The National Vulnerability Database (NVD) published 19 CVEs rated Critical under CVSS v3 in the 26 hours to this report. Descriptions below are quoted directly from NVD. Scores are NVD or CNA base scores; always confirm against the vendor advisory before prioritizing.
Critical CVEs (NVD)
| CVE | CVSS | Description (NVD) |
|---|---|---|
| CVE-2026-105781 | 10 | Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary SQL commands, potentially gaining elevated access or control over the victim's account or session. Exploitation of this issue… |
| CVE-2026-116508 | 10 | A security flaw has been discovered in TOTOLINK A950RG 4.1.2cu.5268_B20221104. Affected by this issue is the function sub_402340 of the file infostat.cgi of the component Device-Information CGI. Performing a manipulation of the argument CONTENT_LENGTH results in stack-based buffer overflow. Remote exploitation of the attack is possible. The exploit has been released to the public and may be used for attacks. |
| CVE-2026-105489 | 9.9 | Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction. Scope is changed. |
| CVE-2026-105780 | 9.9 | Adobe Campaign Classic (ACC) is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction. Scope is changed. |
| CVE-2026-104351 | 9.9 | Adobe Campaign Classic (ACC) is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction. Scope is changed. |
| CVE-2026-104353 | 9.9 | Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction. Scope is changed. |
| CVE-2026-116506 | 9.9 | A vulnerability was determined in TOTOLINK A950RG 4.1.2cu.5268_B20221104. Affected is the function apmib_set of the file firewall.so. This manipulation causes command injection. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized. |
| CVE-2026-116504 | 9.9 | A vulnerability has been found in TOTOLINK A950RG 4.1.2cu.5268_B20221104. This affects the function setCloudUpgradeFW of the file lib/cste_modules/upgrade.so of the component Cloud Upgrade. The manipulation of the argument FileName leads to command injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. |
| CVE-2026-117564 | 9.8 | nest-admin before 1.0.1 contains an authentication bypass vulnerability that allows unauthenticated attackers to forge administrator tokens by using a hardcoded JWT_SECRET committed in .env.production. Attackers can sign tokens with the known secret that JwtStrategy and RbacGuard trust, impersonating any user ID or claiming the admin role for full administrative access. |
| CVE-2026-117532 | 9.8 | REDAXO core from 5.3.0 before 5.21.4 contains an authentication bypass vulnerability in the structure/history plugin that allows unauthenticated attackers to forge temporary login tokens. Attackers can force the session-tied secret into a predictable state and forge tokens for accounts like admin, gaining backend access and code execution outside live mode. |
| CVE-2026-10757 | 9.8 | There is a SQL injection vulnerability in Esri ArcGIS Server versions 12.1 and earlier on Windows and Linux that may allow a remote attacker with privileges to access the service (which could, depending on the service being configured in a non-default access configuration “public”, include an anonymous attacker) to issue database specific functions that should not be allowed. A patch is provided for ArcGIS Server so… |
| CVE-2026-112346 | 9.8 | OpenHands Software Agent SDK before 1.52.0 contains an unauthenticated remote code execution vulnerability where the DockerWorkspace and Apptainer workspace launchers bind the sandbox agent server to all network interfaces (0.0.0.0) with an empty session_api_keys list, disabling authentication by default. Attackers who can reach the published container port can send unauthenticated HTTP and WebSocket requests to exe… |
| CVE-2026-116485 | 9.8 | danmu_api before 1.21.7 contains an authentication bypass vulnerability that allows unauthenticated attackers to modify server environment configuration when the default TOKEN is used and ADMIN_TOKEN is unset. Attackers can send POST requests to /api/env/set, /api/env/add, or /api/env/del to set ADMIN_TOKEN, lock out operators, redirect OTHER_SERVER or PROXY_URL for SSRF, and trigger redeployment. |
| CVE-2026-48360 | 9.6 | Adobe Connect is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user interaction in that a victim must visit a maliciously crafted URL or interact with a compromised web page. Scope is chan… |
| CVE-2026-104350 | 9.3 | Adobe Campaign Classic (ACC) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this vulnerability to inject malicious scripts into a web page, potentially gaining elevated access or control over the victim's account or session. Exploitation of this issue requires user interaction in that a victim must visit a maliciously crafted URL or interact with a compromised web page… |
| CVE-2026-105779 | 9.1 | Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain unauthorized read and limited write access. Exploitation of this issue does not require user interaction. Scope is changed. |
| CVE-2026-104354 | 9.1 | Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that could result in arbitrary code execution in the context of the current user. An attacker with high privileges could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction. Scope is changed. |
| CVE-2026-116505 | 9.1 | A vulnerability was found in TOTOLINK A950RG 4.1.2cu.5268_B20221104. This impacts the function getDeviceInfo of the file /var/lib/misc/udhcpd.leases of the component device-information Handler. The manipulation of the argument MAC address results in command injection. The attack can be launched remotely. The exploit has been made public and could be used. |
| CVE-2026-116214 | 9.1 | MacCMS v10 before 2026.1000.4054 contains an authentication bypass vulnerability that allows unauthenticated attackers to reset any member's password because check_msg() never compares msg_to. Attackers can request a recovery code to their own mailbox via user/findpass_msg, then submit it to user/findpass_reset with the victim's email or phone to take over the account. |
New advisories from CERTs and vendors
Canonical (Ubuntu)
Canadian Centre for Cyber Security
- [Control systems] Hitachi security advisory (AV26-1091)
- [Control systems] Johnson Controls security advisory (AV26-1090)
- [Control Systems] Moxa security advisory (AV26-1089)
- Esri security advisory (AV26-1088)
- HashiCorp security advisory (AV26-1087)
- Craft CMS security advisory (AV26-1086)
- Google security advisory (AV26-1085)
- Red Hat security advisory (AV26-1084)
Microsoft MSRC
- CVE-2026-69473 Windows Kernel Elevation of Privilege Vulnerability
- CVE-2026-69284 Windows DCOM Server Elevation of Privilege Vulnerability
- CVE-2026-70277 Windows Fast FAT File System Driver Information Disclosure Vulnerability
- CVE-2026-70161 .NET Elevation of Privilege Vulnerability
- CVE-2026-69926 Desktop Window Manager Elevation of Privilege Vulnerability
- CVE-2026-96311 Windows Network List Service Tampering Vulnerability
- CVE-2026-96234 .NET Information Disclosure Vulnerability
- CVE-2026-69923 Windows AI Elevation of Privilege Vulnerability
- CVE-2026-70338 Microsoft PowerShell Security Feature Bypass Vulnerability
- CVE-2026-70054 Windows NetBIOS Elevation of Privilege Vulnerability
- CVE-2026-83519 Windows Error Reporting Remote Code Execution Vulnerability
CERT-FR
- Multiples vulnérabilités dans GLPI (27 octobre 2026)
- Multiples vulnérabilités dans les produits Moxa (27 octobre 2026)
- Multiples vulnérabilités dans les produits Nextcloud (27 octobre 2026)
- Multiples vulnérabilités dans Citrix NetScaler ADC et Gateway (27 octobre 2026)
- Vulnérabilité dans les produits Palo Alto Networks (27 octobre 2026)
- Multiples vulnérabilités dans les produits Apple (27 octobre 2026)
- Multiples vulnérabilités dans Tenable Network Monitor (27 octobre 2026)
- Vulnérabilité dans Mattermost Server (27 octobre 2026)
- Multiples vulnérabilités dans Microsoft Edge (27 octobre 2026)
- Multiples vulnérabilités dans Mozilla Firefox (27 octobre 2026)
- Vulnérabilité dans Citrix XenServer (26 octobre 2026)
- Multiples vulnérabilités dans les produits Tenable (26 octobre 2026)
- Multiples vulnérabilités dans les produits VMware (26 octobre 2026)
- Multiples vulnérabilités dans Microsoft .Net (26 octobre 2026)
- Vulnérabilité dans Mattermost Server (26 octobre 2026)
- Vulnérabilité dans les produits Microsoft (26 octobre 2026)
- Multiples vulnérabilités dans les produits MongoDB (26 octobre 2026)
- Bulletin d'actualité CERTFR-2026-ACT-045 (26 octobre 2026)
- Multiples vulnérabilités dans CPython (26 octobre 2026)