A vulnerability in code-projects Simple Content Management System 1.0 allows remote attackers to bypass authorization by manipulating the 'addnews' argument in the /web/admin/welcome.php file. This flaw affects the Admin Interface component and can lead to unauthorized actions. The vulnerability has a high severity score and public exploit code is available.
DevilutionX versions 1.4.0 through 1.5.5 contain an out-of-bounds read vulnerability in the bundled libmpq library. This flaw occurs in the libmpq__file_number_from_hash function, allowing attackers to read heap memory by supplying unchecked block_table_index values. Exploitation requires placing a crafted .mpq archive, such as a mod, in the game's data path, which can cause the game to read beyond intended memory bounds and crash.
CVE-2026-116838 is a Cross-Site Request Forgery (CSRF) vulnerability affecting airMAX M devices. An attacker can lure an authenticated user to a malicious page to exploit this flaw and execute command injection on the device. The vulnerability has a high severity score of 8.8, indicating significant potential impact on confidentiality, integrity, and availability.
CVE-2026-116839 is a Cross-Site Request Forgery (CSRF) vulnerability in airMAX M devices that allows a malicious actor to trick an authenticated user into visiting a malicious page, leading to unauthorized changes and potential Denial of Service (DoS) attacks on the device.
DevilutionX versions 1.4.0 through 1.5.5 contain a heap buffer overflow vulnerability in the bundled libmpq library. The flaw occurs in the libmpq__archive_dup routine when opening specially crafted MPQ archives with a block table count exceeding the hash table count. This causes a heap overflow via memcpy during game startup, leading to a crash.
A medium-severity vulnerability (CVE-2026-116605) exists in SourceCodester Online Food Ordering System 1.0 in the order.php file. The issue involves manipulation of the price or title arguments, leading to client-side enforcement of what should be server-side security controls. This vulnerability can be exploited remotely. Public exploit code is available.
A security vulnerability exists in DAMO Academy VideoLLaMA2 versions up to 1.1 in the load_pretrained_model function. The issue involves improper validation of an integrity check value due to manipulation of the _name_or_path argument. Remote exploitation is possible, and public exploit details have been disclosed. The project has been informed but has not yet responded or issued a fix.
An out-of-bounds read vulnerability exists in llama.cpp versions before commit b3701 in the functions llama_decode_internal and llama_encode_internal. This flaw allows remote unauthenticated attackers to read memory or crash the process by sending crafted integer-array prompts with token IDs outside the valid range to the llama-server /completion endpoint.
CVE-2026-116836 is a high-severity Stored Cross-Site Scripting (XSS) vulnerability affecting airMAX M devices. An attacker with access to the adjacent network could exploit this vulnerability under certain conditions to escalate privileges on the device. The vulnerability allows for execution of malicious scripts that can compromise confidentiality, integrity, and availability of the affected device.
An integer overflow vulnerability exists in llama.cpp versions from b5854 up to but not including b11275 in the function gguf_init_from_reader. This flaw allows crafted GGUF files with tensor sizes padded near SIZE_MAX to bypass size checks, resulting in undersized data blobs and out-of-bounds reads. The vulnerability has a medium severity rating with a CVSS score of 6.1.
A heap out-of-bounds read vulnerability exists in llama.cpp before commit b5649 within the function llama_vocab::impl::print_info(). This flaw allows attackers to crash the model loading process by supplying a specially crafted GGUF model with an undersized tokenizer.ggml.tokens array, causing out-of-bounds access and application crash.
A heap out-of-bounds write vulnerability exists in llama.cpp versions from b5899 up to but not including b10261 in the function llm_tokenizer_plamo2::build. This flaw allows attackers to corrupt heap memory by supplying crafted GGUF models containing BYTE-typed token text with negative parsed values. The vulnerability can cause application crashes and may lead to potential code execution during model loading.
An integer overflow vulnerability exists in llama.cpp versions from b10398 up to but not including b11301 in the function gguf_init_from_reader. This flaw allows attackers to bypass tensor element-count validation by providing shapes whose product wraps to zero, enabling the creation of GGUF files with excessively large tensor extents. This overflow leads to incorrect buffer sizing and out-of-bounds memory access.
Sleipnir Mobile for Android by Fenrir Inc. has a vulnerability involving user interface misrepresentation of critical information. This flaw could cause the application to display misleading or incorrect information to users.
Apple released security patches on October 26, 2026, addressing 304 vulnerabilities across multiple products including iOS, iPadOS, macOS, tvOS, watchOS, and Safari. The update includes fixes for several critical issues such as a previously exploited CoreGraphics vulnerability, unauthorized camera access by malicious apps, and local attacks on the Keychain. Other vulnerabilities allow privilege escalation, denial-of-service, memory corruption, arbitrary code execution, and bypass of security controls like Gatekeeper and Privacy preferences. The patches cover a wide range of components including Spotlight, Kernel, Mail, AppleAVD, Model I/O, and Screen Sharing Server. No new vulnerabilities are reported as already exploited in the wild in this update. The affected versions include recent releases of iOS, iPadOS, macOS Golden Gate, Tahoe, Sequoia, tvOS, watchOS, visionOS, and Safari.
CVE-2026-88781 is a vulnerability in certain ASUS motherboard firmware involving untrusted pointer dereference. A user with kernel-level privileges can supply an arbitrary memory address via an I/O command, potentially leading to system information tampering or a system crash. The vulnerability has a medium severity score of 6.8. No specific affected versions or patch information are provided in the available data.
A flaw has been found in Saruf-Ratul HR-Payroll-Management-System e7cd81477001afdee95b843fd4137894d9418c9f/3fd6f45ead9f8197510c0910f759e06ee67251e5. Affected by this vulnerability is an unknown functionality of the file chat.php. Executing a manipulation of the argument ID can lead to cross site scripting. It is possible to launch the attack remotely. The exploit has been published and may be used. This product takes the approach of rolling releases to provide continious delivery. Therefore, version details for affected and updated releases are not available. The project was informed of the problem early through an issue report but has not responded yet.
A cybersecurity incident at the University of New Mexico Health System forced the diversion of patients from its main hospital and the cancellation of appointments at over 30 clinics. The incident disrupted emergency services, including the state's only Level 1 trauma center, and led to a phased resumption of operations. The nature and extent of the cybersecurity issue remain unclear, and the matter is under active law enforcement investigation.
CVE-2026-111497, known as Brotli2Shell, is a critical out-of-bounds write vulnerability in Google's Brotli C decoder library. It affects many widely used software projects that decompress Brotli data, including Node.js, .NET, Bun, Envoy Proxy, Istio, Python HTTP clients, FFmpeg, Apache Arrow, ClickHouse, and PHP for Windows. The flaw can be triggered by decompressing crafted Brotli data, potentially leading to process crashes, memory leaks, or remote code execution. The vulnerability has a high CVSSv4.0 score of 9.2 assigned by Google. Patches have been released for the Brotli library and major runtimes, but some projects had not shipped fixed releases as of late October 2026. Applications bundling their own Brotli decoder require individual updates.