[vulnfeed] 3 critical CVEs — 2026-10-11 12:00 UTC
vulnfeed
Critical alert — 2026-10-11 15:01 UTC
3 new critical CVEs
in the last 5 hours — 3 CVSS ≥ 9.0
New vulnerabilities
CVE-2026-108576CRITICAL
A vulnerability was found in TOZED X300 up to 6.01.3. This vulnerability affects the function process_ping of
A vulnerability was found in TOZED X300 up to 6.01.3. This vulnerability affects the function process_ping of the component IPPingDiagnostics Handler. The manipulation of the argument Host results in
CVSS 10.0
CVE-2026-108753CRITICAL
Agnaistic agnai through 1.0.555 contains a hard-coded credentials vulnerability in self-host.docker-compose.ym
Agnaistic agnai through 1.0.555 contains a hard-coded credentials vulnerability in self-host.docker-compose.yml, which sets a fixed admin password and public JWT secret. Unauthenticated attackers can
CVSS 9.3
CVE-2026-108860CRITICAL
BotSharp through 5.2.0 contains an authentication bypass vulnerability that allows unauthenticated remote atta
BotSharp through 5.2.0 contains an authentication bypass vulnerability that allows unauthenticated remote attackers to forge bearer tokens using the hard-coded Jwt:Key in WebStarter appsettings.json.
CVSS 9.3
vulnfeed critical alerts — vulnfeed.it.
Unsubscribe
Don't miss what's next. Subscribe to Vulnfeed: