The National Vulnerability Database (NVD) published 49 CVEs rated Critical under CVSS v3 in the 26 hours to this report. Descriptions below are quoted directly from NVD. Scores are NVD or CNA base scores; always confirm against the vendor advisory before prioritizing.
Critical CVEs (NVD)
| CVE | CVSS | Description (NVD) |
|---|---|---|
| CVE-2026-121889 | 10 | Adobe Connect is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. Exploitation of this issue does not require user interaction. Scope is changed. |
| CVE-2026-121352 | 10 | Adobe Connect is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. An attacker could exploit this vulnerability to gain unauthorized access to sensitive resources. Exploitation of this issue does not require user interaction. Scope is changed. |
| CVE-2026-121353 | 10 | Adobe Connect is affected by an Improper Neutralization of CRLF Sequences ('CRLF Injection') vulnerability that could result in arbitrary code execution in the context of the current user, potentially gaining elevated access or control over the victim's account or session. Exploitation of this issue does not require user interaction. Scope is changed. |
| CVE-2026-121356 | 10 | Adobe Connect is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. Exploitation of this issue does not require user interaction. Scope is changed. |
| CVE-2026-121351 | 10 | Adobe Connect is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to access sensitive files and directories outside the intended access scope. Exploitation of this issue does not require user interaction. Scope is changed. |
| CVE-2026-121906 | 9.9 | Adobe Connect is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to access sensitive files and directories outside the intended access scope. Exploitation of this issue does not require user interaction. Scope is changed. |
| CVE-2026-121908 | 9.9 | Adobe Connect is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction. Scope is changed. |
| CVE-2026-121887 | 9.9 | Adobe Connect is affected by an Improper Restriction of XML External Entity Reference ('XXE') vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction. Scope is changed. |
| CVE-2026-121892 | 9.9 | Adobe Connect is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction. Scope is changed. |
| CVE-2026-121894 | 9.9 | Adobe Connect is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary SQL commands, potentially gaining elevated access or control over the victim's account or session. Exploitation of this issue … |
| CVE-2026-121896 | 9.9 | Adobe Connect is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction. Scope is changed. |
| CVE-2026-121898 | 9.9 | Adobe Connect is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction. Scope is changed. |
| CVE-2026-121354 | 9.9 | Adobe Connect is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to access sensitive files and directories outside the intended access scope. Exploitation of this issue does not require user interaction. Scope is changed. |
| CVE-2026-119017 | 9.9 | Adobe Experience Manager is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction. Scope is changed. |
| CVE-2026-113579 | 9.9 | Adobe Experience Manager is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction. Scope is changed. |
| CVE-2026-113580 | 9.9 | Adobe Experience Manager is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction. Scope is changed. |
| CVE-2026-114371 | 9.9 | Adobe Experience Manager is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction. Scope is changed. |
| CVE-2026-120002 | 9.9 | Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-109467 | 9.9 | Improper authentication in Azure DevOps allows an authorized attacker to execute code over a network. |
| CVE-2026-126542 | 9.8 | WWBN AVideo 6.5 through 29.7.1 contains an authentication bypass vulnerability that allows unauthenticated attackers to log in as any user via Hybridauth social login display names. Attackers can set their X, Facebook, Yahoo or LinkedIn display name to a victim's username and withhold email, causing login.json.php or oauth2.php to log them in as that account, including administrators, without a password. |
| CVE-2026-89324 | 9.8 | The Basel Post Types plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 1.18. The vulnerability exists because a missing-quotes coding error in the defined() call for SECURE_AUTH_SALT inside BASEL_Auth::get_config() causes PHP to evaluate the constant's value rather than its name, making the check always fail and permanently falling back to the static hardcoded salt 2Nl… |
| CVE-2026-96157 | 9.8 | Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network. |
| CVE-2026-96078 | 9.8 | Heap-based buffer overflow in Microsoft Color Management allows an unauthorized attacker to execute code over a network. |
| CVE-2026-96067 | 9.8 | Integer overflow or wraparound in Microsoft Color Management allows an unauthorized attacker to execute code over a network. |
| CVE-2026-95901 | 9.8 | Double free in Windows Microsoft DirectMusic allows an unauthorized attacker to execute code over a network. |
| CVE-2026-95882 | 9.8 | Stack-based buffer overflow in Windows Microsoft DirectMusic allows an unauthorized attacker to execute code over a network. |
| CVE-2026-88243 | 9.8 | Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to execute code over a network. |
| CVE-2026-88234 | 9.8 | Release of invalid pointer or reference in Windows iSCSI allows an unauthorized attacker to execute code over a network. |
| CVE-2026-88218 | 9.8 | Double free in Windows DNS allows an unauthorized attacker to execute code over a network. |
| CVE-2026-85844 | 9.8 | Authentication bypass using an alternate path or channel in Windows Kerberos allows an unauthorized attacker to elevate privileges over a network. |
| CVE-2026-66801 | 9.8 | Heap-based buffer overflow in Xbox allows an unauthorized attacker to execute code over a network. |
| CVE-2026-119990 | 9.8 | Missing authentication for critical function in Azure OpenAI allows an unauthorized attacker to elevate privileges over a network. |
| CVE-2026-119958 | 9.8 | Out-of-bounds write in Windows LDAP – Lightweight Directory Access Protocol allows an unauthorized attacker to execute code over a network. |
| CVE-2026-116945 | 9.8 | Heap-based buffer overflow in SQL Server allows an unauthorized attacker to execute code over a network. |
| CVE-2026-116928 | 9.8 | Out-of-bounds write in Microsoft Windows Search Component allows an unauthorized attacker to execute code over a network. |
| CVE-2026-114160 | 9.8 | No cwe for this issue in Azure Managed Grafana allows an unauthorized attacker to elevate privileges over a network. |
| CVE-2026-112967 | 9.8 | Heap-based buffer overflow in Windows Xbox Live Networking Service allows an unauthorized attacker to execute code over a network. |
| CVE-2026-121904 | 9.6 | Adobe Connect is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the page containing the vulnerable field, potentially gaining elevated access or control over the victim's account or session. Scope is changed. |
| CVE-2026-121349 | 9.6 | Adobe Connect is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to gain elevated access or control over the victim's account or session. Exploitation of this issue does not require user interaction. Scope is changed. |
| CVE-2026-120779 | 9.6 | Improper control of generation of code ('code injection') in Visual Studio Code allows an unauthorized attacker to execute code over a network. |
| CVE-2026-121902 | 9.4 | Adobe Connect is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that could result in arbitrary code execution. An attacker could exploit this vulnerability to execute arbitrary SQL commands, potentially compromising the confidentiality, integrity, and availability of the application. Exploitation of this issue does not require user interaction. |
| CVE-2026-121355 | 9.1 | Adobe Connect is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. An attacker could exploit this vulnerability to gain elevated access to sensitive information or functionality. Exploitation of this issue does not require user interaction. |
| CVE-2026-118740 | 9.1 | Missing authorization in Aspire allows an unauthorized attacker to bypass a security feature over a network. |
| CVE-2026-114162 | 9.1 | Incorrect authorization in Microsoft Graph allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-125757 | 9.1 | mailcow: dockerized before 2026-11 contains a server-side template injection vulnerability that allows domain administrators to execute commands in the shared rspamd container by storing a malicious domain-wide footer. Attackers can embed a Jinja macro with an os.execute default value, rendered by the rspamd MOO_FOOTER prefilter, to read or inject mail for every tenant and disable filtering. |
| CVE-2026-95962 | 9 | Use after free in Windows Virtual Filtering Platform (VFP) allows an unauthorized attacker to execute code over a network. |
| CVE-2026-80095 | 9 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-114146 | 9 | Incorrect authorization in ASP.NET Core allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-109454 | 9 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network. |
New advisories from CERTs and vendors
Canonical (Ubuntu)
- USN-9041-1: uutils coreutils vulnerabilities
- USN-9043-1: Linux kernel (NVIDIA) vulnerabilities
- USN-9045-1: Linux kernel (NVIDIA) vulnerability
- USN-9044-1: Linux kernel (NVIDIA BaseOS) vulnerabilities
- USN-9040-1: Linux kernel (Low Latency NVIDIA) vulnerabilities
- USN-8952-3: Tornado regression
- USN-9039-1: Linux kernel (Azure CVM) vulnerabilities
- USN-9037-1: HPLIP vulnerabilities
- USN-9038-1: GStreamer Good Plugins, GStreamer Base Plugins vulnerabilities
- USN-8946-2: Unbound vulnerabilities
- USN-9036-1: ca-certificates-java update
Debian
- DSA-6618-1 openexr – security update
Microsoft MSRC
- CVE-2026-92707 MessagePack-CSharp Denial of Service Vulnerability
- CVE-2026-119972 Remote Procedure Call Denial of Service Vulnerability
- CVE-2026-105490 Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability
- CVE-2026-119833 Windows Message Queuing Elevation of Privilege Vulnerability
- CVE-2026-119912 Windows Kernel Elevation of Privilege Vulnerability
- CVE-2026-112738 Microsoft Office PowerPoint Information Disclosure Vulnerability
- CVE-2026-120790 Microsoft Office Excel Remote Code Execution Vulnerability
- CVE-2026-118143 Windows Kernel Elevation of Privilege Vulnerability
- CVE-2026-110051 Microsoft Office Word Information Disclosure Vulnerability
- CVE-2026-119910 Win32k Information Disclosure Vulnerability
- CVE-2026-105537 Mailslot File System Information Disclosure Vulnerability
- CVE-2026-105028 Windows Win32k Elevation of Privilege Vulnerability
- CVE-2026-108405 Windows CD-ROM Driver Elevation of Privilege Vulnerability
- CVE-2026-120789 Microsoft Office Excel Remote Code Execution Vulnerability
- CVE-2026-122196 Microsoft Dynamics 365 (on-premises) Information Disclosure Vulnerability
- CVE-2026-119832 Windows BitLocker Security Feature Bypass Vulnerability
- CVE-2026-111300 Microsoft Office SharePoint Spoofing Vulnerability
- CVE-2026-110050 Microsoft Office Word Remote Code Execution Vulnerability
- CVE-2026-118748 ASP.NET Core Denial of Service Vulnerability
- CVE-2026-112737 Microsoft Office PowerPoint Remote Code Execution Vulnerability
- CVE-2026-119387 Quality Windows Audio/Video Experience (QWAVE) service Elevation of Privilege Vulnerability
- CVE-2026-105589 Windows Wireless Networking Elevation of Privilege Vulnerability
- CVE-2026-119872 Windows USB Driver Elevation of Privilege Vulnerability
- CVE-2026-118142 Windows Distributed File System (DFS) Elevation of Privilege Vulnerability
- CVE-2026-69901 Microsoft Teams for Android Spoofing Vulnerability
Plus 215 more from Microsoft MSRC; see the source link below.
Cisco PSIRT
- Cisco Identity Services Engine Authorization Bypass Vulnerabilities
CISA
- VA-26-314-01: Social Security Administration dce-web
- VA-26-314-02: Social Security Administration government.github.com
- VA-26-314-03: Social Security Administration genesys
CERT-FR
- Multiples vulnérabilités dans Siemens SIMATIC (10 novembre 2026)
- Multiples vulnérabilités dans Mozilla Firefox (10 novembre 2026)
- Multiples vulnérabilités dans les produits Apple (10 novembre 2026)
- Multiples vulnérabilités dans OpenSSL (10 novembre 2026)
- Vulnérabilité dans Schneider Electric EcoStruxure (10 novembre 2026)
- Multiples vulnérabilités dans le greffon OpenID Connect OpenID Provider (OIDC OP) pour Shibboleth (10 novembre 2026)
- Multiples vulnérabilités dans Synology DSM (10 novembre 2026)
- Multiples vulnérabilités dans les produits SAP (10 novembre 2026)
- Multiples vulnérabilités dans Google Chrome (10 novembre 2026)
- Vulnérabilité dans Atlassian Confluence Data Center (10 novembre 2026)
- Multiples vulnérabilités dans Roundcube (10 novembre 2026)