[vulnfeed] 45 critical CVEs — 2026-10-06 20:00 UTC
vulnfeed
Critical alert — 2026-10-06 23:59 UTC
45 new critical CVEs
in the last 5 hours — 45 CVSS ≥ 9.0
New vulnerabilities
CVE-2026-79798CRITICAL
SQL injection vulnerabilities in the web-based management interface of ClearPass Policy Manager could allow a
SQL injection vulnerabilities in the web-based management interface of ClearPass Policy Manager could allow a low-privileged authenticated remote attacker to conduct SQL injection attacks against the
CVSS 9.9
CVE-2026-55330CRITICAL
In BluetoothCccHandlerCallbackImpl of bluetooth_ccc.cc, there is a possible use-after-free due to a logic erro
In BluetoothCccHandlerCallbackImpl of bluetooth_ccc.cc, there is a possible use-after-free due to a logic error in the code. This could lead to remote code execution with no additional execution privi
CVSS 9.8
CVE-2026-106446CRITICAL
Handlebars provides the power necessary to let users build semantic templates. From 4.0.0 until 4.7.10, Handle
Handlebars provides the power necessary to let users build semantic templates. From 4.0.0 until 4.7.10, Handlebars.compile() and Handlebars.precompile() accept pre-parsed AST objects while validating
CVSS 9.8
CVE-2026-76742CRITICAL
Authentication bypass vulnerabilities exist in the web management interface of AOS-S. Successful exploitation
Authentication bypass vulnerabilities exist in the web management interface of AOS-S. Successful exploitation could allow an unauthenticated remote attacker to gain unauthorized access to the affected
CVSS 9.8
CVE-2026-76743CRITICAL
A vulnerability have been identified in the management interface of AOS-S that could potentially allow an unau
A vulnerability have been identified in the management interface of AOS-S that could potentially allow an unauthenticated remote attacker to circumvent existing authentication controls if certain prec
CVSS 9.8
CVE-2026-76744CRITICAL
Buffer overflow vulnerabilities exist in the affected interface of AOS-S. Successful exploitation could allow
Buffer overflow vulnerabilities exist in the affected interface of AOS-S. Successful exploitation could allow an unauthenticated remote attacker to execute arbitrary code.
CVSS 9.8
CVE-2026-76750CRITICAL
Deserialization of untrusted data vulnerabilities exist in the web interface of HPE Networking ClearPass Polic
Deserialization of untrusted data vulnerabilities exist in the web interface of HPE Networking ClearPass Policy Manager. Successful exploitation could allow an unauthenticated remote attacker to execu
CVSS 9.8
CVE-2026-76751CRITICAL
A missing integrity verification vulnerability exists in the OnGuard agent of ClearPass Policy Manager. Succes
A missing integrity verification vulnerability exists in the OnGuard agent of ClearPass Policy Manager. Successful exploitation could allow an unauthenticated, remote attacker to execute arbitrary cod
CVSS 9.8
CVE-2026-76752CRITICAL
Authentication bypass vulnerabilities exist in the web-based management and API interfaces of HPE Networking C
Authentication bypass vulnerabilities exist in the web-based management and API interfaces of HPE Networking ClearPass Policy Manager. Successful exploitation could allow an unauthenticated remote att
CVSS 9.8
CVE-2026-76753CRITICAL
A format string vulnerability in an affected service interface of HPE Networking ClearPass Policy Manager coul
A format string vulnerability in an affected service interface of HPE Networking ClearPass Policy Manager could allow an unauthenticated remote attacker to corrupt process memory. Successful exploitat
CVSS 9.8
CVE-2026-76754CRITICAL
A vulnerability in an affected interface of ClearPass Policy Manager could allow an unauthenticated remote att
A vulnerability in an affected interface of ClearPass Policy Manager could allow an unauthenticated remote attacker to conduct SQL injection attacks against the ClearPass Policy Manager instance. Succ
CVSS 9.8
CVE-2026-79796CRITICAL
Vulnerabilities have been identified in the affected interface of ClearPass Policy Manager that could potentia
Vulnerabilities have been identified in the affected interface of ClearPass Policy Manager that could potentially allow an unauthenticated remote attacker to circumvent existing authentication control
CVSS 9.8
CVE-2026-79801CRITICAL
A missing integrity verification vulnerability in the client agent software of HPE Networking ClearPass Policy
A missing integrity verification vulnerability in the client agent software of HPE Networking ClearPass Policy Manager could allow an unauthenticated remote attacker to introduce untrusted code. Succe
CVSS 9.8
CVE-2026-79805CRITICAL
An authenticated path traversal vulnerability exists in ClearPass Policy Manager. Successful exploitation coul
An authenticated path traversal vulnerability exists in ClearPass Policy Manager. Successful exploitation could allow an attacker to read and modify certain files on the underlying operating system.
CVSS 9.8
CVE-2026-102322CRITICAL
Incorrect Authorization in SiteIsolation in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to
Incorrect Authorization in SiteIsolation in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: High)
CVSS 9.6
vulnfeed critical alerts — vulnfeed.it.
Unsubscribe
Don't miss what's next. Subscribe to Vulnfeed: