The Electronic delivery item Inspection Support System by Japan's Ministry of Land, Infrastructure, Transport and Tourism has an improper file access permission vulnerability. This flaw allows tampering with files in the application's installation folder, potentially leading to arbitrary code execution. The vulnerability is rated high severity with a CVSS score of 7.8. No patch or remediation information is currently provided.
CVE-2026-116118 is an OS command injection vulnerability in the Sed Command Filter component of Z.ai Zcode versions 3.14.0 through 3.15.1. This flaw allows remote attackers to execute arbitrary operating system commands. The vulnerability has been publicly disclosed, but no known exploits are currently observed in the wild. The CVSS 4.0 base score is 5.3, indicating a medium severity level.
CVE-2026-116117 is a path traversal vulnerability in the halo-dev halo product affecting versions 2.27.0-beta.0 and 2.27.0-beta.1. The flaw exists in the DefaultViewNameResolver component's resolveViewNameOrDefault function, where manipulation of the template argument can lead to unauthorized file path access. The vulnerability can be exploited remotely without authentication. Exploit code has been published publicly. The vendor has not responded to the disclosure and no patch or official fix is currently available.
CVE-2026-116116 is a critical vulnerability in the Yoosee GM8135S Camera version 21.00.01.36 involving improper verification of cryptographic signatures in the Secure Boot component. Exploitation requires local access and high privileges. Public exploit code is available, but no vendor response or patch has been provided.
Multiple vulnerabilities have been identified in FUJI ELECTRIC V-SFT as of October 2026. Specific details about the nature of these vulnerabilities, affected versions, and potential impacts have not been disclosed. No information about available patches or exploits in the wild is currently provided.
The URL https://pentest-tools.com/ was observed twice in attacker activity on 2026-10-26 by OffSeq Mirage honeypot sensors. It was used in attacker payloads involving the MITRE ATT&CK technique T1105 (Ingress Tool Transfer), indicating it may serve as a tool download, callback, or exploitation target. The attacker infrastructure was located in Germany. There is no evidence of active exploitation or known threat actors associated with this URL at this time.
CVE-2026-116115 is a low-severity vulnerability in the Yoosee GM8135S Camera version 21.00.01.36. It involves improper initialization related to the WiFi configuration file wpa_supplicantX.conf. The vulnerability can only be exploited from within the local network and requires high attack complexity. Public exploit details exist, but no known exploitation in the wild has been reported. The vendor has not provided a response or patch for this issue.
CVE-2026-116114 is a medium severity vulnerability in the Yoosee GM8135S Camera version 21.00.01.36. It involves cleartext transmission of sensitive information via the Live UDP H.264 Video Stream Handler component. The vulnerability can be exploited remotely but requires high attack complexity and no user interaction. Public exploit code is available, but no vendor response or patch has been provided.
This entry is a daily update from the SANS Internet Storm Center (ISC) titled 'ISC Stormcast For Monday, October 26th, 2026.' It provides general information about the ISC's activities and resources but does not contain any specific security threat or vulnerability details.
CVE-2026-116113 is a medium severity vulnerability in GouGuOA versions 6.1.0, 6.1.1, and 6.1.2. It involves an unrestricted file upload flaw in the chunkUpload function of app/disk/controller/Api.php, where manipulation of the file_extension argument allows remote attackers to upload arbitrary files. Public exploit code has been released, and the vendor has not responded to disclosure attempts.
CVE-2026-116112 is a medium severity SQL injection vulnerability in the HashenUdara edoc-doctor-appointment-system. The flaw exists in an unknown function within the file admin/add-new.php, where manipulation of the 'spec' argument allows remote attackers to perform SQL injection. The product uses a rolling release model, so no specific affected or fixed versions are available. The vendor has not responded to disclosure attempts, and no patch or remediation guidance is currently available. Public exploit code exists but no confirmed exploitation in the wild has been reported.
The Electronic delivery item Inspection Support System by Japan's Ministry of Land, Infrastructure, Transport and Tourism has an improper file access permission vulnerability. This flaw relates to incorrect permissions set on files, potentially allowing unauthorized access. No specific affected versions or patch information is provided.
CVE-2026-116111 is a medium severity vulnerability in 2K Games Civilization V version 1.0.3.144. It involves a type confusion flaw in the Lua Sandbox component's loadstring function. This vulnerability can be exploited remotely and requires user interaction. The exploit has been publicly disclosed, but no vendor response or patch is currently available.
CVE-2026-116110 is a medium severity vulnerability in GiantappMan LiveWallPaper version 2.6.8.0 for Windows. It involves missing authentication in the SignalR Hub component when processing the /LiveWallpaper/UploadFile endpoint. This flaw allows remote attackers to manipulate the component without authentication. Public exploit code exists. A patch identified by commit b62f878899adbfc2968e3345442f3a3df91b774d is available to address the issue.
CVE-2026-116109 is an OS command injection vulnerability in continuedev Continue version 2.0.0. It affects the MCPManagerSingleton.setConnections function within the MCP Server Transport component. The vulnerability allows remote attackers to execute arbitrary OS commands. Public exploit code has been disclosed. The vendor has not responded or provided a fix.
CVE-2026-116108 is a medium severity vulnerability in openbq-org OpenBB versions 4.7.0, 4.7.1, 4.7.2, and 5.0.0. It involves improper access controls in the Local API Server component, specifically in the file openbb_platform/core/openbb_core/app/model/api_settings.py. The flaw allows remote attackers to exploit the access control weakness without privileges or user interaction. Exploit code has been published, but no vendor response or patch is currently available.
CVE-2026-116107 is a medium severity vulnerability in the Datafeedr Product Sets Plugin for WordPress, affecting versions 1.3.0 through 1.3.19. It involves missing authorization in the AJAX handler function dfrps_ajax_delete_saved_search, allowing remote attackers to perform unauthorized actions. Public exploit code is available. Upgrading to version 1.3.25 resolves the issue.
A security vulnerability has been detected in HeyCyan App 1.0.103 on Android. Affected by this vulnerability is an unknown functionality of the component FileProvider. The manipulation leads to improper access controls. The attack may be initiated remotely. The vendor was contacted early about this disclosure but did not respond in any way.
A weakness has been identified in HeyCyan App 1.0.103 on Android. Affected is an unknown function of the file AndroidManifest.xml of the component Network Security Configuration. Executing a manipulation can lead to cleartext transmission of sensitive information. The attack can be launched remotely. The attack requires a high level of complexity. The exploitability is told to be difficult. The vendor was contacted early about this disclosure but did not respond in any way.
CVE-2026-116104 is a code injection vulnerability in Sony Neural Network Libraries up to version 1.39.0, specifically in the function func_set_nnabla_version_decorate within the NNP Converter component. The flaw allows remote attackers to manipulate the argument function.type, leading to code injection. Exploit code has been publicly released. The affected products are no longer supported by the vendor.