The National Vulnerability Database (NVD) published 16 CVEs rated Critical under CVSS v3 in the 26 hours to this report. Descriptions below are quoted directly from NVD. Scores are NVD or CNA base scores; always confirm against the vendor advisory before prioritizing.
Critical CVEs (NVD)
| CVE | CVSS | Description (NVD) |
|---|---|---|
| CVE-2026-89126 | 10 | SAP Web Dispatcher does not sufficiently validate certain network input processed by an internal component. An unauthenticated attacker could send specially crafted network traffic to trigger a memory corruption condition in the affected functionality. Successful exploitation could allow the attacker to execute arbitrary code and fully compromise the system, resulting in a high impact on confidentiality, integrity a… |
| CVE-2026-89103 | 10 | SAP Gateway activates the default Access Control List with high privileges allowing categorization of external attacker as internal application server. As a result an unauthenticated attacker with network access to the SAP Gateway could exploit this weakness to potentially perform unauthorized actions within the application environment, resulting in a high impact on the confidentiality, integrity, and availability o… |
| CVE-2026-76964 | 10 | SAP NetWeaver Application Server ABAP does not sufficiently validate certain network input processed by an internal component. An unauthenticated attacker could send specially crafted network traffic to trigger a memory corruption condition in the affected functionality. Successful exploitation could allow the attacker to execute arbitrary code and fully compromise the system, resulting in a high impact on confident… |
| CVE-2026-125086 | 10 | A vulnerability has been found in D-Link M60 1.12.B01. Impacted is the function system of the file /etc/emDaemon/mosquitto.conf of the component emDaemon MQTT Broker. Such manipulation leads to hard-coded credentials. The attack can be executed remotely. The exploit has been disclosed to the public and may be used. |
| CVE-2026-120017 | 10 | SAP NetWeaver AS ABAP and ABAP Platform does not perform sufficient verification of incoming authentication assertions under certain configurations. An unauthenticated attacker could submit specially crafted data to bypass authentication and impersonate arbitrary users, including privileged accounts. Successful exploitation could cause a full system compromise, with the impact potentially extending to connected comp… |
| CVE-2026-76965 | 9.9 | SAP NetWeaver Application Server ABAP and ABAP Platform does not perform necessary authorization checks for certain internal functionality. An attacker with low privileges could invoke affected functionality to execute arbitrary operating system commands on the underlying host. Successful exploitation could impact resources beyond the vulnerable component, resulting in a high impact on confidentiality, integrity and… |
| CVE-2026-109803 | 9.9 | SAP NetWeaver Knowledge Management (XML Forms) does not sufficiently restrict the selection of XSL transformations processed by the affected functionality. Under certain conditions, an authenticated user with access to the affected functionality could cause an unauthorized XSL transformation to be processed, potentially leading to arbitrary code execution in the application context. Successful exploitation could imp… |
| CVE-2026-109795 | 9.9 | SAP NetWeaver does not perform necessary authorization checks and lacks sufficient input validation in certain remote-enabled functionality. An attacker with low privileges could send specially crafted input through a remote interface to inject and execute arbitrary code within the affected system. Successful exploitation could extend the attacker's reach beyond the vulnerable component, resulting in a high impact o… |
| CVE-2026-125383 | 9.8 | INDOTALENT WHMS (Asp.Net-Core-Inventory-Order-Management-System) before 10.20261109 contains an authentication bypass vulnerability caused by a hard-coded JWT signing key, issuer and audience in appsettings.json. Unauthenticated remote attackers can forge tokens for any user ID and role that the Tokens/DI.cs validator trusts, gaining administrator access to the entire API. |
| CVE-2026-125384 | 9.8 | INDOTALENT WHMS before 10.20261109 contains a default credentials vulnerability that allows unauthenticated attackers to gain administrator access because UserAdminSeeder creates admin@root.com with password 123456. Attackers can log in with these credentials, which carry every admin role and no forced password change, to fully control deployments that kept them. |
| CVE-2026-125370 | 9.8 | Kubero 3.0.0 through 3.1.1 contains an authentication bypass vulnerability that allows unauthenticated remote attackers to forge administrative JWTs by using a hardcoded fallback signing secret when JWT_SECRET is unset. Attackers can sign tokens with arbitrary role, userGroups and permissions claims, which JwtStrategy.validate() trusts without a database lookup, to take control of pipelines, applications, users and … |
| CVE-2026-119756 | 9.8 | Tasmota through 16.0.0, fixed in commit e97e1e4, contains a heap out-of-bounds write vulnerability in SendReceiveDeviceGroupMessage() that allows unauthenticated attackers on the local network to corrupt heap memory by sending crafted Device Groups messages over UDP port 4447 that cause the log_remaining counter to go negative and writes to exceed the fixed 512-byte buffer. Attackers can exploit this flaw to crash t… |
| CVE-2026-124079 | 9.8 | rConfig Core 8.0.0 before 8.2.19 and rConfig Pro before 8.4.1 contain a deserialization of untrusted data vulnerability that allows unauthenticated network attackers to execute arbitrary code by pushing a crafted serialized job onto the Redis-backed Laravel Horizon queue, which runs without authentication in affected deployments. Laravel's CallQueuedHandler unserializes the job without class restrictions, allowing a… |
| CVE-2026-89119 | 9.6 | SAP Web Dispatcher and SAP NetWeaver Application Server ABAP (Internet Communication Manager) do not perform sufficient request validation in certain administrative functionality. In the context of Application Server ABAP and SAP Web Dispatcher, an unauthenticated attacker could trick a logged-on administrator into visiting a malicious link. Visiting the link could cause unintended actions in the administrator's ses… |
| CVE-2026-60043 | 9.3 | An unauthenticated remote attacker can perform a XSS attack on a logged in backend user allowing for execution of multiple critical system actions. This could allow an attacker to shutdown the server or restore an uploaded backup. This can result in a loss of integrity and availability. |
| CVE-2026-109798 | 9.1 | SAP BusinessObjects Business Intelligence Platform (Web Intelligence) does not properly restrict external entity resolution when processing OLAP connection requests. An authenticated attacker could exploit this vulnerability to access restricted resources, enabling them to read sensitive files on the server and reach internal systems that are not otherwise exposed, impacting resources beyond the vulnerable component… |
New advisories from CERTs and vendors
Canonical (Ubuntu)
- USN-9022-1: Linux kernel vulnerabilities
- USN-9024-1: Linux kernel vulnerabilities
- USN-9025-1: Linux kernel vulnerabilities
- USN-9026-1: Linux kernel (Azure) vulnerabilities
- USN-9035-1: Linux kernel vulnerabilities
- USN-9029-1: Linux kernel (Raspberry Pi) vulnerabilities
- USN-9034-1: Linux kernel (AWS) vulnerabilities
- USN-9032-1: Linux kernel vulnerabilities
- USN-9033-1: Linux kernel vulnerabilities
- USN-9023-1: Linux kernel vulnerabilities
- USN-9016-1: Apache HTTP Server vulnerabilities
- USN-8890-3: libsoup regression
- USN-9015-1: OpenJDK 21 vulnerabilities
- USN-9014-1: OpenJDK 17 vulnerabilities
- USN-9013-1: Fetchmail vulnerabilities
- USN-9012-1: libheif vulnerability
- USN-9011-1: pyasn1 vulnerabilities
- USN-9009-1: OpenJDK 8 vulnerabilities
- USN-9010-1: OpenJDK 11 vulnerabilities
- USN-9008-1: libnfs vulnerability
- USN-9007-1: FreeRDP vulnerabilities
- USN-9001-2: ca-certificates update
- USN-9005-1: OpenJDK 27 vulnerabilities
- USN-9004-1: OpenJDK 25 vulnerabilities
Canadian Centre for Cyber Security
- Red Hat security advisory (AV26-1136)
- IBM security advisory (AV26-1135)
- Dell security advisory (AV26-1134)
Debian
- DSA-6617-1 symfony – security update
CERT-FR
- Bulletin d'actualité CERTFR-2026-ACT-047 (09 novembre 2026)
- Multiples vulnérabilités dans Xen (09 novembre 2026)
- Vulnérabilité dans Moodle (09 novembre 2026)
- Multiples vulnérabilités dans les produits VMware (09 novembre 2026)
- Multiples vulnérabilités dans Sonicwall SonicOS (09 novembre 2026)
- Multiples vulnérabilités dans Apache HTTP Server (09 novembre 2026)
- Multiples vulnérabilités dans les produits Synology (09 novembre 2026)
- Activités cyber offensives ciblant la France menées par des acteurs iraniens liés au CRGI (09 novembre 2026)