The National Vulnerability Database (NVD) published 8 CVEs rated Critical under CVSS v3 in the 26 hours to this report. Descriptions below are quoted directly from NVD. Scores are NVD or CNA base scores; always confirm against the vendor advisory before prioritizing.
Critical CVEs (NVD)
| CVE | CVSS | Description (NVD) |
|---|---|---|
| CVE-2026-97785 | 10 | Improper authentication in AAD App Proxy allows an unauthorized attacker to elevate privileges over a network. |
| CVE-2026-83938 | 10 | Missing authentication for critical function in Azure Kubernetes Configuration Service allows an unauthorized attacker to elevate privileges over a network. |
| CVE-2026-110063 | 10 | Improper link resolution before file access ('link following') in VM Inspector for Azure Virtual Machines allows an unauthorized attacker to elevate privileges over a network. |
| CVE-2026-115384 | 9.9 | Wasmtime 39.0.0 before 48.0.4 and 49.0.0 before 49.0.2 contains a stack buffer overflow vulnerability that allows malicious guests to write ~16KB to the native stack via unvalidated async callback result types. Attackers can supply components with mistyped component-model-async callback functions to overwrite return addresses, crashing the host or escaping the sandbox. |
| CVE-2026-115375 | 9.9 | Incus 7.0.0 before 7.0.2 and 7.1.0 before 7.5.0 contains a path traversal vulnerability that allows clients able to create instances to write files on the host. The flaw stems from unvalidated dependent custom volume names in instance backup index.yaml files. Attackers can import a crafted instance backup with ../ sequences in dependent volume names to create root-owned directories with controlled content, leading t… |
| CVE-2026-115377 | 9.9 | Incus before 6.0.7, 6.1.0 before 7.0.2, and 7.1.0 before 7.5.0 contains an arbitrary file write vulnerability that allows malicious migration sources to write host files by planting symlinks in transferred volumes. Attackers can craft rsync or btrfs receive streams with a symlink such as rootfs pointing to the host root, writing files as root for full host compromise. |
| CVE-2022-51026 | 9.8 | Bytebase 0.12.0 before 1.0.1 contains an authentication bypass vulnerability that allows unauthenticated attackers to log in as any user. The flaw stems from trusting client-supplied GitLab provider configuration in the POST /api/auth/login/GITLAB_SELF_HOST endpoint. Attackers can set instanceUrl to a server they control that returns an active user with a chosen email. Bytebase then issues session tokens for that pr… |
| CVE-2026-105014 | 9.1 | Improper neutralization of special elements used in a command ('command injection') in Azure Pipelines allows an unauthorized attacker to execute code over a network. |
New advisories from CERTs and vendors
Debian
- DSA-6579-1 roundcube – security update
- DSA-6580-1 erlang – security update
- DSA-6578-1 aide – security update
- DSA-6577-1 chromium – security update
- DSA-6534-3 webkit2gtk – regression update
Canonical (Ubuntu)
- USN-8954-1: zlib vulnerability
- USN-8953-1: OpenVPN vulnerability
- USN-8952-1: Tornado vulnerabilities
Canadian Centre for Cyber Security
- Splunk security advisory (AV26-1077)
- Atlassian security advisory (AV26-1076)
- Roundcube security advisory (AV26-1075)
- GitLab security advisory (AV26-1074)
CISA
Microsoft MSRC
- CVE-2026-83938 Azure Kubernetes Configuration Service Elevation of Privilege Vulnerability
- CVE-2026-96185 Microsoft Exchange Online Remote Code Execution Vulnerability
- CVE-2026-110063 VM Inspector for Azure Virtual Machines Elevation of Privilege Vulnerability
- CVE-2026-97785 AAD App Proxy Elevation of Privilege Vulnerability
- CVE-2026-105014 Azure Pipelines Remote Code Execution Vulnerability
- CVE-2026-108456 Azure AI Foundry Elevation of Privilege Vulnerability
- CVE-2026-96251 Microsoft PowerShell Remote Code Execution Vulnerability
- CVE-2026-96303 Microsoft PowerShell Security Feature Bypass Vulnerability
CERT-FR
- Multiples vulnérabilités dans GitLab (22 octobre 2026)
- Multiples vulnérabilités dans Node (22 octobre 2026)
- Multiples vulnérabilités dans les produits Splunk (22 octobre 2026)
- Multiples vulnérabilités dans les produits Cisco (22 octobre 2026)
- Vulnérabilité dans les produits Mozilla (22 octobre 2026)
- Multiples vulnérabilités dans ISC BIND (22 octobre 2026)
- Multiples vulnérabilités dans les produits SolarWinds (22 octobre 2026)
- Multiples vulnérabilités dans Oracle Database Server (21 octobre 2026)
- Multiples vulnérabilités dans Oracle MySQL (21 octobre 2026)
- Multiples vulnérabilités dans Oracle PeopleSoft (21 octobre 2026)
- Multiples vulnérabilités dans Oracle Java SE (21 octobre 2026)
- Multiples vulnérabilités dans Oracle Systems (21 octobre 2026)
- Multiples vulnérabilités dans Oracle Virtualization (21 octobre 2026)