity: 16 Oct 2026, 19:53 UTC.
Source(s) reported by the precooked timeline: CISA Vulnrichment · CVEProject · GHSA.
Underlying CVE record last modified: 15 Oct 2026, 20:43 UTC.
This indicates indexed source activity, not necessarily a newly published exploit, a KEV addition or a change to the underlying vulnerability. EPSS refreshes can also surface old CVEs.Affected vendors, products & devices
Click any identity to explore ↗1 distinct affected-product identities listed in this bounded CVE lookup. Select a vendor or product to investigate.
No matching affected products.
Vendor-wide upcoming ZDI notices are intentionally not attributed to these CVEs or products. Only directly CVE-linked ZDI evidence is shown under Evidence & source attribution.
Vendors
Identity evidence: NVD applicability / catalog · CVE catalog product links · NVD criteria may be conditional, and listing does not prove installed exposure.Evidence & source attribution
CVE-2026-109108Wavlink WL-WN530BE1-A uploadVpn.cgi popen os command injectionWavlink / WL-WN530BE1-A9.9Critical2.27%CWE-77 ↗CWE-78 ↗›
Vulnerability intelligence
Wavlink WL-WN530BE1-A uploadVpn.cgi popen os command injection
Recorded intelligence activity: 16 Oct 2026, 21:38 UTC.
Source(s) reported by the precooked timeline: CISA Vulnrichment · CVEProject · GHSA.
Underlying CVE record last modified: 13 Oct 2026, 07:30 UTC.
This indicates indexed source activity, not necessarily a newly published exploit, a KEV addition or a change to the underlying vulnerability. EPSS refreshes can also surface old CVEs.Affected vendors, products & devices
Click any identity to explore ↗1 distinct affected-product identities listed in this bounded CVE lookup. Select a vendor or product to investigate.
No matching affected products.
Vendor-wide upcoming ZDI notices are intentionally not attributed to these CVEs or products. Only directly CVE-linked ZDI evidence is shown under Evidence & source attribution.
Vendors
Identity evidence: NVD applicability / catalog · CVE catalog product links · NVD criteria may be conditional, and listing does not prove installed exposure.Evidence & source attribution
CVE-2026-94510Microsoft Bookings Elevation of Privilege VulnerabilityMicrosoftZDI upcoming · 49 / Microsoft Bookings9.9Critical0.40%BSI CSAFCWE-639 ↗›
Vulnerability intelligence
Microsoft Apps: Mehrere Schwachstellen
Microsoft Bookings Elevation of Privilege Vulnerability
Recorded intelligence activity: 16 Oct 2026, 23:26 UTC.
Source(s) reported by the precooked timeline: BSI CSAF · CISA Vulnrichment · CVEProject · GHSA.
Underlying CVE record last modified: 16 Oct 2026, 23:26 UTC.
This indicates indexed source activity, not necessarily a newly published exploit, a KEV addition or a change to the underlying vulnerability. EPSS refreshes can also surface old CVEs.Affected vendors, products & devices
Click any identity to explore ↗1 distinct affected-product identities listed in this bounded CVE lookup. Select a vendor or product to investigate.
No matching affected products.
Vendor-wide upcoming ZDI notices are intentionally not attributed to these CVEs or products. Only directly CVE-linked ZDI evidence is shown under Evidence & source attribution.
Vendors
Identity evidence: NVD applicability / catalog · CVE catalog product links · NVD criteria may be conditional, and listing does not prove installed exposure.Evidence & source attribution
CVE-2026-97381Legacy Update ActiveX control accepts unauthorized hosting originsLegacyUpdate / LegacyUpdate9.9Critical0.21%CWE-393 ↗CWE-346 ↗›
Vulnerability intelligence
Legacy Update ActiveX control accepts unauthorized hosting origins
Recorded intelligence activity: 17 Oct 2026, 00:50 UTC.
Source(s) reported by the precooked timeline: CISA Vulnrichment · CVEProject.
Underlying CVE record last modified: 13 Oct 2026, 21:08 UTC.
This indicates indexed source activity, not necessarily a newly published exploit, a KEV addition or a change to the underlying vulnerability. EPSS refreshes can also surface old CVEs.Affected vendors, products & devices
Click any identity to explore ↗1 distinct affected-product identities listed in this bounded CVE lookup. Select a vendor or product to investigate.
No matching affected products.
Vendor-wide upcoming ZDI notices are intentionally not attributed to these CVEs or products. Only directly CVE-linked ZDI evidence is shown under Evidence & source attribution.
Vendors
Identity evidence: NVD applicability / catalog · CVE catalog product links · NVD criteria may be conditional, and listing does not prove installed exposure.Evidence & source attribution
CVE-2026-101306Multiple jail filesystem root escapesFreeBSDZDI upcoming · 13 / FreeBSD9.8Critical0.27%BSI CSAFCWE-281 ↗CWE-273 ↗›
Vulnerability intelligence
FreeBSD Project FreeBSD OS: Mehrere Schwachstellen
Multiple jail filesystem root escapes
Recorded intelligence activity: 16 Oct 2026, 21:32 UTC.
Source(s) reported by the precooked timeline: BSI CSAF · CISA Vulnrichment · CVEProject · GHSA.
Underlying CVE record last modified: 15 Oct 2026, 06:46 UTC.
This indicates indexed source activity, not necessarily a newly published exploit, a KEV addition or a change to the underlying vulnerability. EPSS refreshes can also surface old CVEs.Affected vendors, products & devices
Click any identity to explore ↗1 distinct affected-product identities listed in this bounded CVE lookup. Select a vendor or product to investigate.
No matching affected products.
Vendor-wide upcoming ZDI notices are intentionally not attributed to these CVEs or products. Only directly CVE-linked ZDI evidence is shown under Evidence & source attribution.
Vendors
Identity evidence: NVD applicability / catalog · CVE catalog product links · NVD criteria may be conditional, and listing does not prove installed exposure.Evidence & source attribution
CVE-2026-101950Junos OS: SRX Series: Malformed IPv4 packets cause packet-forwarding process crash when Secure Vector Routing…Juniper Networks / Junos OS9.8Critical0.47%CWE-122 ↗›
Vulnerability intelligence
Junos OS: SRX Series: Malformed IPv4 packets cause packet-forwarding process crash when Secure Vector Routing is enabled
Recorded intelligence activity: 17 Oct 2026, 03:55 UTC.
Source(s) reported by the precooked timeline: CISA Vulnrichment · CVEProject · GHSA.
Underlying CVE record last modified: 14 Oct 2026, 16:28 UTC.
This indicates indexed source activity, not necessarily a newly published exploit, a KEV addition or a change to the underlying vulnerability. EPSS refreshes can also surface old CVEs.Affected vendors, products & devices
Click any identity to explore ↗1 distinct affected-product identities listed in this bounded CVE lookup. Select a vendor or product to investigate.
No matching affected products.
Vendor-wide upcoming ZDI notices are intentionally not attributed to these CVEs or products. Only directly CVE-linked ZDI evidence is shown under Evidence & source attribution.
Vendors
Identity evidence: NVD applicability / catalog · CVE catalog product links · NVD criteria may be conditional, and listing does not prove installed exposure.Evidence & source attribution
CVE-2026-104736LearnPress <= 4.4.10 - Unauthenticated PHP Object Injection via 'checkout-email' Parameterthimpress / LearnPress – WordPress LMS Plugin for Create and Sell Online Courses9.8Critical0.44%CWE-502 ↗›
Vulnerability intelligence
LearnPress <= 4.4.10 - Unauthenticated PHP Object Injection via 'checkout-email' Parameter
Recorded intelligence activity: 17 Oct 2026, 06:30 UTC.
Source(s) reported by the precooked timeline: CVEProject · GHSA · Wordfence.
Underlying CVE record last modified: 17 Oct 2026, 03:43 UTC.
This indicates indexed source activity, not necessarily a newly published exploit, a KEV addition or a change to the underlying vulnerability. EPSS refreshes can also surface old CVEs.Affected vendors, products & devices
Click any identity to explore ↗1 distinct affected-product identities listed in this bounded CVE lookup. Select a vendor or product to investigate.
No matching affected products.
Vendor-wide upcoming ZDI notices are intentionally not attributed to these CVEs or products. Only directly CVE-linked ZDI evidence is shown under Evidence & source attribution.
Vendors
Identity evidence: NVD applicability / catalog · CVE catalog product links · NVD criteria may be conditional, and listing does not prove installed exposure.Evidence & source attribution
CVE-2026-105010Microsoft Windows Search Component Elevation of Privilege VulnerabilityMicrosoftZDI upcoming · 49 / Windows 10 Version 1607 · MicrosoftZDI upcoming · 49 / Windows 11 Version 26H2 · MicrosoftZDI upcoming · 49 / Windows Server 2012 R2+15 more listed ↓9.8Critical0.89%BSI CSAFCWE-416 ↗›
Vulnerability intelligence
Microsoft Windows und Windows Server: Mehrere Schwachstellen
Microsoft Windows Search Component Elevation of Privilege Vulnerability
Recorded intelligence activity: 16 Oct 2026, 23:26 UTC.
Source(s) reported by the precooked timeline: BSI CSAF · CISA Vulnrichment · CVEProject · GHSA.
Underlying CVE record last modified: 16 Oct 2026, 23:26 UTC.
This indicates indexed source activity, not necessarily a newly published exploit, a KEV addition or a change to the underlying vulnerability. EPSS refreshes can also surface old CVEs.Affected vendors, products & devices
Click any identity to explore ↗18 distinct affected-product identities listed in this bounded CVE lookup. Select a vendor or product to investigate.
No matching affected products.
Vendor-wide upcoming ZDI notices are intentionally not attributed to these CVEs or products. Only directly CVE-linked ZDI evidence is shown under Evidence & source attribution.
Vendors
Identity evidence: NVD applicability / catalog · CVE catalog product links · NVD criteria may be conditional, and listing does not prove installed exposure.Evidence & source attribution
CVE-2026-105038EnergizeLab Eilik Unauthenticated AI Model Administration and Runtime Model SwitchingEnergizeLab / FastAPI AI inference server9.8Critical0.65%CWE-306 ↗›
Vulnerability intelligence
EnergizeLab Eilik Unauthenticated AI Model Administration and Runtime Model Switching
Recorded intelligence activity: 16 Oct 2026, 19:54 UTC.
Source(s) reported by the precooked timeline: CISA Vulnrichment · CVEProject · GHSA.
Underlying CVE record last modified: 15 Oct 2026, 20:43 UTC.
This indicates indexed source activity, not necessarily a newly published exploit, a KEV addition or a change to the underlying vulnerability. EPSS refreshes can also surface old CVEs.Affected vendors, products & devices
Click any identity to explore ↗1 distinct affected-product identities listed in this bounded CVE lookup. Select a vendor or product to investigate.
No matching affected products.
Vendor-wide upcoming ZDI notices are intentionally not attributed to these CVEs or products. Only directly CVE-linked ZDI evidence is shown under Evidence & source attribution.
Vendors
Identity evidence: NVD applicability / catalog · CVE catalog product links · NVD criteria may be conditional, and listing does not prove installed exposure.Evidence & source attribution
CVE-2026-111626Webreaper Damselfly through 4.5.3 Missing Authentication on REST API ControllersWebreaper / Damselfly9.8Critical0.45%CWE-306 ↗›
Vulnerability intelligence
Webreaper Damselfly through 4.5.3 Missing Authentication on REST API Controllers
Recorded intelligence activity: 16 Oct 2026, 21:19 UTC.
Source(s) reported by the precooked timeline: CVEProject · GHSA.
Underlying CVE record last modified: 16 Oct 2026, 17:39 UTC.
This indicates indexed source activity, not necessarily a newly published exploit, a KEV addition or a change to the underlying vulnerability. EPSS refreshes can also surface old CVEs.Affected vendors, products & devices
Click any identity to explore ↗1 distinct affected-product identities listed in this bounded CVE lookup. Select a vendor or product to investigate.
No matching affected products.
Vendor-wide upcoming ZDI notices are intentionally not attributed to these CVEs or products. Only directly CVE-linked ZDI evidence is shown under Evidence & source attribution.
Vendors
Identity evidence: NVD applicability / catalog · CVE catalog product links · NVD criteria may be conditional, and listing does not prove installed exposure.Evidence & source attribution
CVE-2026-111641FastapiAdmin through 3.0 Authentication Bypass via Auto-Login Endpointsfastapiadmin / FastapiAdmin9.8Critical0.43%CWE-306 ↗›
Vulnerability intelligence
FastapiAdmin through 3.0 Authentication Bypass via Auto-Login Endpoints
Recorded intelligence activity: 16 Oct 2026, 21:18 UTC.
Source(s) reported by the precooked timeline: CISA Vulnrichment · CVEProject · GHSA.
Underlying CVE record last modified: 16 Oct 2026, 17:39 UTC.
This indicates indexed source activity, not necessarily a newly published exploit, a KEV addition or a change to the underlying vulnerability. EPSS refreshes can also surface old CVEs.Affected vendors, products & devices
Click any identity to explore ↗1 distinct affected-product identities listed in this bounded CVE lookup. Select a vendor or product to investigate.
No matching affected products.
Vendor-wide upcoming ZDI notices are intentionally not attributed to these CVEs or products. Only directly CVE-linked ZDI evidence is shown under Evidence & source attribution.
Vendors
Identity evidence: NVD applicability / catalog · CVE catalog product links · NVD criteria may be conditional, and listing does not prove installed exposure.Evidence & source attribution
CVE-2026-111673IceCMS through 4.1.5 Missing Authentication via /User Administrative EndpointsThecosy / IceCMS9.8Critical0.55%CWE-306 ↗›
Vulnerability intelligence
IceCMS through 4.1.5 Missing Authentication via /User Administrative Endpoints
Recorded intelligence activity: 16 Oct 2026, 19:53 UTC.
Source(s) reported by the precooked timeline: CISA Vulnrichment · CVEProject · GHSA.
Underlying CVE record last modified: 16 Oct 2026, 17:39 UTC.
This indicates indexed source activity, not necessarily a newly published exploit, a KEV addition or a change to the underlying vulnerability. EPSS refreshes can also surface old CVEs.Affected vendors, products & devices
Click any identity to explore ↗1 distinct affected-product identities listed in this bounded CVE lookup. Select a vendor or product to investigate.
No matching affected products.
Vendor-wide upcoming ZDI notices are intentionally not attributed to these CVEs or products. Only directly CVE-linked ZDI evidence is shown under Evidence & source attribution.
Vendors
Identity evidence: NVD applicability / catalog · CVE catalog product links · NVD criteria may be conditional, and listing does not prove installed exposure.Evidence & source attribution
CVE-2026-111711Netcore NR256CN through 1.5.140116 Pre-Auth Stack Overflow via Boa user_ok()Netcore / NR256CN9.8Critical0.49%CWE-121 ↗›
Vulnerability intelligence
Netcore NR256CN through 1.5.140116 Pre-Auth Stack Overflow via Boa user_ok()
Recorded intelligence activity: 16 Oct 2026, 21:16 UTC.
Source(s) reported by the precooked timeline: CISA Vulnrichment · CVEProject · GHSA.
Underlying CVE record last modified: 16 Oct 2026, 17:40 UTC.
This indicates indexed source activity, not necessarily a newly published exploit, a KEV addition or a change to the underlying vulnerability. EPSS refreshes can also surface old CVEs.Affected vendors, products & devices
Click any identity to explore ↗1 distinct affected-product identities listed in this bounded CVE lookup. Select a vendor or product to investigate.
No matching affected products.
Vendor-wide upcoming ZDI notices are intentionally not attributed to these CVEs or products. Only directly CVE-linked ZDI evidence is shown under Evidence & source attribution.
Vendors
Identity evidence: NVD applicability / catalog · CVE catalog product links · NVD criteria may be conditional, and listing does not prove installed exposure.Evidence & source attribution
CVE-2026-111823Mage OSS through 0.9.80 before 76c4f46 can proceed with session creation upon encountering an unknown OAuth p…Mage / mage-ai9.8Critical0.37%CWE-390 ↗›
Vulnerability intelligence
Mage OSS through 0.9.80 before 76c4f46 can proceed with session creation upon encountering an unknown OAuth provider.
Recorded intelligence activity: 17 Oct 2026, 03:30 UTC.
Source(s) reported by the precooked timeline: CVEProject · GHSA.
Underlying CVE record last modified: 16 Oct 2026, 23:16 UTC.
This indicates indexed source activity, not necessarily a newly published exploit, a KEV addition or a change to the underlying vulnerability. EPSS refreshes can also surface old CVEs.Affected vendors, products & devices
Click any identity to explore ↗1 distinct affected-product identities listed in this bounded CVE lookup. Select a vendor or product to investigate.
No matching affected products.
Vendor-wide upcoming ZDI notices are intentionally not attributed to these CVEs or products. Only directly CVE-linked ZDI evidence is shown under Evidence & source attribution.
Vendors
Identity evidence: NVD applicability / catalog · CVE catalog product links · NVD criteria may be conditional, and listing does not prove installed exposure.Evidence & source attribution
CVE-2026-53709MCP Context Forge: Hardcoded default JWT_SECRET_KEY shipped in source and .env.example enables pre-authentica…IBM / mcp-context-forge9.8Critical0.45%CWE-1188 ↗CWE-798 ↗›
Vulnerability intelligence
MCP Context Forge: Hardcoded default JWT_SECRET_KEY shipped in source and .env.example enables pre-authentication platform admin token forgery
Recorded intelligence activity: 16 Oct 2026, 21:59 UTC.
Source(s) reported by the precooked timeline: CISA Vulnrichment · CVEProject.
Underlying CVE record last modified: 13 Oct 2026, 14:32 UTC.
This indicates indexed source activity, not necessarily a newly published exploit, a KEV addition or a change to the underlying vulnerability. EPSS refreshes can also surface old CVEs.Affected vendors, products & devices
Click any identity to explore ↗1 distinct affected-product identities listed in this bounded CVE lookup. Select a vendor or product to investigate.
No matching affected products.
Vendor-wide upcoming ZDI notices are intentionally not attributed to these CVEs or products. Only directly CVE-linked ZDI evidence is shown under Evidence & source attribution.
Vendors
Identity evidence: NVD applicability / catalog · CVE catalog product links · NVD criteria may be conditional, and listing does not prove installed exposure.Evidence & source attribution
CVE-2026-65556WordPress WPBruiser {no- Captcha anti-Spam} plugin <= 3.1.43 - PHP Object Injection vulnerabilityMihChe / WPBruiser {no- Captcha anti-Spam}9.8Critical0.56%CWE-502 ↗›
Vulnerability intelligence
WordPress WPBruiser {no- Captcha anti-Spam} plugin <= 3.1.43 - PHP Object Injection vulnerability
Recorded intelligence activity: 17 Oct 2026, 07:49 UTC.
Source(s) reported by the precooked timeline: Wordfence.
Underlying CVE record last modified: 06 Aug 2026, 14:27 UTC.
This indicates indexed source activity, not necessarily a newly published exploit, a KEV addition or a change to the underlying vulnerability. EPSS refreshes can also surface old CVEs.Affected vendors, products & devices
Click any identity to explore ↗1 distinct affected-product identities listed in this bounded CVE lookup. Select a vendor or product to investigate.
No matching affected products.
Vendor-wide upcoming ZDI notices are intentionally not attributed to these CVEs or products. Only directly CVE-linked ZDI evidence is shown under Evidence & source attribution.
Vendors
Identity evidence: NVD applicability / catalog · CVE catalog product links · NVD criteria may be conditional, and listing does not prove installed exposure.Evidence & source attribution
CVE-2026-105039EnergizeLab Station Middleware Admin APIs Missing Role ChecksEnergizeLab / station-middleware9.6Critical0.29%CWE-862 ↗›
Vulnerability intelligence
EnergizeLab Station Middleware Admin APIs Missing Role Checks
Recorded intelligence activity: 16 Oct 2026, 19:55 UTC.
Source(s) reported by the precooked timeline: CISA Vulnrichment · CVEProject · GHSA.
Underlying CVE record last modified: 15 Oct 2026, 20:43 UTC.
This indicates indexed source activity, not necessarily a newly published exploit, a KEV addition or a change to the underlying vulnerability. EPSS refreshes can also surface old CVEs.Affected vendors, products & devices
Click any identity to explore ↗1 distinct affected-product identities listed in this bounded CVE lookup. Select a vendor or product to investigate.
No matching affected products.
Vendor-wide upcoming ZDI notices are intentionally not attributed to these CVEs or products. Only directly CVE-linked ZDI evidence is shown under Evidence & source attribution.
Vendors
Identity evidence: NVD applicability / catalog · CVE catalog product links · NVD criteria may be conditional, and listing does not prove installed exposure.Evidence & source attribution
CVE-2026-110916Improper input validation in Desktop in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to pot…GoogleZDI upcoming · 2 / Chrome9.6Critical0.30%BSI CSAFCWE-20 ↗›
Vulnerability intelligence
Google Chrome: Mehrere Schwachstellen
Improper input validation in Desktop in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
Recorded intelligence activity: 16 Oct 2026, 21:32 UTC.
Source(s) reported by the precooked timeline: BSI CSAF · CISA Vulnrichment · CVEProject · GHSA.
Underlying CVE record last modified: 15 Oct 2026, 22:04 UTC.
This indicates indexed source activity, not necessarily a newly published exploit, a KEV addition or a change to the underlying vulnerability. EPSS refreshes can also surface old CVEs.Affected vendors, products & devices
Click any identity to explore ↗1 distinct affected-product identities listed in this bounded CVE lookup. Select a vendor or product to investigate.
No matching affected products.
Vendor-wide upcoming ZDI notices are intentionally not attributed to these CVEs or products. Only directly CVE-linked ZDI evidence is shown under Evidence & source attribution.
Vendors
Identity evidence: NVD applicability / catalog · CVE catalog product links · NVD criteria may be conditional, and listing does not prove installed exposure.Evidence & source attribution
CVE-2026-69435Azure SRE Agent Elevation of Privilege VulnerabilitymicrosoftZDI upcoming · 49 / azure sre agent · MicrosoftZDI upcoming · 49 / Azure SRE Agent9.6Critical0.38%BSI CSAFCWE-918 ↗›
Vulnerability intelligence
Microsoft Azure: Mehrere Schwachstellen
Azure SRE Agent Elevation of Privilege Vulnerability
Recorded intelligence activity: 16 Oct 2026, 23:26 UTC.
Source(s) reported by the precooked timeline: BSI CSAF · CISA Vulnrichment · CVEProject · GHSA.
Underlying CVE record last modified: 16 Oct 2026, 23:26 UTC.
This indicates indexed source activity, not necessarily a newly published exploit, a KEV addition or a change to the underlying vulnerability. EPSS refreshes can also surface old CVEs.Affected vendors, products & devices
Click any identity to explore ↗2 distinct affected-product identities listed in this bounded CVE lookup. Select a vendor or product to investigate.
No matching affected products.
Vendor-wide upcoming ZDI notices are intentionally not attributed to these CVEs or products. Only directly CVE-linked ZDI evidence is shown under Evidence & source attribution.
Vendors
Identity evidence: NVD applicability / catalog · CVE catalog product links · NVD criteria may be conditional, and listing does not prove installed exposure.Evidence & source attribution
CVE-2026-88092ASP.NET Core Tampering VulnerabilitymicrosoftZDI upcoming · 49 / asp.net core (≥ 8.0.0 · < 8.0.32 · ≥ 9.0.0 · < 9.0.21) · microsoftZDI upcoming · 49 / visual studio 2022 (≥ 17.14.0 · < 17.14.42) · microsoftZDI upcoming · 49 / visual studio 2026 (≥ 18.10.0 · < 18.10.4)+6 more listed ↓9.4Critical0.79%BSI CSAFCWE-444 ↗›
Vulnerability intelligence
Microsoft Entwicklerwerkzeuge: Mehrere Schwachstellen
ASP.NET Core Tampering Vulnerability
Recorded intelligence activity: 16 Oct 2026, 23:24 UTC.
Source(s) reported by the precooked timeline: BSI CSAF · CISA Vulnrichment · CVEProject · GHSA.
Underlying CVE record last modified: 16 Oct 2026, 23:24 UTC.
This indicates indexed source activity, not necessarily a newly published exploit, a KEV addition or a change to the underlying vulnerability. EPSS refreshes can also surface old CVEs.Affected vendors, products & devices
Click any identity to explore ↗9 distinct affected-product identities listed in this bounded CVE lookup. Select a vendor or product to investigate.
No matching affected products.
Vendor-wide upcoming ZDI notices are intentionally not attributed to these CVEs or products. Only directly CVE-linked ZDI evidence is shown under Evidence & source attribution.
Vendors
Identity evidence: NVD applicability / catalog · CVE catalog product links · NVD criteria may be conditional, and listing does not prove installed exposure.Evidence & source attribution
CVE-2026-100133Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)AdobeZDI upcoming · 38 / Adobe Commerce · AdobeZDI upcoming · 38 / Adobe Commerce B2B · AdobeZDI upcoming · 38 / Magento Open Source9.3Critical0.94%BSI CSAFCWE-79 ↗›
Vulnerability intelligence
Adobe Magento Open Source: Mehrere Schwachstellen
Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)
Recorded intelligence activity: 16 Oct 2026, 22:24 UTC.
Source(s) reported by the precooked timeline: BSI CSAF · CVEProject · GHSA.
Underlying CVE record last modified: 13 Oct 2026, 18:15 UTC.
This indicates indexed source activity, not necessarily a newly published exploit, a KEV addition or a change to the underlying vulnerability. EPSS refreshes can also surface old CVEs.Affected vendors, products & devices
Click any identity to explore ↗3 distinct affected-product identities listed in this bounded CVE lookup. Select a vendor or product to investigate.
No matching affected products.
Vendor-wide upcoming ZDI notices are intentionally not attributed to these CVEs or products. Only directly CVE-linked ZDI evidence is shown under Evidence & source attribution.
Vendors
Identity evidence: NVD applicability / catalog · CVE catalog product links · NVD criteria may be conditional, and listing does not prove installed exposure.Evidence & source attribution
CVE-2026-103415When a TLS 1.3 client processes a HelloRetryRequest, it copies the server's cookie into its second ClientHell…Eclipse Foundation / NetX Duo9.3Critical0.28%CWE-787 ↗›
Vulnerability intelligence
When a TLS 1.3 client processes a HelloRetryRequest, it copies the server's cookie into its second ClientHello without checking that the cookie fits in the outgoing packet. Both the length and the contents of that cookie come from the peer, and the write happens before certificate authentication completes, so a malicious or compromised server can overwrite memory past the caller supplied TLS packet buffer without presenting a certificate. Only the client path is affected.
Recorded intelligence activity: 16 Oct 2026, 20:12 UTC.
Source(s) reported by the precooked timeline: CISA Vulnrichment · CVEProject.
Underlying CVE record last modified: 14 Oct 2026, 17:36 UTC.
This indicates indexed source activity, not necessarily a newly published exploit, a KEV addition or a change to the underlying vulnerability. EPSS refreshes can also surface old CVEs.Affected vendors, products & devices
Click any identity to explore ↗1 distinct affected-product identities listed in this bounded CVE lookup. Select a vendor or product to investigate.
No matching affected products.
Vendor-wide upcoming ZDI notices are intentionally not attributed to these CVEs or products. Only directly CVE-linked ZDI evidence is shown under Evidence & source attribution.
Vendors
Identity evidence: NVD applicability / catalog · CVE catalog product links · NVD criteria may be conditional, and listing does not prove installed exposure.Evidence & source attribution
CVE-2026-106629Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)AdobeZDI upcoming · 38 / Adobe Experience Manager 6.5 LTS · AdobeZDI upcoming · 38 / Adobe Experience Manager 6.59.3Critical0.68%BSI CSAFCWE-79 ↗›
Vulnerability intelligence
Adobe Experience Manager: Mehrere Schwachstellen
Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
Recorded intelligence activity: 17 Oct 2026, 00:42 UTC.
Source(s) reported by the precooked timeline: BSI CSAF · CISA Vulnrichment · CVEProject · GHSA.
Underlying CVE record last modified: 13 Oct 2026, 19:38 UTC.
This indicates indexed source activity, not necessarily a newly published exploit, a KEV addition or a change to the underlying vulnerability. EPSS refreshes can also surface old CVEs.Affected vendors, products & devices
Click any identity to explore ↗2 distinct affected-product identities listed in this bounded CVE lookup. Select a vendor or product to investigate.
No matching affected products.
Vendor-wide upcoming ZDI notices are intentionally not attributed to these CVEs or products. Only directly CVE-linked ZDI evidence is shown under Evidence & source attribution.
Vendors
Identity evidence: NVD applicability / catalog · CVE catalog product links · NVD criteria may be conditional, and listing does not prove installed exposure.Evidence & source attribution
CVE-2026-70279Microsoft Exchange Server Spoofing VulnerabilityMicrosoftZDI upcoming · 49 / Microsoft Exchange Server 2016 Cumulative Update 23 · MicrosoftZDI upcoming · 49 / Microsoft Exchange Server 2019 Cumulative Update 14 · MicrosoftZDI upcoming · 49 / Microsoft Exchange Server 2019 Cumulative Update 15+1 more listed ↓9.3Critical0.86%BSI CSAFCWE-79 ↗›
Vulnerability intelligence
Microsoft Windows und Windows Server: Mehrere Schwachstellen
Microsoft Exchange: Mehrere Schwachstellen
Microsoft Exchange Server Spoofing Vulnerability
Recorded intelligence activity: 16 Oct 2026, 23:24 UTC.
Source(s) reported by the precooked timeline: BSI CSAF · CISA Vulnrichment · CVEProject · GHSA.
Underlying CVE record last modified: 16 Oct 2026, 23:24 UTC.
This indicates indexed source activity, not necessarily a newly published exploit, a KEV addition or a change to the underlying vulnerability. EPSS refreshes can also surface old CVEs.Affected vendors, products & devices
Click any identity to explore ↗4 distinct affected-product identities listed in this bounded CVE lookup. Select a vendor or product to investigate.
No matching affected products.
Vendor-wide upcoming ZDI notices are intentionally not attributed to these CVEs or products. Only directly CVE-linked ZDI evidence is shown under Evidence & source attribution.
Vendors
Identity evidence: NVD applicability / catalog · CVE catalog product links · NVD criteria may be conditional, and listing does not prove installed exposure.Evidence & source attribution
CVE-2026-99999ipv4: validate checksum_start before completing checksumLinuxZDI upcoming · 59 / Linux9.3Critical0.21%BSI CSAF›
Vulnerability intelligence
Linux Kernel: Mehrere Schwachstellen
ipv4: validate checksum_start before completing checksum
Recorded intelligence activity: 17 Oct 2026, 11:14 UTC.
Source(s) reported by the precooked timeline: BSI CSAF · CISA Vulnrichment · CVEProject.
Underlying CVE record last modified: 17 Oct 2026, 11:14 UTC.
This indicates indexed source activity, not necessarily a newly published exploit, a KEV addition or a change to the underlying vulnerability. EPSS refreshes can also surface old CVEs.Affected vendors, products & devices
Click any identity to explore ↗1 distinct affected-product identities listed in this bounded CVE lookup. Select a vendor or product to investigate.
No matching affected products.
Vendor-wide upcoming ZDI notices are intentionally not attributed to these CVEs or products. Only directly CVE-linked ZDI evidence is shown under Evidence & source attribution.
Vendors
Identity evidence: NVD applicability / catalog · CVE catalog product links · NVD criteria may be conditional, and listing does not prove installed exposure.Evidence & source attribution
CVE-2026-110112Dockhand before 1.0.50 OIDC Privilege Escalation via Missing Token Claim ValidationFinsys / dockhand9.2Critical0.39%CWE-863 ↗›
Vulnerability intelligence
Dockhand before 1.0.50 OIDC Privilege Escalation via Missing Token Claim Validation
Recorded intelligence activity: 17 Oct 2026, 00:40 UTC.
Source(s) reported by the precooked timeline: CISA Vulnrichment · CVEProject · GHSA.
Underlying CVE record last modified: 13 Oct 2026, 19:05 UTC.
This indicates indexed source activity, not necessarily a newly published exploit, a KEV addition or a change to the underlying vulnerability. EPSS refreshes can also surface old CVEs.Affected vendors, products & devices
Click any identity to explore ↗1 distinct affected-product identities listed in this bounded CVE lookup. Select a vendor or product to investigate.
No matching affected products.
Vendor-wide upcoming ZDI notices are intentionally not attributed to these CVEs or products. Only directly CVE-linked ZDI evidence is shown under Evidence & source attribution.
Vendors
Identity evidence: NVD applicability / catalog · CVE catalog product links · NVD criteria may be conditional, and listing does not prove installed exposure.Evidence & source attribution
CVE-2026-111636OpenBMB StaffDeck through 0.5.6 Authentication Bypass via Hard-Coded Session SecretOpenBMB / StaffDeck9.2Critical0.40%CWE-321 ↗›
Vulnerability intelligence
OpenBMB StaffDeck through 0.5.6 Authentication Bypass via Hard-Coded Session Secret
Recorded intelligence activity: 16 Oct 2026, 21:19 UTC.
Source(s) reported by the precooked timeline: CVEProject · GHSA.
Underlying CVE record last modified: 16 Oct 2026, 17:39 UTC.
This indicates indexed source activity, not necessarily a newly published exploit, a KEV addition or a change to the underlying vulnerability. EPSS refreshes can also surface old CVEs.Affected vendors, products & devices
Click any identity to explore ↗1 distinct affected-product identities listed in this bounded CVE lookup. Select a vendor or product to investigate.
No matching affected products.
Vendor-wide upcoming ZDI notices are intentionally not attributed to these CVEs or products. Only directly CVE-linked ZDI evidence is shown under Evidence & source attribution.
Vendors
Identity evidence: NVD applicability / catalog · CVE catalog product links · NVD criteria may be conditional, and listing does not prove installed exposure.Evidence & source attribution
CVE-2026-105032EnergizeLab Eilik AI Skill Upload Unauthenticated Path Traversal Arbitrary File WriteEnergizeLab / FastAPI AI inference server9.1Critical0.90%CWE-22 ↗CWE-434 ↗›
Vulnerability intelligence
EnergizeLab Eilik AI Skill Upload Unauthenticated Path Traversal Arbitrary File Write
Recorded intelligence activity: 16 Oct 2026, 19:48 UTC.
Source(s) reported by the precooked timeline: CISA Vulnrichment · CVEProject · GHSA.
Underlying CVE record last modified: 15 Oct 2026, 20:42 UTC.
This indicates indexed source activity, not necessarily a newly published exploit, a KEV addition or a change to the underlying vulnerability. EPSS refreshes can also surface old CVEs.Affected vendors, products & devices
Click any identity to explore ↗1 distinct affected-product identities listed in this bounded CVE lookup. Select a vendor or product to investigate.
No matching affected products.
Vendor-wide upcoming ZDI notices are intentionally not attributed to these CVEs or products. Only directly CVE-linked ZDI evidence is shown under Evidence & source attribution.
Vendors
Identity evidence: NVD applicability / catalog · CVE catalog product links · NVD criteria may be conditional, and listing does not prove installed exposure.Evidence & source attribution
CVE-2026-110653Appointment Booking Plugin <= 5.7.4 - Unauthenticated Authentication Bypass via Race Condition on OTP Attempt…latepoint / Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress9.1Critical0.40%CWE-287 ↗›
Vulnerability intelligence
Appointment Booking Plugin <= 5.7.4 - Unauthenticated Authentication Bypass via Race Condition on OTP Attempts Counter
Recorded intelligence activity: 17 Oct 2026, 03:30 UTC.
Source(s) reported by the precooked timeline: CVEProject · GHSA · Wordfence.
Underlying CVE record last modified: 17 Oct 2026, 02:31 UTC.
This indicates indexed source activity, not necessarily a newly published exploit, a KEV addition or a change to the underlying vulnerability. EPSS refreshes can also surface old CVEs.Affected vendors, products & devices
Click any identity to explore ↗1 distinct affected-product identities listed in this bounded CVE lookup. Select a vendor or product to investigate.
No matching affected products.
Vendor-wide upcoming ZDI notices are intentionally not attributed to these CVEs or products. Only directly CVE-linked ZDI evidence is shown under Evidence & source attribution.
Vendors
Identity evidence: NVD applicability / catalog · CVE catalog product links · NVD criteria may be conditional, and listing does not prove installed exposure.Evidence & source attribution
CVE-2026-111235OpenNMS REST authorization bypass via non-canonical HTTP methodThe OpenNMS Group / Meridian · The OpenNMS Group / Horizon9.1Critical0.38%CWE-204 ↗CWE-863 ↗›
Vulnerability intelligence
OpenNMS REST authorization bypass via non-canonical HTTP method
Recorded intelligence activity: 16 Oct 2026, 19:59 UTC.
Source(s) reported by the precooked timeline: CISA Vulnrichment · CVEProject · GHSA.
Underlying CVE record last modified: 16 Oct 2026, 16:52 UTC.
This indicates indexed source activity, not necessarily a newly published exploit, a KEV addition or a change to the underlying vulnerability. EPSS refreshes can also surface old CVEs.Affected vendors, products & devices
Click any identity to explore ↗2 distinct affected-product identities listed in this bounded CVE lookup. Select a vendor or product to investigate.
No matching affected products.
Vendor-wide upcoming ZDI notices are intentionally not attributed to these CVEs or products. Only directly CVE-linked ZDI evidence is shown under Evidence & source attribution.
Vendors
Identity evidence: NVD applicability / catalog · CVE catalog product links · NVD criteria may be conditional, and listing does not prove installed exposure.Evidence & source attribution
CVE-2026-111691WIMOOR through commit ec86736 Authentication Bypass via Forged X-USERINFO Headerwimoor-erp / wimoor9.1Critical0.41%CWE-290 ↗›
Vulnerability intelligence
WIMOOR through commit ec86736 Authentication Bypass via Forged X-USERINFO Header
Recorded intelligence activity: 16 Oct 2026, 21:17 UTC.
Source(s) reported by the precooked timeline: CVEProject · GHSA.
Underlying CVE record last modified: 16 Oct 2026, 17:39 UTC.
This indicates indexed source activity, not necessarily a newly published exploit, a KEV addition or a change to the underlying vulnerability. EPSS refreshes can also surface old CVEs.Affected vendors, products & devices
Click any identity to explore ↗1 distinct affected-product identities listed in this bounded CVE lookup. Select a vendor or product to investigate.
No matching affected products.
Vendor-wide upcoming ZDI notices are intentionally not attributed to these CVEs or products. Only directly CVE-linked ZDI evidence is shown under Evidence & source attribution.
Vendors
Identity evidence: NVD applicability / catalog · CVE catalog product links · NVD criteria may be conditional, and listing does not prove installed exposure.Evidence & source attribution
CVE-2026-70188ASP.NET Core Security Feature Bypass VulnerabilityMicrosoftZDI upcoming · 49 / ASP.NET Core 10.0 · MicrosoftZDI upcoming · 49 / ASP.NET Core 11.0 · MicrosoftZDI upcoming · 49 / ASP.NET Core 8.0+3 more listed ↓9.1Critical0.83%BSI CSAFRSS 1CWE-444 ↗›
Vulnerability intelligence
Microsoft Security Update Guide · CVE-2026-70188 ASP.NET Core Security Feature Bypass Vulnerability · Source ↗
Microsoft Entwicklerwerkzeuge: Mehrere Schwachstellen
ASP.NET Core Security Feature Bypass Vulnerability
Recorded intelligence activity: 16 Oct 2026, 20:32 UTC.
Source(s) reported by the precooked timeline: BSI CSAF · CISA Vulnrichment · GHSA.
Underlying CVE record last modified: 16 Oct 2026, 23:20 UTC.
This indicates indexed source activity, not necessarily a newly published exploit, a KEV addition or a change to the underlying vulnerability. EPSS refreshes can also surface old CVEs.Affected vendors, products & devices
Click any identity to explore ↗6 distinct affected-product identities listed in this bounded CVE lookup. Select a vendor or product to investigate.
No matching affected products.
Vendor-wide upcoming ZDI notices are intentionally not attributed to these CVEs or products. Only directly CVE-linked ZDI evidence is shown under Evidence & source attribution.
Vendors
Identity evidence: NVD applicability / catalog · CVE catalog product links · NVD criteria may be conditional, and listing does not prove installed exposure.Evidence & source attribution
CVE-2026-93895IBM WebSphere Application Server Liberty Improper Access ControlIBM / WebSphere Application Server - Liberty9.1Critical0.45%BSI CSAFCWE-284 ↗›
Vulnerability intelligence
IBM WebSphere Application Server und Application Server Liberty: Mehrere Schwachstellen
IBM WebSphere Application Server Liberty Improper Access Control
Recorded intelligence activity: 17 Oct 2026, 00:49 UTC.
Source(s) reported by the precooked timeline: BSI CSAF · CISA Vulnrichment · CVEProject · GHSA.
Underlying CVE record last modified: 13 Oct 2026, 20:18 UTC.
This indicates indexed source activity, not necessarily a newly published exploit, a KEV addition or a change to the underlying vulnerability. EPSS refreshes can also surface old CVEs.Affected vendors, products & devices
Click any identity to explore ↗1 distinct affected-product identities listed in this bounded CVE lookup. Select a vendor or product to investigate.
No matching affected products.
Vendor-wide upcoming ZDI notices are intentionally not attributed to these CVEs or products. Only directly CVE-linked ZDI evidence is shown under Evidence & source attribution.
Vendors
Identity evidence: NVD applicability / catalog · CVE catalog product links · NVD criteria may be conditional, and listing does not prove installed exposure.Evidence & source attribution
CVE-2026-96252Active Directory Federation Services (AD FS) Spoofing VulnerabilityMicrosoftZDI upcoming · 49 / Windows 10 Version 1607 · MicrosoftZDI upcoming · 49 / Windows Server 2019 (Server Core installation) · MicrosoftZDI upcoming · 49 / Windows Server 2022+10 more listed ↓9.1Critical0.48%BSI CSAFCWE-347 ↗›
Vulnerability intelligence
Microsoft Windows und Windows Server: Mehrere Schwachstellen
Active Directory Federation Services (AD FS) Spoofing Vulnerability
Recorded intelligence activity: 16 Oct 2026, 23:24 UTC.
Source(s) reported by the precooked timeline: BSI CSAF · CISA Vulnrichment · CVEProject · GHSA.
Underlying CVE record last modified: 16 Oct 2026, 23:24 UTC.
This indicates indexed source activity, not necessarily a newly published exploit, a KEV addition or a change to the underlying vulnerability. EPSS refreshes can also surface old CVEs.Affected vendors, products & devices
Click any identity to explore ↗13 distinct affected-product identities listed in this bounded CVE lookup. Select a vendor or product to investigate.
No matching affected products.
Vendor-wide upcoming ZDI notices are intentionally not attributed to these CVEs or products. Only directly CVE-linked ZDI evidence is shown under Evidence & source attribution.
Vendors
Identity evidence: NVD applicability / catalog · CVE catalog product links · NVD criteria may be conditional, and listing does not prove installed exposure.Evidence & source attribution
CVE-2026-102608ZoneMinder: Authenticated OS Command Injection via unsanitized Monitor Name in event export (download_functio…ZoneMinder / zoneminder9.0Critical0.29%CWE-78 ↗›
Vulnerability intelligence
ZoneMinder: Authenticated OS Command Injection via unsanitized Monitor Name in event export (download_functions.php)
Recorded intelligence activity: 16 Oct 2026, 21:32 UTC.
Source(s) reported by the precooked timeline: CVEProject · GHSA.
Underlying CVE record last modified: 16 Oct 2026, 19:35 UTC.
This indicates indexed source activity, not necessarily a newly published exploit, a KEV addition or a change to the underlying vulnerability. EPSS refreshes can also surface old CVEs.Affected vendors, products & devices
Click any identity to explore ↗1 distinct affected-product identities listed in this bounded CVE lookup. Select a vendor or product to investigate.
No matching affected products.
Vendor-wide upcoming ZDI notices are intentionally not attributed to these CVEs or products. Only directly CVE-linked ZDI evidence is shown under Evidence & source attribution.
Vendors
Identity evidence: NVD applicability / catalog · CVE catalog product links · NVD criteria may be conditional, and listing does not prove installed exposure.Evidence & source attribution
CVE-2026-105008Windows Schannel Spoofing VulnerabilityMicrosoftZDI upcoming · 49 / Windows 10 Version 1607 · MicrosoftZDI upcoming · 49 / Windows 11 Version 26H2 · MicrosoftZDI upcoming · 49 / Windows Server 2012+17 more listed ↓9.0Critical0.60%BSI CSAFRSS 1CWE-290 ↗CWE-420 ↗›
Vulnerability intelligence
Microsoft Security Update Guide · CVE-2026-105008 Windows Schannel Spoofing Vulnerability · Source ↗
Microsoft Windows und Windows Server: Mehrere Schwachstellen
Windows Schannel Spoofing Vulnerability
Recorded intelligence activity: 16 Oct 2026, 23:26 UTC.
Source(s) reported by the precooked timeline: BSI CSAF · CISA Vulnrichment · CVEProject · GHSA.
Underlying CVE record last modified: 16 Oct 2026, 23:26 UTC.
This indicates indexed source activity, not necessarily a newly published exploit, a KEV addition or a change to the underlying vulnerability. EPSS refreshes can also surface old CVEs.Affected vendors, products & devices
Click any identity to explore ↗20 distinct affected-product identities listed in this bounded CVE lookup. Select a vendor or product to investigate.
No matching affected products.
Vendor-wide upcoming ZDI notices are intentionally not attributed to these CVEs or products. Only directly CVE-linked ZDI evidence is shown under Evidence & source attribution.
Vendors
Identity evidence: NVD applicability / catalog · CVE catalog product links · NVD criteria may be conditional, and listing does not prove installed exposure.Evidence & source attribution
CVE-2026-55562Cronicle: Stored XSS in admin Activity Log via account full_name fieldjhuckaby / Cronicle9.0Critical0.37%CWE-79 ↗›
Vulnerability intelligence
Cronicle: Stored XSS in admin Activity Log via account full_name field
Recorded intelligence activity: 16 Oct 2026, 22:10 UTC.
Source(s) reported by the precooked timeline: CISA Vulnrichment · CVEProject.
Underlying CVE record last modified: 13 Oct 2026, 16:18 UTC.
This indicates indexed source activity, not necessarily a newly published exploit, a KEV addition or a change to the underlying vulnerability. EPSS refreshes can also surface old CVEs.Affected vendors, products & devices
Click any identity to explore ↗1 distinct affected-product identities listed in this bounded CVE lookup. Select a vendor or product to investigate.
No matching affected products.
Vendor-wide upcoming ZDI notices are intentionally not attributed to these CVEs or products. Only directly CVE-linked ZDI evidence is shown under Evidence & source attribution.
Vendors
Identity evidence: NVD applicability / catalog · CVE catalog product links · NVD criteria may be conditional, and listing does not prove installed exposure.Evidence & source attribution
CVE-2026-85818Windows Schannel Spoofing VulnerabilitymicrosoftZDI upcoming · 49 / windows 11 23h2 (< 10.0.22631.7652) · microsoftZDI upcoming · 49 / windows 11 24h2 (< 10.0.26100.9711) · microsoftZDI upcoming · 49 / windows 11 25h2 (< 10.0.26200.9711)+12 more listed ↓9.0Critical0.41%BSI CSAFRSS 1CWE-347 ↗›
Vulnerability intelligence
Microsoft Security Update Guide · CVE-2026-85818 Windows Schannel Spoofing Vulnerability · Source ↗
Microsoft Windows und Windows Server: Mehrere Schwachstellen
Windows Schannel Spoofing Vulnerability
Recorded intelligence activity: 16 Oct 2026, 23:18 UTC.
Source(s) reported by the precooked timeline: BSI CSAF · CISA Vulnrichment · CVEProject · GHSA.
Underlying CVE record last modified: 16 Oct 2026, 23:18 UTC.
This indicates indexed source activity, not necessarily a newly published exploit, a KEV addition or a change to the underlying vulnerability. EPSS refreshes can also surface old CVEs.Affected vendors, products & devices
Click any identity to explore ↗15 distinct affected-product identities listed in this bounded CVE lookup. Select a vendor or product to investigate.
No matching affected products.
Vendor-wide upcoming ZDI notices are intentionally not attributed to these CVEs or products. Only directly CVE-linked ZDI evidence is shown under Evidence & source attribution.
Vendors
Identity evidence: NVD applicability / catalog · CVE catalog product links · NVD criteria may be conditional, and listing does not prove installed exposure.Evidence & source attribution
CVE-2026-100209Microsoft Office Excel Remote Code Execution VulnerabilitymicrosoftZDI upcoming · 49 / 365 apps · microsoftZDI upcoming · 49 / microsoft 365 · microsoftZDI upcoming · 49 / office 2021+6 more listed ↓8.8High0.82%BSI CSAFRCERSS 1CWE-416 ↗›
Vulnerability intelligence
Microsoft Office Excel Remote Code Execution Vulnerability
Textual classification only; validate technical prerequisites in the source advisory. Unknown classifications are not considered safe.Microsoft Security Update Guide · CVE-2026-100209 Microsoft Office Excel Remote Code Execution Vulnerability · Source ↗
Microsoft Office Produkte: Mehrere Schwachstellen ermöglichen Privilegieneskalation
Microsoft Office Excel Remote Code Execution Vulnerability
Recorded intelligence activity: 16 Oct 2026, 23:25 UTC.
Source(s) reported by the precooked timeline: BSI CSAF · CISA Vulnrichment · CVEProject · GHSA.
Underlying CVE record last modified: 16 Oct 2026, 23:25 UTC.
This indicates indexed source activity, not necessarily a newly published exploit, a KEV addition or a change to the underlying vulnerability. EPSS refreshes can also surface old CVEs.Affected vendors, products & devices
Click any identity to explore ↗9 distinct affected-product identities listed in this bounded CVE lookup. Select a vendor or product to investigate.
No matching affected products.
Vendor-wide upcoming ZDI notices are intentionally not attributed to these CVEs or products. Only directly CVE-linked ZDI evidence is shown under Evidence & source attribution.
Vendors
Identity evidence: NVD applicability / catalog · CVE catalog product links · NVD criteria may be conditional, and listing does not prove installed exposure.Evidence & source attribution
CVE-2026-100210Microsoft Office Excel Remote Code Execution VulnerabilitymicrosoftZDI upcoming · 49 / 365 apps · microsoftZDI upcoming · 49 / microsoft 365 · microsoftZDI upcoming · 49 / office 2021+9 more listed ↓8.8High0.82%BSI CSAFRCERSS 1CWE-122 ↗›
Vulnerability intelligence
Microsoft Office Excel Remote Code Execution Vulnerability
Textual classification only; validate technical prerequisites in the source advisory. Unknown classifications are not considered safe.Microsoft Security Update Guide · CVE-2026-100210 Microsoft Office Excel Remote Code Execution Vulnerability · Source ↗
Microsoft Office Produkte: Mehrere Schwachstellen ermöglichen Privilegieneskalation
Microsoft Office Excel Remote Code Execution Vulnerability
Recorded intelligence activity: 16 Oct 2026, 23:26 UTC.
Source(s) reported by the precooked timeline: BSI CSAF · CISA Vulnrichment · CVEProject · GHSA.
Underlying CVE record last modified: 16 Oct 2026, 23:26 UTC.
This indicates indexed source activity, not necessarily a newly published exploit, a KEV addition or a change to the underlying vulnerability. EPSS refreshes can also surface old CVEs.Affected vendors, products & devices
Click any identity to explore ↗12 distinct affected-product identities listed in this bounded CVE lookup. Select a vendor or product to investigate.
No matching affected products.
Vendor-wide upcoming ZDI notices are intentionally not attributed to these CVEs or products. Only directly CVE-linked ZDI evidence is shown under Evidence & source attribution.
Vendors
Identity evidence: NVD applicability / catalog · CVE catalog product links · NVD criteria may be conditional, and listing does not prove installed exposure.Evidence & source attribution
CVE-2026-100212Microsoft Office Excel Remote Code Execution VulnerabilitymicrosoftZDI upcoming · 49 / 365 apps · microsoftZDI upcoming · 49 / microsoft 365 · microsoftZDI upcoming · 49 / office 2021+9 more listed ↓8.8High0.79%BSI CSAFRCERSS 1CWE-416 ↗›
Vulnerability intelligence
Microsoft Office Excel Remote Code Execution Vulnerability
Textual classification only; validate technical prerequisites in the source advisory. Unknown classifications are not considered safe.Microsoft Security Update Guide · CVE-2026-100212 Microsoft Office Excel Remote Code Execution Vulnerability · Source ↗
Microsoft Office Produkte: Mehrere Schwachstellen ermöglichen Privilegieneskalation
Microsoft Office Excel Remote Code Execution Vulnerability
Recorded intelligence activity: 16 Oct 2026, 23:26 UTC.
Source(s) reported by the precooked timeline: BSI CSAF · CISA Vulnrichment · CVEProject · GHSA.
Underlying CVE record last modified: 16 Oct 2026, 23:26 UTC.
This indicates indexed source activity, not necessarily a newly published exploit, a KEV addition or a change to the underlying vulnerability. EPSS refreshes can also surface old CVEs.Affected vendors, products & devices
Click any identity to explore ↗12 distinct affected-product identities listed in this bounded CVE lookup. Select a vendor or product to investigate.
No matching affected products.
Vendor-wide upcoming ZDI notices are intentionally not attributed to these CVEs or products. Only directly CVE-linked ZDI evidence is shown under Evidence & source attribution.
Vendors
Identity evidence: NVD applicability / catalog · CVE catalog product links · NVD criteria may be conditional, and listing does not prove installed exposure.Evidence & source attribution
CVE-2026-100214Microsoft Dynamics 365 Business Central Remote Code Execution VulnerabilityMicrosoftZDI upcoming · 49 / Microsoft Dynamics NAV 2017 · MicrosoftZDI upcoming · 49 / Microsoft Dynamics NAV 20188.8High1.83%BSI CSAFRCECWE-502 ↗›
Vulnerability intelligence
Microsoft Dynamics 365 Business Central Remote Code Execution Vulnerability
Textual classification only; validate technical prerequisites in the source advisory. Unknown classifications are not considered safe.Microsoft Dynamics: Mehrere Schwachstellen
Microsoft Dynamics 365 Business Central Remote Code Execution Vulnerability
Recorded intelligence activity: 16 Oct 2026, 23:26 UTC.
Source(s) reported by the precooked timeline: BSI CSAF · CISA Vulnrichment · CVEProject · GHSA.
Underlying CVE record last modified: 16 Oct 2026, 23:26 UTC.
This indicates indexed source activity, not necessarily a newly published exploit, a KEV addition or a change to the underlying vulnerability. EPSS refreshes can also surface old CVEs.Affected vendors, products & devices
Click any identity to explore ↗2 distinct affected-product identities listed in this bounded CVE lookup. Select a vendor or product to investigate.
No matching affected products.
Vendor-wide upcoming ZDI notices are intentionally not attributed to these CVEs or products. Only directly CVE-linked ZDI evidence is shown under Evidence & source attribution.
Vendors
Identity evidence: NVD applicability / catalog · CVE catalog product links · NVD criteria may be conditional, and listing does not prove installed exposure.Evidence & source attribution
CVE-2026-100220Windows Media Video Decoder Remote Code Execution VulnerabilityMicrosoftZDI upcoming · 49 / Windows 10 Version 1607 · MicrosoftZDI upcoming · 49 / Windows 11 Version 26H2 · MicrosoftZDI upcoming · 49 / Windows Server 2012+17 more listed ↓8.8High0.84%BSI CSAFRCECWE-122 ↗›
Vulnerability intelligence
Windows Media Video Decoder Remote Code Execution Vulnerability
Textual classification only; validate technical prerequisites in the source advisory. Unknown classifications are not considered safe.Microsoft Windows und Windows Server: Mehrere Schwachstellen
Windows Media Video Decoder Remote Code Execution Vulnerability
Recorded intelligence activity: 16 Oct 2026, 23:26 UTC.
Source(s) reported by the precooked timeline: BSI CSAF · CISA Vulnrichment · CVEProject · GHSA.
Underlying CVE record last modified: 16 Oct 2026, 23:26 UTC.
This indicates indexed source activity, not necessarily a newly published exploit, a KEV addition or a change to the underlying vulnerability. EPSS refreshes can also surface old CVEs.Affected vendors, products & devices
Click any identity to explore ↗20 distinct affected-product identities listed in this bounded CVE lookup. Select a vendor or product to investigate.
No matching affected products.
Vendor-wide upcoming ZDI notices are intentionally not attributed to these CVEs or products. Only directly CVE-linked ZDI evidence is shown under Evidence & source attribution.