[vulnfeed] 3 critical CVEs — 2026-10-19 04:00 UTC
vulnfeed
Critical alert — 2026-10-19 05:06 UTC
3 new critical CVEs
in the last 5 hours — 3 CVSS ≥ 9.0
New vulnerabilities
CVE-2026-108983CRITICAL
A vulnerability is in Web Server default connection ports under the process name GeoWebServer.exe .
A vulnerability is in Web Server default connection ports under the process name GeoWebServer.exe .
CVSS 9.8
CVE-2026-102503CRITICAL
Missing Authentication for Critical Function (CWE-306) and Missing Authorization (CWE-862) in the /libp2p-http
Missing Authentication for Critical Function (CWE-306) and Missing Authorization (CWE-862) in the /libp2p-http ingress server (StartIngressServer in cmd/sam-node/node.go) in Google OSS Agent Mesh (SAM
CVSS 9.3
CVE-2026-103091CRITICAL
Missing Authorization (CWE-862) and Initialization of a Resource with an Insecure Default (CWE-1188) in the MC
Missing Authorization (CWE-862) and Initialization of a Resource with an Insecure Default (CWE-1188) in the MCP proxy (HandleStreamPassThrough in mcp_service.go) and OIDC registration flow (GET /info
CVSS 9.3
vulnfeed critical alerts — vulnfeed.it.
Unsubscribe
Don't miss what's next. Subscribe to Vulnfeed: