The National Vulnerability Database (NVD) published 8 CVEs rated Critical under CVSS v3 in the 26 hours to this report. Descriptions below are quoted directly from NVD. Scores are NVD or CNA base scores; always confirm against the vendor advisory before prioritizing.
Critical CVEs (NVD)
| CVE | CVSS | Description (NVD) |
|---|---|---|
| CVE-2026-129250 | 9.9 | A security vulnerability has been detected in Edimax BR6478ACV2 1.23. The impacted element is the function formPPTPSetup of the file webs. The manipulation of the argument pptpUserName leads to buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way. |
| CVE-2026-126173 | 9.8 | The AutomatorWP Pro plugin for WordPress' webhook addon is vulnerable to authorization bypass in all versions up to, and including, 1.4.4. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for unauthenticated attackers to reset the password of any WordPress account, including administrators, resulting in full account takeover. This is only exploit… |
| CVE-2026-82504 | 9.8 | VITEC EZ TV Platform Server before 8.5.0 contains an unrestricted file upload vulnerability in the upload handler that allows unauthenticated remote attackers to upload arbitrary files by supplying a target filename in the X-FILENAME request header with no authentication or file type validation required. Attackers can upload a malicious ASPX file directly to the web-accessible uploads directory, where it is immediat… |
| CVE-2026-129171 | 9.8 | NginxPulse 1.5.0 before 1.6.26 contains an unauthenticated sql injection vulnerability that allows remote attackers to append SQL via the id and locationType parameters of /api/stats/:type. Attackers can close the quoted table-name identifier and use error-based output to read database contents, and read or write server files via PostgreSQL superuser functions. |
| CVE-2026-63079 | 9.8 | RBH Access Technologies Integra32 Security Management System 5.1.11 R5.0 contains an unauthenticated deserialization vulnerability in its deprecated .NET Remoting service, exposed on TCP port 2001 via the AxcvcLt.dll library using BinaryServerFormatterSinkProvider at TypeFilterLevel.Full without requiring authentication. A remote unauthenticated attacker can send a malicious serialized gadget payload (such as a ysos… |
| CVE-2026-129110 | 9.8 | sysPass 3.0.1 through 3.2.11 contains an authentication bypass vulnerability that allows unauthenticated attackers to reinstall an already-installed instance by POSTing to the install/install handler, which never checks isInstalled(). Attackers can overwrite config.xml, point the application at an attacker-controlled database, create an administrator account, and plant serialized PublicLink gadget chains triggered v… |
| CVE-2026-109445 | 9.8 | PLANET GS-5220-8P2T2S (hardware version 3.0) firmware versions before 3.2412b261008 contains a stack-based buffer overflow vulnerability that allows unauthenticated attackers to corrupt stack memory by submitting an oversized webstax_auth HTTP Cookie value that is copied into a fixed-size stack buffer without length validation. Attackers can send a crafted unauthenticated HTTP request with an oversized cookie to ove… |
| CVE-2026-129165 | 9.1 | Tactical RMM 0.17.0 through 1.6.1 contains an arbitrary file read in the /reporting/templates/preview/ endpoint because WeasyPrint resolves file:// links in user-supplied template_md and embeds the files in the returned PDF. Users with report management permission can read the Django SECRET_KEY, reused as the NATS password, and publish runscript commands to every managed agent. |
New advisories from CERTs and vendors
CISA
- VA-26-317-01: Jet Admin Cloud Platform Prompt Injection
- VA-26-310-01: Catalis WebPro SQLi
Microsoft MSRC
- CVE-2026-95922 Windows Graphics Kernel Elevation of Privilege Vulnerability
- Chromium CVE-2026-126885: Use after free
- Chromium CVE-2026-126889: Off-by-one error
- Chromium CVE-2026-126880: Type confusion
- Chromium CVE-2026-126908: Type confusion
- Chromium CVE-2026-126918: Use after free
- CVE-2026-88217 Windows Graphics Kernel Information Disclosure Vulnerability
- CVE-2026-95932 Windows Graphics Kernel Elevation of Privilege Vulnerability
- CVE-2026-96144 Windows Graphics Kernel Information Disclosure Vulnerability
- CVE-2026-96150 Microsoft Windows Codecs Library Information Disclosure Vulnerability
- CVE-2026-96126 Windows Graphics Kernel Elevation of Privilege Vulnerability
- CVE-2026-95953 Windows Graphics Kernel Elevation of Privilege Vulnerability
- CVE-2026-95942 Windows Graphics Kernel Elevation of Privilege Vulnerability
- Chromium CVE-2026-126898: Uninitialized resource
- CVE-2026-95948 Windows Graphics Kernel Elevation of Privilege Vulnerability
- Chromium CVE-2026-126903: Improper state validation
- Chromium CVE-2026-126913: Out of bounds read
- Chromium CVE-2026-126922: Out of bounds read
- Chromium CVE-2026-126878: Information leak
- Chromium CVE-2026-126883: Use after free
- Chromium CVE-2026-125342: Uninitialized resource
- Chromium CVE-2026-126887: Use after free
- Chromium CVE-2026-125344: Type confusion
- Chromium CVE-2026-126892: Use after free
- Chromium CVE-2026-125348: Out of bounds write
Plus 34 more from Microsoft MSRC; see the source link below.
Canadian Centre for Cyber Security
- n8n security advisory (AV26-1160)
- Apache security advisory (AV26-1159)
- [Control systems] Johnson Controls security advisory (AV26-1158)
Debian
- DSA-6628-1 linux – security update
- DSA-6627-1 libspreadsheet-xlsx-perl – security update
- DSA-6626-1 c-ares – security update
CERT-FR
- Multiples vulnérabilités dans le noyau Linux de SUSE (13 novembre 2026)
- Multiples vulnérabilités dans PostgreSQL (13 novembre 2026)
- Multiples vulnérabilités dans les produits IBM (13 novembre 2026)
- Multiples vulnérabilités dans le noyau Linux de Red Hat (13 novembre 2026)
- Multiples vulnérabilités dans le noyau Linux d'Ubuntu (13 novembre 2026)
- Vulnérabilité dans Opera Neon (13 novembre 2026)
- Multiples vulnérabilités dans VMware Tanzu Greenplum (13 novembre 2026)
- Multiples vulnérabilités dans les produits Citrix (13 novembre 2026)
- Multiples vulnérabilités dans le noyau Linux de Debian (13 novembre 2026)
- Vulnérabilité dans les produits Axis (13 novembre 2026)
- Multiples vulnérabilités dans Node.js (13 novembre 2026)
- Multiples vulnérabilités dans les produits Check Point (13 novembre 2026)
- Multiples vulnérabilités dans Apple HomeView Software (13 novembre 2026)
- Multiples vulnérabilités dans Progress Telerik (13 novembre 2026)