Skip to content
Stackwatch, go to homepage

Live

What’s on fire. Critical vulnerabilities, last 14 days.

Compiled automatically every day: what CISA lists as actively exploited and which critical advisories GitHub has published for packages. With affected and fixed versions where the source states them.

Taken automatically from CISA KEV and the GitHub Advisory Database, as of 2026-10-25. Unreviewed and in the original wording. The linked source is always authoritative. RSS feed of this page

Our in-depth analyses of major vulnerabilities are on the blog →

Actively exploited (CISA KEV)

Vulnerabilities that CISA reports as already under attack. Every hour counts.

  • CVE-2026-110447Actively exploitedAdded:

    Collabora Collabora Online – Built-in CODE Server

    Collabora Collabora Online – Built-in CODE Server when used within the NextCloud platform contains an OS command injection vulnerability that allows for remote code execution when the CODE server isn't running.

    Source →

  • CVE-2026-114625Actively exploitedAdded:

    Arista VeloCloud Orchestrator

    Arista VeloCloud Orchestrator on-prem contains a SQL injection vulnerability that may allow a remote attacker to access privileged internal functionality and impact the VCO host. Successful exploitation may compromise the confidentiality, integrity, and availability of the orchestrator and data managed by the orchestrator.

    Source →

  • CVE-2026-106931Actively exploitedAdded:

    EG Secure Solutions SiteGuard Server Edition

    EG Secure Solutions SiteGuard Server Edition contains an OS command injection vulnerability which may allow an attacker to execute arbitrary OS commands with root or SYSTEM privileges on the system running the affected product.

    Source →

  • CVE-2026-110936Actively exploitedAdded:

    Siemens Software Center

    Siemens Software Center contains an uncontrolled search path element vulnerability that could allow an authenticated local attacker to place a specially crafted DLL in a directory that the application searches, leading to arbitrary code execution with the privileges of the affected application.

    Source →

  • CVE-2026-96652Actively exploitedAdded:

    Plex Media Server

    Plex Media Server contains a server-side request forgery (SSRF) vulnerability which could allow an attacker using any X-Plex-Token value to include a full URL in the 'protocol' parameter and force the Plex server to POST to the attacker's chosen destination. This vulnerability can be chained with CVE-2026-96654, CVE-2026-96655, and CVE-2026-96656.

    Source →

  • CVE-2026-96654Actively exploitedAdded:

    Plex Media Server

    Plex Media Server contains an improper neutralization of encoded URI schemes in a web page vulnerability that could allow an attacker to call other plugins' functions and supply their own parameters. This vulnerability can be chained with CVE-2026-96652, CVE-2026-96655, and CVE-2026-96656.

    Source →

  • CVE-2026-96655Actively exploitedAdded:

    Plex Media Server

    Plex Media Server contains a server-side request forgery (SSRF) vulnerability that could allow an authenticated user to request arbitrary internal or external addresses via the '/video/:/transcode/universal' path parameter. This vulnerability can be chained with CVE-2026-96652, CVE-2026-96654, and CVE-2026-96656.

    Source →

  • CVE-2026-96656Actively exploitedAdded:

    Plex Media Server

    Plex Media Server contains an external control of file name or path vulnerability which can allow an admin user to write arbitrary files that may be executed on load. This vulnerability can be chained with CVE-2026-96652, CVE-2026-96654, and CVE-2026-96655.

    Source →

  • CVE-2025-61624Actively exploitedAdded:

    Fortinet Multiple Products

    FortiOS, FortiPAM, FortiProxy, and FortiSwitchManager contain a path traversal vulnerability that may allow an authenticated attacker with admin profile and at least read-write permissions to write or delete arbitrary files via specific CLI commands.

    Source →

  • CVE-2026-102764Actively exploitedAdded:

    BeyondTrust Remote Support

    BeyondTrust Remote Support contains an authentication bypass by spoofing vulnerability that could allow a remote attacker to perform file operations on the appliance.

    Source →

  • CVE-2026-21589Actively exploitedAdded:

    Atlassian Multiple Products

    Multiple Atlassian products (Bitbucket Data Center ,Confluence Data Center, Jira Service Management Data Center, Jira Software Data Center, Bamboo Data Center, Crowd Data Center, Crucible and Fisheye) contain a files or directories accessible to external parties vulnerability which could allow an unauthenticated attacker to access specific files within the web application root directory in affected versions.

    Source →

  • CVE-2026-0322Actively exploitedAdded:

    Palo Alto Networks PAN-OS

    Palo Alto Networks PAN-OS contains a code injection vulnerability that could allow an authenticated attacker with network access to execute arbitrary code with root privileges on the firewall.

    Source →

  • CVE-2026-105133Actively exploitedAdded:

    Ahsay AhsayCBS

    Ahsay AhsayCBS contains an improper authentication vulnerability that could allow a remote attacker to bypass authentication via manipulation of the random parameter in the API component’s checkSysPwd function. This vulnerability can be chained with CVE-2026-105134.

    Source →

  • CVE-2026-105134Actively exploitedAdded:

    Ahsay AhsayCBS

    Ahsay AhsayCBS contains a command injection vulnerability that could allow a remote attacker to execute operating system commands via manipulation of the random parameter in the Replication Receiver component’s /rps/api/json/UpdateReceivers.do endpoint. This vulnerability can be chained with CVE-2026-105133.

    Source →

  • CVE-2026-76519Actively exploitedAdded:

    Cisco Secure Email Gateway

    Cisco Secure Email Gateway contains a relative path traversal vulnerability that could allow an unauthenticated, remote attacker to write arbitrary files on the underlying operating system.

    Source →

  • CVE-2026-104935Actively exploitedAdded:

    Ivanti Connect Secure

    Ivanti Connect Secure contains an authentication bypass by spoofing vulnerability that allows a remote unauthenticated attacker to execute arbitrary commands.

    Source →

  • CVE-2026-96951Actively exploitedAdded:

    Microsoft Windows

    Microsoft Windows Shell contains a command injection vulnerability that allows an unauthorized attacker to bypass a security feature over a network.

    Source →

Critical in packages (GitHub Advisory Database)

Critical advisories for npm, Composer, PyPI, Go, Maven, RubyGems, NuGet and Rust.

  • CVE-2026-112398 · GHSA-5x8w-8jj5-q52hPublished:

    pillow

    Pillow: Heap buffer overflow in FlashPix (FPX) JPEG decoding leads to code execution

    • pip/pillow · Affected: <= 12.3.0 · Fixed in: 13.0.0

    Source →

  • CVE-2026-114509 · GHSA-f9x3-7vq9-cph6Published:

    laravel/framework

    Laravel TokenGuard authentication bypass through non-string API credentials

    • composer/laravel/framework · Affected: >= 13.0.0, < 13.29.0 · Fixed in: 13.29.0
    • composer/laravel/framework · Affected: < 12.68.0 · Fixed in: 12.68.0

    Source →

  • CVE-2026-115889 · GHSA-897f-g5gm-fmxmPublished:

    wasmtime

    Wasmtime: Bit-packing in Cranelift compiler causes silent overflow and miscompilation

    • rust/wasmtime · Affected: < 36.0.19 · Fixed in: 36.0.19
    • rust/wasmtime · Affected: >= 37.0.0, < 43.0.0 · Fixed in: 43.0.0

    Source →

  • CVE-2026-77363 · GHSA-pqh8-4pj7-32xxPublished:

    obsidian-tc

    obsidian-tc HTTP transport lacks Origin/DNS-rebinding protection, enabling drive-by vault access on loopback

    • npm/obsidian-tc · Affected: < 1.3.1 · Fixed in: 1.3.1

    Source →

  • CVE-2026-77366 · GHSA-84c9-qqpq-2pq5Published:

    obsidian-tc

    obsidian-tc tokens can access arbitrary configured vaults

    • npm/obsidian-tc · Affected: < 1.3.1 · Fixed in: 1.3.1

    Source →

  • GHSA-cxf3-9h37-7rr8Published:

    github.com/labstack/echo/v4, github.com/labstack/echo/v5

    Echo: Rejected WebSocket upgrades can bypass Echo route-level access controls

    • go/github.com/labstack/echo/v4 · Affected: >= 4.0.0, < 4.16.1 · Fixed in: 4.16.1
    • go/github.com/labstack/echo/v5 · Affected: >= 5.0.0, < 5.4.1 · Fixed in: 5.4.1

    Source →

  • CVE-2026-114139 · GHSA-mchm-gjx6-7h55Published:

    @sentry/nextjs

    Sentry-Javascript: Middleware Bypass when using Tunnel route

    • npm/@sentry/nextjs · Affected: >= 9.36.0, < 9.47.2 · Fixed in: 9.47.2
    • npm/@sentry/nextjs · Affected: >= 10.0.0-alpha.0, < 10.75.2 · Fixed in: 10.75.2
    • npm/@sentry/nextjs · Affected: >= 11.0.0-alpha.0, < 11.0.0-rc.1 · Fixed in: 11.0.0-rc.1

    Source →

  • CVE-2026-115324 · GHSA-7587-9684-52r6Published:

    mem0ai

    mem0ai Databricks vector store vulnerable to SQL injection

    • pip/mem0ai · Affected: >= 0.1.117, < 1.0.8 · Fixed in: 1.0.8

    Source →

  • CVE-2026-96639 · GHSA-v9pv-5gc8-w2m6Published:

    Pillow

    Pillow multi-frame loaders can reuse stale native image storage after mode transitions

    • pip/Pillow · Affected: >= 11.0.0, < 13.0.0 · Fixed in: 13.0.0

    Source →

  • GHSA-2464-fhr4-w9xwPublished:

    next

    Next.js: Unauthenticated Remote Code Execution in Image Optimization API when SVG files are used

    • npm/next · Affected: >= 10.0.0, <= 15.5.27 · Fixed in: 15.5.28
    • npm/next · Affected: >= 16.0.0, <= 16.4.0 · Fixed in: 16.4.1

    Source →

  • GHSA-673q-mjm6-r5xrPublished:

    next

    Next.js: Unauthenticated Remote Code Execution in `use cache` functions returning typed arrays

    • npm/next · Affected: >= 16.0.0, <= 16.4.0 · Fixed in: 16.4.1

    Source →

  • GHSA-9v8h-qqgm-4m35Published:

    brotli, brotlicffi

    Brotli: Out-of-bounds write in the Brotli decoder ("Node2Shell") also affects the PyPI Brotli package

    • pip/brotli · Affected: >= 1.0.3, < 1.2.1 · Fixed in: 1.2.1
    • pip/brotlicffi · Affected: >= 1.0.3, < 1.2.1.0 · Fixed in: 1.2.1.0

    Source →Our article →

  • GHSA-cg2g-xh64-v4q7Published:

    dompurify

    DOMPurify SAFE_FOR_TEMPLATES bypass: split template expressions survive in attached shadow root content on DOM output modes

    • npm/dompurify · Affected: >= 3.4.4, <= 3.4.16 · Fixed in: 3.4.17

    Source →

  • CVE-2026-112393 · GHSA-332p-7hrc-92wfPublished:

    Pillow

    Pillow: Heap buffer overflow in _tiffWriteProc when saving TIFF to BytesIO

    • pip/Pillow · Affected: >= 2.0.0, < 13.0.0 · Fixed in: 13.0.0

    Source →

  • CVE-2026-112900 · GHSA-w889-685w-c8fhPublished:

    Pillow

    Pillow: Argument Injection in Ghostscript call, potentially leading into RCE

    • pip/Pillow · Affected: >= 2.6.0, < 13.0.0 · Fixed in: 13.0.0

    Source →

  • CVE-2026-114125 · GHSA-f2ph-cmg5-wxc8Published:

    storybook, @storybook/core and 4 more

    Storybook: Missing origin validation in Storybook preview allows code injection from malicious websites

    • npm/storybook and 3 more · Affected: >= 8.0.0, < 8.6.19 · Fixed in: 8.6.19
    • npm/storybook, @storybook/addon-vitest · Affected: >= 9.0.0, < 9.1.21 · Fixed in: 9.1.21
    • npm/storybook, @storybook/addon-vitest · Affected: >= 10.0.0, < 10.6.2 · Fixed in: 10.6.2
    • npm/storybook and 2 more · Affected: >= 11.0.0-alpha.0, < 11.0.0-alpha.6 · Fixed in: 11.0.0-alpha.6
    • npm/@storybook/addon-mcp · Affected: >= 10.6.0, < 10.6.2 · Fixed in: 10.6.2

    Source →

  • CVE-2026-112403 · GHSA-8g5g-8vmr-9782Published:

    Pillow

    Pillow: Heap buffer overflow in ImagingJpegDecode

    • pip/Pillow · Affected: <= 12.3.0 · Fixed in: 13.0.0

    Source →

  • GHSA-6q48-6c7w-9gw2Published:

    certifi

    certifi bundles emSign root CAs with compromised intermediate CA keys

    • pip/certifi · Affected: >= 2019.03.09, < 2026.10.19 · Fixed in: 2026.10.19

    Source →

  • GHSA-hq85-5cpj-mr62Published:

    uv

    uv's bundled CA store trusts an emSign root whose intermediate CA keys are compromised

    • pip/uv · Affected: < 0.13.4 · Fixed in: 0.13.4

    Source →

  • CVE-2026-111057 · GHSA-f8c7-rwf9-fmgmPublished:

    mercury

    Mercury: Unauthenticated Remote Code Execution in /api/terminals - access control bypass

    • pip/mercury · Affected: >= 3.0.0, <= 3.2.3 · Fixed in: 3.2.4

    Source →

  • CVE-2026-111058 · GHSA-rv4m-xm3f-3ccqPublished:

    mercury

    Mercury: Unauthenticated Remote Code Execution via /api/kernels

    • pip/mercury · Affected: <= 3.2.5 · Fixed in: 3.2.6

    Source →

  • CVE-2026-105192 · GHSA-w5f2-9q9c-ff4hPublished:

    lmcache

    LMCache: Remote code execution via unsafe deserialization in multiprocess mode transport

    • pip/lmcache · Affected: >= 0.3.9, < 0.5.6 · Fixed in: 0.5.6

    Source →

  • CVE-2026-96620 · GHSA-h4mw-j7qp-8mwmPublished:

    claude-agent-sdk

    Claude Agent SDK: Argument Injection via resume Option Allows Arbitrary Command Execution

    • pip/claude-agent-sdk · Affected: < 0.2.121 · Fixed in: 0.2.121

    Source →

  • CVE-2026-102748 · GHSA-qj98-gp63-54xjPublished:

    github.com/dgraph-io/dgraph/v25

    Dgraph: Zero Unauthenticated HTTP Admin removeNode Denial of Service

    • go/github.com/dgraph-io/dgraph/v25 · Affected: <= 25.3.8 · Fixed in: 25.4.0

    Source →

  • CVE-2026-102989 · GHSA-qx66-fv34-fjm8Published:

    @tanstack/start-server-core, @tanstack/react-start and 2 more

    TanStack Router: Unauthenticated reflected XSS in TanStack Start server-function responses

    • npm/@tanstack/start-server-core · Affected: >= 1.143.12, < 1.169.39 · Fixed in: 1.169.39
    • npm/@tanstack/react-start · Affected: >= 1.143.12, < 1.168.60 · Fixed in: 1.168.60
    • npm/@tanstack/solid-start · Affected: >= 1.143.12, < 1.168.57 · Fixed in: 1.168.57
    • npm/@tanstack/vue-start · Affected: >= 1.143.12, < 1.168.56 · Fixed in: 1.168.56

    Source →

  • CVE-2026-104252 · GHSA-v75v-6fpf-gvw8Published:

    vitess.io/vitess

    Vitess vttablet /twopcz reflected XSS

    • go/vitess.io/vitess · Affected: < 0.23.5 · Fixed in: 0.23.5
    • go/vitess.io/vitess · Affected: >= 0.24.0, < 0.24.2 · Fixed in: 0.24.2

    Source →

  • CVE-2026-77459 · GHSA-fmxq-cgp8-87wpPublished:

    github.com/argoproj/argo-cd/v2, github.com/argoproj/argo-cd/v3

    Argo CD: AppProject destination-namespace and resource restrictions bypassed by PreDelete/PostDelete resource hooks

    • go/github.com/argoproj/argo-cd/v2 · Affected: >= 2.10.0, <= 2.14.21 · Fixed in: no fix listed
    • go/github.com/argoproj/argo-cd/v3 · Affected: >= 3.0.0, < 3.3.15 · Fixed in: 3.3.15
    • go/github.com/argoproj/argo-cd/v3 · Affected: >= 3.4.0, < 3.4.10 · Fixed in: 3.4.10
    • go/github.com/argoproj/argo-cd/v3 · Affected: >= 3.5.0, < 3.5.4 · Fixed in: 3.5.4
    • go/github.com/argoproj/argo-cd/v3 · Affected: >= 3.6.0-rc1, < 3.6.0-rc2 · Fixed in: 3.6.0-rc2

    Source →

  • CVE-2026-77524 · GHSA-637c-6jxx-4rwmPublished:

    github.com/kedacore/keda, github.com/kedacore/keda/v2

    KEDA: Privilege escalation from namespace admin to cluster admin via KEDA TriggerAuthentication

    • go/github.com/kedacore/keda · Affected: <= 1.5.0 · Fixed in: no fix listed
    • go/github.com/kedacore/keda/v2 · Affected: < 2.21.0 · Fixed in: 2.21.0

    Source →

  • CVE-2026-94603 · GHSA-2cvf-wqm6-wr9gPublished:

    github.com/containers/podman, go.podman.io/podman/v6

    Podman: The `podman run` command can be instructed to disable almost all sandboxing by image annotation

    • go/github.com/containers/podman · Affected: >= 4.4.0, < 5.8.8 · Fixed in: 5.8.8
    • go/go.podman.io/podman/v6 · Affected: >= 6.0.0, < 6.1.3 · Fixed in: 6.1.3

    Source →

  • CVE-2026-105016 · GHSA-5gjq-3f94-rcf7Published:

    Microsoft.Native.Quic.MsQuic.Schannel

    Microsoft Security Advisory CVE-2026-105016 - Microsoft QUIC Remote Code Execution Vulnerability

    • nuget/Microsoft.Native.Quic.MsQuic.Schannel · Affected: = 2.5.11-ci.156755675 · Fixed in: 2.5.11-ci.159417053

    Source →

  • CVE-2026-70188 · GHSA-fpq8-4vhr-rcxxPublished:

    Microsoft.AspNetCore.App.Runtime.linux-arm, Microsoft.AspNetCore.App.Runtime.linux-arm64 and 9 more

    Microsoft Security Advisory CVE-2026-70188 - ASP.NET Core Security Feature Bypass Vulnerability

    • nuget/Microsoft.AspNetCore.App.Runtime.linux-arm and 10 more · Affected: >= 11.0.0-preview.1, <= 11.0.0-rc.1 · Fixed in: 11.0.0-rc.2
    • nuget/Microsoft.AspNetCore.App.Runtime.linux-arm and 10 more · Affected: >= 8.0.0, <= 8.0.31 · Fixed in: 8.0.32
    • nuget/Microsoft.AspNetCore.App.Runtime.linux-arm and 10 more · Affected: >= 10.0.0, <= 10.0.12 · Fixed in: 10.0.13
    • nuget/Microsoft.AspNetCore.App.Runtime.linux-arm and 10 more · Affected: >= 9.0.0, <= 9.0.20 · Fixed in: 9.0.21

    Source →

  • CVE-2026-88092 · GHSA-rv87-ccxw-8ggfPublished:

    Microsoft.AspNetCore.App.Runtime.linux-arm, Microsoft.AspNetCore.App.Runtime.linux-arm64 and 9 more

    Microsoft Security Advisory CVE-2026-88092 - ASP.NET Core Security Feature Bypass Vulnerability

    • nuget/Microsoft.AspNetCore.App.Runtime.linux-arm and 10 more · Affected: >= 8.0.0, <= 8.0.31 · Fixed in: 8.0.32
    • nuget/Microsoft.AspNetCore.App.Runtime.linux-arm and 10 more · Affected: >= 10.0.0, <= 10.0.12 · Fixed in: 10.0.13
    • nuget/Microsoft.AspNetCore.App.Runtime.linux-arm and 10 more · Affected: >= 11.0.0-preview.1, <= 11.0.0-rc.1 · Fixed in: 11.0.0-rc.2
    • nuget/Microsoft.AspNetCore.App.Runtime.linux-arm and 10 more · Affected: >= 9.0.0, <= 9.0.20 · Fixed in: 9.0.21

    Source →