Vulnfeed

Archives
Log in
Subscribe
October 15, 2026

[vulnfeed] 5 critical CVEs — 2026-10-15 16:00 UTC

vulnfeed Critical alert — 2026-10-15 19:58 UTC
5 new critical CVEs in the last 5 hours — 5 CVSS ≥ 9.0
New vulnerabilities
CVE-2026-57155CRITICAL
OPNsense is a FreeBSD based firewall and routing platform. Prior to version 26.1.11, the Firewall Alias GeoIP
OPNsense is a FreeBSD based firewall and routing platform. Prior to version 26.1.11, the Firewall Alias GeoIP importer's process_zip() and process_gzip() paths in src/opnsense/scripts/filter/lib/alias
CVSS 9.9
CVE-2026-105474CRITICAL
A server-side template injection exists in SolusVM 2 up to version 2.0.0-44576 that allows remote authenticate
A server-side template injection exists in SolusVM 2 up to version 2.0.0-44576 that allows remote authenticated users to execute arbitrary code as root.
CVSS 9.4
CVE-2026-110957CRITICAL
A vulnerability has been found in Wavlink WL-WN530BE2-A up to M30BE2_V250604. The affected element is the func
A vulnerability has been found in Wavlink WL-WN530BE2-A up to M30BE2_V250604. The affected element is the function sub_12580 of the file api.cgi of the component Login Processing. The manipulation of
CVSS 9.3
CVE-2026-110958CRITICAL
A vulnerability was found in Wavlink WN530HG4B M30HG4B_V260724. The impacted element is an unknown function of
A vulnerability was found in Wavlink WN530HG4B M30HG4B_V260724. The impacted element is an unknown function of the file api.cgi. The manipulation results in heap-based buffer overflow. It is possible
CVSS 9.3
CVE-2026-47168CRITICAL
EspoCRM is an open source customer relationship management application. Prior to 9.3.7, an authenticated admin
EspoCRM is an open source customer relationship management application. Prior to 9.3.7, an authenticated administrator can supply crafted serialized PHP object data that is stored in background MassAc
CVSS 9.1

Live feed →  ·  Notification settings

vulnfeed critical alerts — vulnfeed.it. Unsubscribe

Don't miss what's next. Subscribe to Vulnfeed:
← Newer [vulnfeed] 17 critical CVEs — 2026-10-15 20:00 UTC Older → [vulnfeed] 9 critical CVEs — 2026-10-14 20:00 UTC
Powered by Buttondown, the easiest way to start and grow your newsletter.