All Critical High Medium Low
CVE Severity CVSS EPSS First Seen Flags Description
CVE-2026-34658 medium 4.8 0.0027 2026-10-29 Adobe Commerce versions 2.4.9-beta1, 2.4.8-p4, 2.4.7-p9, 2.4.6-p14, 2.4.5-p16, 2.4.4-p17 a
CVE-2026-34665 high 7.5 0.0079 2026-10-29 CAI Content Credentials versions c2pa-web@0.7.0, c2pa-v0.78.2 and earlier are affected by
CVE-2026-34666 medium 6.2 0.0026 2026-10-29 CAI Content Credentials versions c2pa-web@0.7.0, c2pa-v0.78.2 and earlier are affected by
CVE-2026-34667 medium 6.2 0.0025 2026-10-29 CAI Content Credentials versions c2pa-web@0.7.0, c2pa-v0.78.2 and earlier are affected by
CVE-2026-34668 medium 6.2 0.0019 2026-10-29 CAI Content Credentials versions c2pa-web@0.7.0, c2pa-v0.78.2 and earlier are affected by
CVE-2026-34669 medium 6.2 0.0019 2026-10-29 CAI Content Credentials versions c2pa-web@0.7.0, c2pa-v0.78.2 and earlier are affected by
CVE-2026-34670 medium 6.2 0.0026 2026-10-29 CAI Content Credentials versions c2pa-web@0.7.0, c2pa-v0.78.2 and earlier are affected by
CVE-2026-34671 medium 6.2 0.0019 2026-10-29 CAI Content Credentials versions c2pa-web@0.7.0, c2pa-v0.78.2 and earlier are affected by
CVE-2026-34672 medium 6.2 0.0026 2026-10-29 CAI Content Credentials versions c2pa-web@0.7.0, c2pa-v0.78.2 and earlier are affected by
CVE-2026-34673 medium 6.2 0.0020 2026-10-29 CAI Content Credentials versions c2pa-web@0.7.0, c2pa-v0.78.2 and earlier are affected by
CVE-2026-34677 medium 6.2 0.0019 2026-10-29 CAI Content Credentials versions c2pa-web@0.7.0, c2pa-v0.78.2 and earlier are affected by
CVE-2026-34678 medium 6.2 0.0025 2026-10-29 CAI Content Credentials versions c2pa-web@0.7.0, c2pa-v0.78.2 and earlier are affected by
CVE-2026-34679 medium 6.2 0.0019 2026-10-29 CAI Content Credentials versions c2pa-web@0.7.0, c2pa-v0.78.2 and earlier are affected by
CVE-2026-34680 medium 6.2 0.0026 2026-10-29 CAI Content Credentials versions c2pa-web@0.7.0, c2pa-v0.78.2 and earlier are affected by
CVE-2026-34685 low 3.4 0.0037 2026-10-29 Adobe Commerce versions 2.4.9-beta1, 2.4.8-p4, 2.4.7-p9, 2.4.6-p14, 2.4.5-p16, 2.4.4-p17 a
CVE-2026-34686 high 8.7 0.0040 2026-10-29 Adobe Commerce versions 2.4.9-beta1, 2.4.8-p4, 2.4.7-p9, 2.4.6-p14, 2.4.5-p16, 2.4.4-p17 a
CVE-2026-34688 medium 6.2 0.0026 2026-10-29 CAI Content Credentials versions c2pa-web@0.7.0, c2pa-v0.78.2 and earlier are affected by
CVE-2026-34690 high 7.8 0.0051 2026-10-29 After Effects is affected by a Stack-based Buffer Overflow vulnerability that could result
CVE-2026-42191 high 7.8 0.0011 2026-10-29 OpenTelemetry.Exporter.OpenTelemetryProtocol is the OTLP (OpenTelemetry Protocol) exporter
CVE-2026-42338 medium 5.3 0.0047 2026-10-29 ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript
CVE-2026-42355 medium 5.5 0.0015 2026-10-29 NanaZip is an open source file archive. From 5.0.1252.0 to before 6.0.1698.0, an uncontrol
CVE-2026-42442 medium 5.5 0.0011 2026-10-29 NanaZip is an open source file archive. From 5.0.1252.0 to before 6.0.1698.0, a null-point
CVE-2026-42443 medium 5.5 0.0015 2026-10-29 NanaZip is an open source file archive. From 5.0.1252.0 to before 6.0.1698.0, an integer d
CVE-2026-42444 medium 5.5 0.0011 2026-10-29 NanaZip is an open source file archive. From 5.0.1252.0 to before 6.0.1698.0, a denial-of-
CVE-2026-42445 medium 5.5 0.0011 2026-10-29 NanaZip is an open source file archive. From 5.0.1252.0 to before 6.0.1698.0, an uncontrol
CVE-2026-42446 high 7.1 0.0012 2026-10-29 NanaZip is an open source file archive. From 5.0.1252.0 to before 6.0.1698.0, a stack-base
CVE-2026-42889 critical 9.1 0.0037 2026-10-29 Relay adds real-time collaboration to Obsidian. Relay Server versions 0.9.0 through 0.9.6
CVE-2026-44215 high 7.1 0.0028 2026-10-29 NanaZip is an open source file archive. From 5.0.1252.0 to before 6.0.1698.0, a one-byte h
CVE-2026-44217 medium 6.6 0.0048 2026-10-29 sse-channel is an SSE-implementation which can be used to any node.js http request/respons
CVE-2026-44218 low 3.0 0.0012 2026-10-29 ciguard is a static security auditor for CI/CD pipelines. From 0.1.0 to 0.8.1, the publish
CVE-2026-44219 low 3.7 0.0030 2026-10-29 ciguard is a static security auditor for CI/CD pipelines. From 0.6.0 to 0.8.1, both SCA HT
CVE-2026-44220 low 3.2 0.0021 2026-10-29 ciguard is a static security auditor for CI/CD pipelines. From 0.8.0 to 0.8.1 , the discov
CVE-2026-44221 critical 9.0 0.0034 2026-10-29 ArcadeDB is a Multi-Model DBMS. Starting in version 21.10.1 and prior to version 26.4.2, a
CVE-2026-44225 critical 9.3 0.0154 2026-10-29 Pulpy is a lightweight, cross-platform desktop application packager for web apps. Prior to
CVE-2026-44852 high 7.2 0.0044 2026-10-29 An authenticated remote code execution vulnerability exists in the AOS-8 and AOS-10 web-ba
CVE-2026-44853 high 7.2 0.0101 2026-10-29 Command injection vulnerabilities exist in the web-based management interface of AOS-8 and
CVE-2026-44854 high 7.2 0.0101 2026-10-29 Command injection vulnerabilities exist in the web-based management interface of AOS-8 and
CVE-2026-44855 high 7.2 0.0035 2026-10-29 Stack-based buffer overflow vulnerabilities exist in several underlying management service
CVE-2026-44856 high 7.2 0.0035 2026-10-29 Stack-based buffer overflow vulnerabilities exist in several underlying management service
CVE-2026-44857 high 7.2 0.0035 2026-10-29 Stack-based buffer overflow vulnerabilities exist in several underlying management service
CVE-2026-44858 high 7.2 0.0035 2026-10-29 Stack-based buffer overflow vulnerabilities exist in several underlying management service
CVE-2026-44859 high 7.2 0.0036 2026-10-29 Stack-based buffer overflow vulnerabilities exist in several underlying management service
CVE-2026-44860 high 7.2 0.0032 2026-10-29 SQL injection vulnerabilities exist in several underlying service components accessible th
CVE-2026-44861 high 7.2 0.0032 2026-10-29 SQL injection vulnerabilities exist in several underlying service components accessible th
CVE-2026-44862 high 7.2 0.0032 2026-10-29 SQL injection vulnerabilities exist in several underlying service components accessible th
CVE-2026-44863 high 7.2 0.0032 2026-10-29 SQL injection vulnerabilities exist in several underlying service components accessible th
CVE-2026-44864 high 7.2 0.0032 2026-10-29 SQL injection vulnerabilities exist in several underlying service components accessible th
CVE-2026-44865 high 7.2 0.0092 2026-10-29 Command injection vulnerabilities exist in the web-based management interface of AOS-8 and
CVE-2026-44866 high 8.8 0.0090 2026-10-29 Command injection vulnerabilities exist in the web-based management interface of AOS-8 and
CVE-2026-44867 high 8.8 0.0090 2026-10-29 Command injection vulnerabilities exist in the web-based management interface of AOS-8 and